r4522 - in trunk/src/target: . AR6kSDK.build_sw.18 AR6kSDK.build_sw.18/host AR6kSDK.build_sw.18/host/bmi AR6kSDK.build_sw.18/host/bmi/include AR6kSDK.build_sw.18/host/bmi/src AR6kSDK.build_sw.18/host/hif AR6kSDK.build_sw.18/host/hif/sdio AR6kSDK.build_sw.18/host/hif/sdio/linux_athsdio AR6kSDK.build_sw.18/host/hif/sdio/linux_athsdio/include AR6kSDK.build_sw.18/host/hif/sdio/linux_athsdio/src AR6kSDK.build_sw.18/host/htc2 AR6kSDK.build_sw.18/host/htc2/AR6000 AR6kSDK.build_sw.18/host/include AR6kSDK.build_sw.18/host/miscdrv AR6kSDK.build_sw.18/host/os AR6kSDK.build_sw.18/host/os/linux AR6kSDK.build_sw.18/host/os/linux/include AR6kSDK.build_sw.18/host/sdiostack AR6kSDK.build_sw.18/host/sdiostack/scripts AR6kSDK.build_sw.18/host/sdiostack/src AR6kSDK.build_sw.18/host/sdiostack/src/busdriver AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/linux AR6kSDK.build_sw.18/host/sdiostack/src/hcd AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/linux AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/linux AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/linux AR6kSDK.build_sw.18/host/sdiostack/src/include AR6kSDK.build_sw.18/host/sdiostack/src/include/linux AR6kSDK.build_sw.18/host/sdiostack/src/lib AR6kSDK.build_sw.18/host/sdiostack/src/lib/linux AR6kSDK.build_sw.18/host/sdiostack/src/linux AR6kSDK.build_sw.18/host/sdiostack/src/linux/sdioplatformdriver AR6kSDK.build_sw.18/host/support AR6kSDK.build_sw.18/host/tools AR6kSDK.build_sw.18/host/tools/bmiloader AR6kSDK.build_sw.18/host/tools/wmiconfig AR6kSDK.build_sw.18/host/wlan AR6kSDK.build_sw.18/host/wlan/include AR6kSDK.build_sw.18/host/wlan/src AR6kSDK.build_sw.18/host/wmi AR6kSDK.build_sw.18/include AR6kSDK.build_sw.18/include/AR6001

matt_hsu at docs.openmoko.org matt_hsu at docs.openmoko.org
Thu Jul 10 13:59:09 CEST 2008


Author: matt_hsu
Date: 2008-07-10 13:59:08 +0200 (Thu, 10 Jul 2008)
New Revision: 4522

Added:
   trunk/src/target/AR6kSDK.build_sw.18/
   trunk/src/target/AR6kSDK.build_sw.18/Makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/
   trunk/src/target/AR6kSDK.build_sw.18/host/Makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/README
   trunk/src/target/AR6kSDK.build_sw.18/host/apps/
   trunk/src/target/AR6kSDK.build_sw.18/host/bmi/
   trunk/src/target/AR6kSDK.build_sw.18/host/bmi/include/
   trunk/src/target/AR6kSDK.build_sw.18/host/bmi/include/bmi_internal.h
   trunk/src/target/AR6kSDK.build_sw.18/host/bmi/src/
   trunk/src/target/AR6kSDK.build_sw.18/host/bmi/src/bmi.c
   trunk/src/target/AR6kSDK.build_sw.18/host/bmi/src/makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/hif/
   trunk/src/target/AR6kSDK.build_sw.18/host/hif/sdio/
   trunk/src/target/AR6kSDK.build_sw.18/host/hif/sdio/Makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/hif/sdio/linux_athsdio/
   trunk/src/target/AR6kSDK.build_sw.18/host/hif/sdio/linux_athsdio/include/
   trunk/src/target/AR6kSDK.build_sw.18/host/hif/sdio/linux_athsdio/include/hif_internal.h
   trunk/src/target/AR6kSDK.build_sw.18/host/hif/sdio/linux_athsdio/src/
   trunk/src/target/AR6kSDK.build_sw.18/host/hif/sdio/linux_athsdio/src/hif.c
   trunk/src/target/AR6kSDK.build_sw.18/host/htc2/
   trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/
   trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/ar6k.c
   trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/ar6k.h
   trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/ar6k_events.c
   trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc.c
   trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_debug.h
   trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_internal.h
   trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_recv.c
   trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_send.c
   trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_services.c
   trunk/src/target/AR6kSDK.build_sw.18/host/include/
   trunk/src/target/AR6kSDK.build_sw.18/host/include/a_config.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/a_debug.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/a_drv.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/a_drv_api.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/a_osapi.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/a_types.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/ar6000_api.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/ar6000_diag.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/athdrv.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/athendpack.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/athstartpack.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/bmi.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/bmi_msg.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/common_drv.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/dbglog_api.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/dl_list.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/dset_api.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/gpio_api.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/hif.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/host_version.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/htc_api.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/htc_packet.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/wlan_api.h
   trunk/src/target/AR6kSDK.build_sw.18/host/include/wmi_api.h
   trunk/src/target/AR6kSDK.build_sw.18/host/localmake.linux.inc
   trunk/src/target/AR6kSDK.build_sw.18/host/miscdrv/
   trunk/src/target/AR6kSDK.build_sw.18/host/miscdrv/common_drv.c
   trunk/src/target/AR6kSDK.build_sw.18/host/miscdrv/credit_dist.c
   trunk/src/target/AR6kSDK.build_sw.18/host/miscdrv/makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/os/
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/Makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/ar6000_drv.c
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/ar6000_raw_if.c
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/ar6000_drv.h
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/ar6xapi_linux.h
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/athdrv_linux.h
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/athendpack_linux.h
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/athstartpack_linux.h
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/athtypes_linux.h
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/config_linux.h
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/debug_linux.h
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/ieee80211_ioctl.h
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/osapi_linux.h
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/ioctl.c
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/netbuf.c
   trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/wireless_ext.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/armfnld.scr
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/armld.scr
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/armload.txt
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/armunld.scr
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/bldemsdio.scr
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/build.scr.all
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/build.scr.hdk
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/build.scr.pdk
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/getobjects.scr
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/gmmodld.scr
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/loadsdiobd.scr
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/loadsdiofn.scr
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/loadsdiosample.scr
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/makesdiosampledev.scr
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/package_linux_src.scr
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/sdioload.scr
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/sdiounload.scr
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/testmemory.scr
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/testsample.scr
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/unloadsdiobd.scr
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/Makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/Makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/_busdriver.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/linux/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/linux/sdio_bus_os.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_bus.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_bus_events.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_bus_misc.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_busdriver.ko
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_busdriver.mod.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_function.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/common.mk
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/Makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/Makefile.dnm
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/Makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/linux/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/linux/sdio_hcd_linux.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/linux/sdio_hcd_os.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/pci_ellen_readme.txt
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/sdio_hcd.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/sdio_pciellen_hcd.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/sdio_pciellen_hcd.ko
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/sdio_pciellen_hcd.mod.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/Makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/linux/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/linux/sdio_hcd_os.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/pci_std_readme.txt
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/sdio_pcistd_hcd.ko
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/sdio_pcistd_hcd.mod.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/linux/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/linux/sdio_std_hcd_linux.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/linux/sdio_std_hcd_linux_lib.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/linux/sdio_std_hcd_os.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/sdio_std_hcd.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/sdio_std_hcd.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/stdhost_readme.txt
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/_sdio_defs.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/ctendpack.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/ctstartpack.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/ctsystem.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/linux/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/linux/ctsystem_linux.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/mmc_defs.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdio_busdriver.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdio_hcd_defs.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdio_hcd_defs_pdk.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdio_lib.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdlist.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/Makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/_sdio_lib.h
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/linux/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/linux/sdio_lib_os.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/sdio_lib.ko
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/sdio_lib.mod.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/sdio_lib_c.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/linux/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/linux/Makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/linux/sdioplatformdriver/
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/linux/sdioplatformdriver/Makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/linux/sdioplatformdriver/sdioplatformdriver.c
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/localmake.linux.inc
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/localmake.linux.private.inc
   trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/localmake.qnx.inc
   trunk/src/target/AR6kSDK.build_sw.18/host/support/
   trunk/src/target/AR6kSDK.build_sw.18/host/support/loadAR6000.sh
   trunk/src/target/AR6kSDK.build_sw.18/host/tools/
   trunk/src/target/AR6kSDK.build_sw.18/host/tools/bmiloader/
   trunk/src/target/AR6kSDK.build_sw.18/host/tools/bmiloader/Makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/tools/bmiloader/bmiloader.c
   trunk/src/target/AR6kSDK.build_sw.18/host/tools/wmiconfig/
   trunk/src/target/AR6kSDK.build_sw.18/host/tools/wmiconfig/Makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/tools/wmiconfig/wmiconfig.c
   trunk/src/target/AR6kSDK.build_sw.18/host/tools/wmiconfig/wmiconfig.h
   trunk/src/target/AR6kSDK.build_sw.18/host/wlan/
   trunk/src/target/AR6kSDK.build_sw.18/host/wlan/include/
   trunk/src/target/AR6kSDK.build_sw.18/host/wlan/include/ieee80211.h
   trunk/src/target/AR6kSDK.build_sw.18/host/wlan/include/ieee80211_node.h
   trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/
   trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/wlan_node.c
   trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/wlan_recv_beacon.c
   trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/wlan_utils.c
   trunk/src/target/AR6kSDK.build_sw.18/host/wmi/
   trunk/src/target/AR6kSDK.build_sw.18/host/wmi/makefile
   trunk/src/target/AR6kSDK.build_sw.18/host/wmi/wmi.c
   trunk/src/target/AR6kSDK.build_sw.18/host/wmi/wmi_doc.h
   trunk/src/target/AR6kSDK.build_sw.18/host/wmi/wmi_host.h
   trunk/src/target/AR6kSDK.build_sw.18/include/
   trunk/src/target/AR6kSDK.build_sw.18/include/AR6001/
   trunk/src/target/AR6kSDK.build_sw.18/include/AR6001/AR6001_regdump.h
   trunk/src/target/AR6kSDK.build_sw.18/include/AR6001/AR6K_version.h
   trunk/src/target/AR6kSDK.build_sw.18/include/AR6001/AR6K_version.h.NEW
   trunk/src/target/AR6kSDK.build_sw.18/include/AR6Khwreg.h
   trunk/src/target/AR6kSDK.build_sw.18/include/athdefs.h
   trunk/src/target/AR6kSDK.build_sw.18/include/bmi_msg.h
   trunk/src/target/AR6kSDK.build_sw.18/include/dbglog.h
   trunk/src/target/AR6kSDK.build_sw.18/include/dbglog_id.h
   trunk/src/target/AR6kSDK.build_sw.18/include/dset_internal.h
   trunk/src/target/AR6kSDK.build_sw.18/include/dsetid.h
   trunk/src/target/AR6kSDK.build_sw.18/include/gpio.h
   trunk/src/target/AR6kSDK.build_sw.18/include/htc.h
   trunk/src/target/AR6kSDK.build_sw.18/include/htc_services.h
   trunk/src/target/AR6kSDK.build_sw.18/include/ini_dset.h
   trunk/src/target/AR6kSDK.build_sw.18/include/regDb.h
   trunk/src/target/AR6kSDK.build_sw.18/include/regdump.h
   trunk/src/target/AR6kSDK.build_sw.18/include/targaddrs.h
   trunk/src/target/AR6kSDK.build_sw.18/include/testcmd.h
   trunk/src/target/AR6kSDK.build_sw.18/include/wlan_dset.h
   trunk/src/target/AR6kSDK.build_sw.18/include/wmi.h
   trunk/src/target/AR6kSDK.build_sw.18/include/wmix.h
Log:
Init commit for wmi unitility 



Added: trunk/src/target/AR6kSDK.build_sw.18/Makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/Makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/Makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,180 @@
+#############################################################
+# Required variables for each makefile
+# Discard this section from all parent makefiles
+# Expected variables (with automatic defaults):
+#   CSRCS (all "C" files in the dir)
+#   SUBDIRS (all subdirs with a Makefile)
+#   GEN_LIBS - list of libs to be generated ()
+#   GEN_IMAGES - list of images to be generated ()
+#   COMPONENTS_xxx - a list of libs/objs in the form
+#     subdir/lib to be extracted and rolled up into
+#     a generated lib/image xxx.a ()
+#   DEPENDS_xxx - a list of explicit dependencies
+#   TARGET - platform name
+#
+ifndef PDIR
+
+SUBDIRS = host target
+
+endif
+
+
+#############################################################
+# Configuration i.e. compile options etc.
+# Target specific stuff (defines etc.) goes in here!
+# Generally values applying to a tree are captured in the
+#   makefile at its root level - these are then overridden
+#   for a subtree within the makefile rooted therein
+#
+
+#############################################################
+# Computed variables
+# Should be done in top-level makefile only
+#
+
+CSRCS ?= $(wildcard *.c)
+ASRCs ?= $(wildcard *.s)
+ASRCS ?= $(wildcard *.S)
+SUBDIRS ?= $(patsubst %/,%,$(dir $(wildcard */Makefile)))
+
+ODIR := .output
+OBJODIR := $(ODIR)/$(TARGET)/obj
+
+OBJS := $(CSRCS:%.c=$(OBJODIR)/%.o) \
+	$(ASRCs:%.s=$(OBJODIR)/%.o) \
+	$(ASRCS:%.S=$(OBJODIR)/%.o)
+
+DEPS := $(CSRCS:%.c=$(OBJODIR)/%.d) \
+	$(ASRCs:%.s=$(OBJODIR)/%.d) \
+	$(ASRCS:%.S=$(OBJODIR)/%.d)
+
+LIBODIR := $(ODIR)/$(TARGET)/lib
+OLIBS := $(GEN_LIBS:%=$(LIBODIR)/%)
+
+IMAGEODIR := $(ODIR)/$(TARGET)/image
+OIMAGES := $(GEN_IMAGES:%=$(IMAGEODIR)/%)
+
+BINODIR := $(ODIR)/$(TARGET)/bin
+OBINS := $(GEN_BINS:%=$(BINODIR)/%) \
+         $(FIRMWARE_BINS:%=$(BINODIR)/%) \
+
+CPPFLAGS = $(COPTS) $(DEFINES) $(INCLUDES)
+CFLAGS = $(CPPFLAGS)
+
+DPPFLAGS = $(DOPTS) $(DDEFINES) $(INCLUDES)
+DFLAGS = $(DPPFLAGS)
+
+EXTRACT_DIR = $(ODIR)/$(TARGET)/.extract
+UP_EXTRACT_DIR = ../../..
+
+#############################################################
+# Functions
+#
+
+define ShortcutRule
+$(1): .subdirs $(2)/$(1)
+endef
+
+define MakeLibrary
+DEP_LIBS_$(1) = $$(foreach lib,$$(filter %.a,$$(COMPONENTS_$(1))),$$(dir $$(lib))$$(LIBODIR)/$$(notdir $$(lib)))
+DEP_OBJS_$(1) = $$(foreach obj,$$(filter %.o,$$(COMPONENTS_$(1))),$$(dir $$(obj))$$(OBJODIR)/$$(notdir $$(obj)))
+$$(LIBODIR)/$(1).a: $$(OBJS) $$(DEP_OBJS_$(1)) $$(DEP_LIBS_$(1))
+	@mkdir -p $$(LIBODIR)
+	$$(if $$(filter %.a,$$?),mkdir -p $$(EXTRACT_DIR)_$(1))
+	$$(if $$(filter %.a,$$?),cd $$(EXTRACT_DIR)_$(1); $$(foreach lib,$$(filter %.a,$$?),$$(AR) xo $$(UP_EXTRACT_DIR)/$$(lib);))
+	$$(AR) ru $$@ $$(filter %.o,$$?) $$(if $$(filter %.a,$$?),$$(EXTRACT_DIR)_$(1)/*.o)
+	$$(if $$(filter %.a,$$?),$$(RM) -r $$(EXTRACT_DIR)_$(1))
+endef
+
+define MakeImage
+DEP_LIBS_$(1) = $$(foreach lib,$$(filter %.a,$$(COMPONENTS_$(1))),$$(dir $$(lib))$$(LIBODIR)/$$(notdir $$(lib)))
+DEP_OBJS_$(1) = $$(foreach obj,$$(filter %.o,$$(COMPONENTS_$(1))),$$(dir $$(obj))$$(OBJODIR)/$$(notdir $$(obj)))
+$$(IMAGEODIR)/$(1).out: $$(OBJS) $$(DEP_OBJS_$(1)) $$(DEP_LIBS_$(1)) $$(DEPENDS_$(1))
+	@mkdir -p $$(IMAGEODIR)
+	$$(CC) $$(LDFLAGS) $$(if $$(LINKFLAGS_$(1)),$$(LINKFLAGS_$(1)),$$(LINKFLAGS_DEFAULT) $$(OBJS) $$(DEP_OBJS_$(1)) $$(DEP_LIBS_$(1))) -o $$@ 
+endef
+
+#############################################################
+# Rules base
+# Should be done in top-level makefile only
+#
+
+all:	.subdirs $(OBJS) $(OLIBS) $(OIMAGES) $(OBINS)
+
+clean:
+	$(foreach d, $(SUBDIRS), $(MAKE) -C $(d) clean;)
+	$(RM) -r $(ODIR)/$(TARGET)
+
+clobber:
+	$(foreach d, $(SUBDIRS), $(MAKE) -C $(d) clobber;)
+	$(RM) -r $(ODIR)
+
+.subdirs:
+	@set -e; $(foreach d, $(SUBDIRS), $(MAKE) -C $(d);)
+
+ifdef DEPS
+sinclude $(DEPS)
+endif
+
+$(OBJODIR)/%.o: %.c
+	@mkdir -p $(OBJODIR);
+	$(CC) $(if $(findstring $<,$(DSRCS)),$(DFLAGS),$(CFLAGS)) $(COPTS_$(*F)) -o $@ -c $<
+
+$(OBJODIR)/%.d: %.c
+	@mkdir -p $(OBJODIR); \
+	set -e; rm -f $@; \
+	$(CC) -M $(CPPFLAGS) $< > $@.$$$$; \
+	sed 's,\($*\.o\)[ :]*,$(OBJODIR)/\1 $@ : ,g' < $@.$$$$ > $@; \
+	rm -f $@.$$$$
+
+$(OBJODIR)/%.o: %.s
+	@mkdir -p $(OBJODIR);
+	$(CC) $(CFLAGS) -o $@ -c $<
+
+$(OBJODIR)/%.d: %.s
+	@mkdir -p $(OBJODIR); \
+	set -e; rm -f $@; \
+	$(CC) -M $(CPPFLAGS) $< > $@.$$$$; \
+	sed 's,\($*\.o\)[ :]*,$(OBJODIR)/\1 $@ : ,g' < $@.$$$$ > $@; \
+	rm -f $@.$$$$
+
+$(OBJODIR)/%.o: %.S
+	@mkdir -p $(OBJODIR);
+	$(CC) $(CFLAGS) -D__ASSEMBLER__ -o $@ -c $<
+
+$(OBJODIR)/%.d: %.S
+	@mkdir -p $(OBJODIR); \
+	set -e; rm -f $@; \
+	$(CC) -M $(CPPFLAGS) $< > $@.$$$$; \
+	sed 's,\($*\.o\)[ :]*,$(OBJODIR)/\1 $@ : ,g' < $@.$$$$ > $@; \
+	rm -f $@.$$$$
+
+$(BINODIR)/%.bin: $(IMAGEODIR)/%.out
+	@mkdir -p $(BINODIR);
+	$(OBJCOPY) -O binary $< $@ 
+
+$(foreach lib,$(GEN_LIBS),$(eval $(call ShortcutRule,$(lib),$(LIBODIR))))
+
+$(foreach image,$(GEN_IMAGES),$(eval $(call ShortcutRule,$(image),$(IMAGEODIR))))
+
+$(foreach lib,$(GEN_LIBS),$(eval $(call MakeLibrary,$(basename $(lib)))))
+
+$(foreach image,$(GEN_IMAGES),$(eval $(call MakeImage,$(basename $(image)))))
+
+$(foreach bin,$(GEN_BINS),$(eval $(call MakeBin,$(basename $(bin)))))
+
+#############################################################
+# Recursion Magic - Don't touch this!!
+#
+# Each subtree potentially has an include directory
+#   corresponding to the common APIs applicable to modules
+#   rooted at that subtree. Accordingly, the INCLUDE PATH
+#   of a module can only contain the include directories up
+#   its parent path, and not its siblings
+#
+# Required for each makefile to inherit from the parent
+#
+
+INCLUDES := $(INCLUDES) -I $(PDIR)include -I $(PDIR)include/$(TARGET)
+PDIR := ../$(PDIR)
+sinclude $(PDIR)Makefile

Added: trunk/src/target/AR6kSDK.build_sw.18/host/Makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/Makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/Makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,199 @@
+# AR6K Host driver makefile
+# Copyright 2006 Atheros Communications, Inc.
+# 
+# Minimal build invocation:
+#   
+#     make (all | clean | clobber)  
+#
+# Extended Make invocation:
+#
+#     make ATH_BUILD_TYPE=<build type> ATH_SDIO_STACK_BASE=<sdio stack install path> (all | clean | clobber)
+#
+# Notes:
+#     1. This makefile must be invoked from the host/ directory
+#     2. The <build type> must match an entry in localmake.linux.inc.
+#     3. The localmake.linux.inc can be overridden using an include file outside the build tree.
+#        This file (name and path) can be set via the ATH_MAKE_INCLUDE_OVERRIDE variable.
+#        ** If ATH_MAKE_INCLUDE_OVERRIDE is used, you can define all build variables in that file 
+#        instead of using command line arguments **.  This feature is provided for developers
+#        that may want to customize the build using a single include file.
+#
+#        For example :
+#             
+#            " make ATH_MAKE_INCLUDE_OVERRIDE=$HOME/mymake.inc "
+#        
+#             could be used, as long as "mymake.inc" defines all the required variables (see below)
+#
+#  Required Variables:  
+#      
+#      ATH_OS_SUB_TYPE - on linux, this must be "linux_2_4" for 2.4 kernels or left blank for 2.6 kernels.
+#      ATH_LINUXPATH - linux kernel source path
+#      ATH_CROSS_COMPILE_TYPE - optional cross compiler path , leave blank for local gcc compilation
+#      ATH_ARCH_CPU_TYPE  - CPU architecture type, leave blank for local gcc compilation
+#      ATH_SDIO_STACK_BASE - SDIO Stack installation path to compile the SDIO HIF layer against an externally supplied
+#                            SDIO stack source.
+#
+#  Override variables:
+#
+#    ATH_MAKE_INCLUDE_OVERRIDE - full path to include file which overrides the default (localmake.linux.inc)
+#                                this file can contain other overrides specific to a developers
+#                                workspace environment.
+#    ATH_BUILD_OUTPUT_OVERRIDE - output path override for compiled executable and
+#                                database image
+#
+
+# Include local variables
+ifdef ATH_MAKE_INCLUDE_OVERRIDE
+_LOCALMAKE_INCLUDE = $(ATH_MAKE_INCLUDE_OVERRIDE)
+else
+_LOCALMAKE_INCLUDE = localmake.linux.inc
+endif
+
+-include $(_LOCALMAKE_INCLUDE)
+
+export  ATH_SRC_BASE
+export  ATH_BUILD_TYPE
+export  ATH_OS_SUB_TYPE
+export  ATH_LINUXPATH
+export  ATH_CROSS_COMPILE_TYPE
+export  ATH_ARCH_CPU_TYPE
+export  ATH_SDIO_STACK_BASE
+export  ATH_BUS_TYPE
+export  ATH_HC_DRIVERS
+
+ATH_SRC_BASE :=$(shell pwd)
+MAKE :=make
+CC :=$(ATH_CROSS_COMPILE_TYPE)gcc
+LD :=$(ATH_CROSS_COMPILE_TYPE)ld
+STRIP :=$(ATH_CROSS_COMPILE_TYPE)strip
+ATH_HIF_TYPE :=`echo $(ATH_BUS_TYPE) | tr [:upper:] [:lower:]`
+
+_INTERNAL_BUILD = $(shell if [ -r tools/flashloader ]; then echo "YES"; else echo "NO"; fi)
+
+export  STRIP
+
+# Set cross compile type (if any)
+ifdef ATH_CROSS_COMPILE_TYPE
+_CROSS_COMPILE_LINE := ARCH=$(ATH_ARCH_CPU_TYPE) CROSS_COMPILE=$(ATH_CROSS_COMPILE_TYPE)
+endif
+
+# Figure out module extension
+ifneq ($(ATH_OS_SUB_TYPE),linux_2_4)
+KMOD_EXTENSION :=ko
+endif
+ifeq ($(ATH_OS_SUB_TYPE),linux_2_4)
+KMOD_EXTENSION :=o
+endif
+
+# Set up object output areas
+ifdef ATH_BUILD_OUTPUT_OVERRIDE
+_COMPILED_OBJECTS_PATH :=$(ATH_BUILD_OUTPUT_OVERRIDE)
+COMPILED_BIN_OBJECTS_PATH :=$(ATH_BUILD_OUTPUT_OVERRIDE)
+COMPILED_IMAGE_OBJECTS_PATH :=$(ATH_BUILD_OUTPUT_OVERRIDE)
+_MAKE_IMAGE_OUTPUT_DIR :=
+_MAKE_BIN_OUTPUT_DIR :=
+_CLEAN_IMAGE_OUTPUT_DIR :=
+_CLEAN_BIN_OUTPUT_DIR :=
+else
+_COMPILED_OBJECTS_PATH := $(ATH_SRC_BASE)/.output/$(ATH_BUILD_TYPE)-$(ATH_BUS_TYPE)
+COMPILED_BIN_OBJECTS_PATH := $(ATH_SRC_BASE)/.output/bin
+COMPILED_IMAGE_OBJECTS_PATH :=$(_COMPILED_OBJECTS_PATH)/$(COMPILED_OBJECTS_PREFIX)image
+_MAKE_IMAGE_OUTPUT_DIR := mkdir --parents $(COMPILED_IMAGE_OBJECTS_PATH)
+_MAKE_BIN_OUTPUT_DIR := mkdir --parents $(COMPILED_BIN_OBJECTS_PATH)
+_CLEAN_IMAGE_OUTPUT_DIR := rm -R -f $(COMPILED_IMAGE_OBJECTS_PATH)
+_CLEAN_BIN_OUTPUT_DIR := rm -R -f $(COMPILED_BIN_OBJECTS_PATH)
+endif
+
+# Export the required variables to other Makefiles in the system
+export COMPILED_IMAGE_OBJECTS_PATH
+export COMPILED_BIN_OBJECTS_PATH
+
+all: modules
+
+modules:
+ifndef ATH_BUILD_TYPE 
+	@echo "Please edit the $(_LOCALMAKE_INCLUDE) file"
+	exit 1
+endif
+	$(_MAKE_IMAGE_OUTPUT_DIR)
+	$(_MAKE_BIN_OUTPUT_DIR)
+	$(MAKE)  $(_CROSS_COMPILE_LINE) -C $(ATH_LINUXPATH) ATH_HIF_TYPE=$(ATH_HIF_TYPE) SUBDIRS=$(ATH_SRC_BASE)/os/linux modules
+	$(MAKE) -C hif/$(ATH_HIF_TYPE)
+	$(MAKE) -C tools/bmiloader/
+	$(MAKE) -C tools/wmiconfig/
+ifeq ($(_INTERNAL_BUILD), YES)
+	$(MAKE) -C tools/mkdsetimg/
+	$(MAKE) -C tools/eeprom/
+	$(MAKE) -C tools/flashloader/
+	$(MAKE) -C tools/forcereset/
+	$(MAKE) -C tools/regDbGen/
+	$(MAKE) -C tools/ini2dset/
+	$(MAKE) -C tools/tcmd/
+	$(MAKE) -C tools/createimage/
+	$(MAKE) -C tools/checkTargetStatus/
+#	$(MAKE) -C tools/phyregs/
+	$(MAKE) -C tools/recEvent/
+	$(MAKE) -C tools/rompatcher/
+	$(MAKE) -C tools/bdiff/
+	$(MAKE) -C tools/licensing/
+	$(MAKE) -C tests/floodtest/
+	$(MAKE) -C tests/mboxping/
+#	$(MAKE) -C tests/dsetpatch/
+	$(MAKE) -C 3rdparty/supplicant/opensrc_0_4_9/
+	$(MAKE) -C 3rdparty/pgen/
+#	$(MAKE) -C 3rdparty/WPS/Intel_SDK_1_0_5/linux/	
+#	$(MAKE) -C dwsim/
+endif
+	cp -f $(ATH_SRC_BASE)/os/linux/ar6000.$(KMOD_EXTENSION) $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tools/bmiloader/bmiloader $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tools/wmiconfig/wmiconfig $(COMPILED_IMAGE_OBJECTS_PATH)
+ifeq ($(_INTERNAL_BUILD), YES)	
+	cp -f tools/mkdsetimg/mkdsetimg $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tools/eeprom/eeprom.AR6001 $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tools/eeprom/eeprom.AR6002 $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tools/flashloader/flashloader $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tools/forcereset/forcereset $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tools/createimage/createimage $(COMPILED_IMAGE_OBJECTS_PATH)
+#	cp -f tools/phyregs/phyregs $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tools/checkTargetStatus/checkTargetStatus $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tools/tcmd/athtestcmd $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tools/recEvent/recEvent $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tools/recEvent/restore.sh $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tools/rompatcher/rompatcher $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tools/rompatcher/fwpatch $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tools/bdiff/bdiff $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tests/floodtest/floodtest $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tests/mboxping/mboxping $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f tools/regDbGen/regulatory*.bin $(COMPILED_BIN_OBJECTS_PATH)
+#	cp -f tests/dsetpatch/regulatory*.diff $(COMPILED_BIN_OBJECTS_PATH)
+	cp -rf tools/ini2dset/ini_ar600* $(COMPILED_BIN_OBJECTS_PATH)
+	cp -f 3rdparty/supplicant/opensrc_0_4_9/wpa_supplicant  $(COMPILED_IMAGE_OBJECTS_PATH)
+	cp -f 3rdparty/supplicant/opensrc_0_4_9/wpa_cli  $(COMPILED_IMAGE_OBJECTS_PATH)	
+	cp -f 3rdparty/pgen/pgen  $(COMPILED_IMAGE_OBJECTS_PATH)	
+	cp -f 3rdparty/pgen/pget  $(COMPILED_IMAGE_OBJECTS_PATH)	
+	cp -f 3rdparty/pgen/phone  $(COMPILED_IMAGE_OBJECTS_PATH)	
+	cp -f 3rdparty/pgen/staut  $(COMPILED_IMAGE_OBJECTS_PATH)	
+	cp -f 3rdparty/pgen/upsd  $(COMPILED_IMAGE_OBJECTS_PATH)	
+#	cp -f 3rdparty/WPS/Intel_SDK_1_0_5/linux/wsccmd  $(COMPILED_IMAGE_OBJECTS_PATH)			
+#	cp -f 3rdparty/WPS/Intel_SDK_1_0_5/linux/wsc_config.txt  $(COMPILED_IMAGE_OBJECTS_PATH)				
+#	if [ -r  $(ATH_SRC_BASE)/3rdparty/supplicant/ds/linux/bin/$(ATH_BUILD_TYPE) ]; then \
+#		cp -f  $(ATH_SRC_BASE)/3rdparty/supplicant/ds/linux/bin/$(ATH_BUILD_TYPE)/*  $(COMPILED_IMAGE_OBJECTS_PATH);\
+#	fi
+endif
+
+clean:
+	rm -f os/linux/ar6000.mod.c os/linux/*.o os/linux/*.ko wmi/*.o htc/AR6000/src/*.o htc/*.o bmi/src/*.o wlan/src/*.o driver/* apps/wpa_supplicant/*.o tools/bmiloader/bmiloader tools/dsetsvr/dsetsvr tools/flashloader/flashloader tools/forcereset/forcereset tools/regDbGen/regDomainGenDb tools/regDbGen/*.bin tools/rompatcher/rompatcher tools/rompatcher/fwpatch tests/floodtest/floodtest tests/mboxping/mboxping tools/wmiconfig/wmiconfig 
+	rm -f os/linux/ar6000.mod.c os/linux/*.o os/linux/*.ko wmi/*.o htc/AR6000/src/*.o htc/*.o bmi/src/*.o wlan/src/*.o driver/* apps/wpa_supplicant/*.o tools/bmiloader/bmiloader tools/dsetsvr/dsetsvr tools/flashloader/flashloader tools/forcereset/forcereset tools/regDbGen/regDomainGenDb tools/regDbGen/*.bin tools/rompatcher/rompatcher tools/rompatcher/fwpatch tests/floodtest/floodtest tests/mboxping/mboxping tools/wmiconfig/wmiconfig tools/mkdsetimg/mkdsetimg tools/eeprom/eeprom
+	rm -f os/linux/ar6000.mod.c os/linux/*.o os/linux/*.ko wmi/*.o htc/AR6000/src/*.o htc/*.o bmi/src/*.o wlan/src/*.o driver/* apps/wpa_supplicant/*.o tools/bmiloader/bmiloader tools/dsetsvr/dsetsvr tools/flashloader/flashloader tools/forcereset/forcereset tools/regDbGen/regDomainGenDb tools/regDbGen/*.bin tools/rompatcher/rompatcher tools/rompatcher/fwpatch tests/floodtest/floodtest tests/mboxping/mboxping tools/wmiconfig/wmiconfig dwsim/*.o dwsim/dwsim tools/mkdsetimg/mkdsetimg tools/eeprom/eeprom.AR6001 tools/eeprom/eeprom.AR6002
+
+# The kernel module build process leaves some intermediate files, this will clean up all these files
+	find $(ATH_SRC_BASE) \( -not -path "*.output*" -a -name '*.[oas]' -o -name core -o -name '.*.flags' -o -name '.ko' -o -name '.*.cmd' \) -type f -print \
+		| grep -v lxdialog/ | xargs rm -f
+	$(MAKE) -C hif/$(ATH_HIF_TYPE) clean
+ifeq ($(_INTERNAL_BUILD), YES)		
+	$(MAKE) -C tools/ini2dset clean
+	$(MAKE) -C tests/dsetpatch/ clean
+endif
+
+clobber:clean
+	rm -rf .output

Added: trunk/src/target/AR6kSDK.build_sw.18/host/README
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/README	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/README	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,101 @@
+Sections
+A) Code Organization
+B) Building the code and loading the Driver
+
+A) Code organization
+
+The host side code for different platforms is organized as follows:
+1) os: Captures the os specific dependencies. The network adaptor driver is implemented in this directory.
+2) wmi: Implements the wireless module interface.
+3) htc: Implements the host transport communication interface.
+4) hif: Implements the host interconnect framework for different interfaces.
+6) tools: Contains the implementation for several tools used to interact with the wlan driver.
+7) wlan: Implements some utility functions related to the core wireless lan.
+8) sdiostack: Contains the sources for the SDIO/SPI stack.
+9) bmi: Implements the bootloader messaging interface.
+10) support: Contains scripts to load the driver and control some aspects of the wlan device using the tools present in the tools directory. 
+
+host/
+
+|-- Makefile
+|-- apps
+|-- bmi
+|   |-- include
+|   |   `-- bmi header files
+|   `-- src
+|       `-- bmi source files
+|-- hif
+|   |
+|   |-- sdio
+|       |-- Makefile
+|       `
+|-- htc
+|   |-- AR6000
+|       |-- include
+|       |   `-- htc header files
+|       `-- src
+|           `-- htc source files
+|-- include
+|   `-- common host header files
+|-- localmake.linux.inc
+|-- os
+|   `-- linux
+|       |-- Makefile
+|       |-- os specific wlan driver source files
+|       `-- include
+|           `-- os specific include files
+|-- sdiostack
+|   |-- doc
+|   |-- integrity
+|   |-- scripts
+|   |-- src
+|   |   |-- hcd
+|   |   |   |-- pci_ellen
+|   |   |   |-- pci_std
+|   |   |   `-- stdhost
+|   |   |-- include
+|   |   |-- lib
+|   |   |-- linux
+|   |   |-- loader
+|   |   |-- localmake.linux.inc
+|   |   |-- localmake.linux.private.inc
+
+|-- support
+|   |-- loadAR6000.sh
+|   |-- phyregs.bin
+|   |-- platform.sh
+|   |-- refclk.sh
+|   `-- tunefw.sh
+|-- tools
+|   `-- wmiconfig
+|-- wlan
+|   |-- include
+|   |   `-- wlan header files
+|   `-- src
+|       `-- wlan source files
+`-- wmi
+    `-- wmi source files
+
+
+B) Building the code
+   -----------------
+  cd into the top-level directory of the distribution
+  Set environment variables (also see host/localmake.linux.inc):
+      export WORKAREA=`pwd`  [Note: Use backticks, not quote marks]
+      export ATH_BUILD_TYPE=LOCAL_i686
+      export ATH_LINUXPATH=/usr/src/redhat/BUILD/kernel-2.6.9/linux-2.6.9  [Note: This is an example]
+      export ATH_BUS_TYPE=SDIO
+      export ATH_HC_DRIVERS=pci_std/
+      export ATH_PLATFORM=$ATH_BUILD_TYPE-$ATH_BUS_TYPE
+
+  Build device driver and support tools:
+      make -C host
+
+  Load the wireless driver on your system:
+     host/support/loadAR6000.sh
+
+  Configure the wireless network interface with ifconfig and iwconfig.
+  For example:
+     ifconfig eth1 192.168.1.99 up
+     iwconfig eth1 essid "MyAccessPointSSID"
+


Property changes on: trunk/src/target/AR6kSDK.build_sw.18/host/README
___________________________________________________________________
Name: svn:executable
   + *

Added: trunk/src/target/AR6kSDK.build_sw.18/host/bmi/include/bmi_internal.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/bmi/include/bmi_internal.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/bmi/include/bmi_internal.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,45 @@
+#ifndef BMI_INTERNAL_H
+#define BMI_INTERNAL_H
+/*
+ *
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#include "a_config.h"
+#include "athdefs.h"
+#include "a_types.h"
+#include "a_osapi.h"
+#include "a_debug.h"
+#include "AR6Khwreg.h"
+#include "bmi_msg.h"
+
+#define BMI_COMMUNICATION_TIMEOUT       100000
+
+/* ------ Global Variable Declarations ------- */
+A_BOOL bmiDone;
+
+A_STATUS
+bmiBufferSend(HIF_DEVICE *device,
+              A_UCHAR *buffer,
+              A_UINT32 length);
+
+A_STATUS
+bmiBufferReceive(HIF_DEVICE *device,
+                 A_UCHAR *buffer,
+                 A_UINT32 length);
+
+#endif

Added: trunk/src/target/AR6kSDK.build_sw.18/host/bmi/src/bmi.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/bmi/src/bmi.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/bmi/src/bmi.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,655 @@
+/*
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+
+#include "hif.h"
+#include "bmi.h"
+#include "htc_api.h"
+#include "bmi_internal.h"
+
+/*
+Although we had envisioned BMI to run on top of HTC, this is not what the
+final implementation boiled down to on dragon. Its a part of BSP and does
+not use the HTC protocol either. On the host side, however, we were still
+living with the original idea. I think the time has come to accept the truth
+and separate it from HTC which has been carrying BMI's burden all this while.
+It shall make HTC state machine relatively simpler
+*/
+
+/* APIs visible to the driver */
+void
+BMIInit(void)
+{
+    bmiDone = FALSE;
+}
+
+A_STATUS
+BMIDone(HIF_DEVICE *device)
+{
+    A_STATUS status;
+    A_UINT32 cid;
+
+    if (bmiDone) {
+        AR_DEBUG_PRINTF (ATH_DEBUG_BMI, ("BMIDone skipped\n"));
+        return A_OK;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI, ("BMI Done: Enter (device: 0x%p)\n", device));
+    bmiDone = TRUE;
+    cid = BMI_DONE;
+
+    status = bmiBufferSend(device, (A_UCHAR *)&cid, sizeof(cid));
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to write to the device\n"));
+        return A_ERROR;
+    }
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI, ("BMI Done: Exit\n"));
+
+    return A_OK;
+}
+
+A_STATUS
+BMIGetTargetInfo(HIF_DEVICE *device, struct bmi_target_info *targ_info)
+{
+    A_STATUS status;
+    A_UINT32 cid;
+
+    if (bmiDone) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Command disallowed\n"));
+        return A_ERROR;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI, ("BMI Get Target Info: Enter (device: 0x%p)\n", device));
+    cid = BMI_GET_TARGET_INFO;
+
+    status = bmiBufferSend(device, (A_UCHAR *)&cid, sizeof(cid));
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to write to the device\n"));
+        return A_ERROR;
+    }
+
+    status = bmiBufferReceive(device, (A_UCHAR *)&targ_info->target_ver,
+                                                sizeof(targ_info->target_ver));
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to read Target Version from the device\n"));
+        return A_ERROR;
+    }
+
+    if (targ_info->target_ver == TARGET_VERSION_SENTINAL) {
+        /* Determine how many bytes are in the Target's targ_info */
+        status = bmiBufferReceive(device, (A_UCHAR *)&targ_info->target_info_byte_count,
+                                            sizeof(targ_info->target_info_byte_count));
+        if (status != A_OK) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to read Target Info Byte Count from the device\n"));
+            return A_ERROR;
+        }
+
+        /*
+         * The Target's targ_info doesn't match the Host's targ_info.
+         * We need to do some backwards compatibility work to make this OK.
+         */
+        A_ASSERT(targ_info->target_info_byte_count == sizeof(*targ_info));
+
+        /* Read the remainder of the targ_info */
+        status = bmiBufferReceive(device,
+                        ((A_UCHAR *)targ_info)+sizeof(targ_info->target_info_byte_count),
+                        sizeof(*targ_info)-sizeof(targ_info->target_info_byte_count));
+        if (status != A_OK) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to read Target Info (%d bytes) from the device\n",
+                        					targ_info->target_info_byte_count));
+            return A_ERROR;
+        }
+    } else {
+        /*
+         * Target must be an AR6001 whose firmware does not
+         * support BMI_GET_TARGET_INFO.  Construct the data
+         * that it would have sent.
+         */
+        targ_info->target_info_byte_count=sizeof(targ_info);
+        targ_info->target_type=TARGET_TYPE_AR6001;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI, ("BMI Get Target Info: Exit (ver: 0x%x type: 0x%x)\n",
+        							targ_info->target_ver, targ_info->target_type));
+
+    return A_OK;
+}
+
+A_STATUS
+BMIReadMemory(HIF_DEVICE *device,
+              A_UINT32 address,
+              A_UCHAR *buffer,
+              A_UINT32 length)
+{
+    A_UINT32 cid;
+    A_STATUS status;
+    A_UINT32 offset;
+    A_UINT32 remaining, rxlen;
+    static A_UCHAR data[BMI_DATASZ_MAX + sizeof(cid) + sizeof(address) + sizeof(length)];
+    memset (&data, 0, BMI_DATASZ_MAX + sizeof(cid) + sizeof(address) + sizeof(length));
+
+    if (bmiDone) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Command disallowed\n"));
+        return A_ERROR;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI,
+       			("BMI Read Memory: Enter (device: 0x%p, address: 0x%x, length: %d)\n",
+        			device, address, length));
+
+    cid = BMI_READ_MEMORY;
+
+    remaining = length;
+
+    while (remaining)
+    {
+        rxlen = (remaining < BMI_DATASZ_MAX) ? remaining : BMI_DATASZ_MAX;
+        offset = 0;
+        A_MEMCPY(&data[offset], &cid, sizeof(cid));
+        offset += sizeof(cid);
+        A_MEMCPY(&data[offset], &address, sizeof(address));
+        offset += sizeof(address);
+        A_MEMCPY(&data[offset], &rxlen, sizeof(rxlen));
+        offset += sizeof(length);
+
+        status = bmiBufferSend(device, data, offset);
+        if (status != A_OK) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to write to the device\n"));
+            return A_ERROR;
+        }
+        status = bmiBufferReceive(device, data, rxlen);
+        if (status != A_OK) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to read from the device\n"));
+            return A_ERROR;
+        }
+        A_MEMCPY(&buffer[length - remaining], data, rxlen);
+        remaining -= rxlen; address += rxlen;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI, ("BMI Read Memory: Exit\n"));
+    return A_OK;
+}
+
+A_STATUS
+BMIWriteMemory(HIF_DEVICE *device,
+               A_UINT32 address,
+               A_UCHAR *buffer,
+               A_UINT32 length)
+{
+    A_UINT32 cid;
+    A_STATUS status;
+    A_UINT32 offset;
+    A_UINT32 remaining, txlen;
+    const A_UINT32 header = sizeof(cid) + sizeof(address) + sizeof(length);
+    static A_UCHAR data[BMI_DATASZ_MAX + sizeof(cid) + sizeof(address) + sizeof(length)];
+	memset (&data, 0, header);
+
+    if (bmiDone) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Command disallowed\n"));
+        return A_ERROR;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI,
+         ("BMI Write Memory: Enter (device: 0x%p, address: 0x%x, length: %d)\n",
+         device, address, length));
+
+    cid = BMI_WRITE_MEMORY;
+
+    remaining = length;
+    while (remaining)
+    {
+        txlen = (remaining < (BMI_DATASZ_MAX - header)) ?
+                                       remaining : (BMI_DATASZ_MAX - header);
+        offset = 0;
+        A_MEMCPY(&data[offset], &cid, sizeof(cid));
+        offset += sizeof(cid);
+        A_MEMCPY(&data[offset], &address, sizeof(address));
+        offset += sizeof(address);
+        A_MEMCPY(&data[offset], &txlen, sizeof(txlen));
+        offset += sizeof(txlen);
+        A_MEMCPY(&data[offset], &buffer[length - remaining], txlen);
+        offset += txlen;
+        status = bmiBufferSend(device, data, offset);
+        if (status != A_OK) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to write to the device\n"));
+            return A_ERROR;
+        }
+        remaining -= txlen; address += txlen;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI, ("BMI Write Memory: Exit\n"));
+
+    return A_OK;
+}
+
+A_STATUS
+BMIExecute(HIF_DEVICE *device,
+           A_UINT32 address,
+           A_UINT32 *param)
+{
+    A_UINT32 cid;
+    A_STATUS status;
+    A_UINT32 offset;
+    static A_UCHAR data[sizeof(cid) + sizeof(address) + sizeof(*param)];
+    memset (&data, 0, sizeof(cid) + sizeof(address) + sizeof(*param));
+
+    if (bmiDone) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Command disallowed\n"));
+        return A_ERROR;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI,
+       ("BMI Execute: Enter (device: 0x%p, address: 0x%x, param: %d)\n",
+        device, address, *param));
+
+    cid = BMI_EXECUTE;
+
+    offset = 0;
+    A_MEMCPY(&data[offset], &cid, sizeof(cid));
+    offset += sizeof(cid);
+    A_MEMCPY(&data[offset], &address, sizeof(address));
+    offset += sizeof(address);
+    A_MEMCPY(&data[offset], param, sizeof(*param));
+    offset += sizeof(*param);
+    status = bmiBufferSend(device, data, offset);
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to write to the device\n"));
+        return A_ERROR;
+    }
+
+    status = bmiBufferReceive(device, data, sizeof(*param));
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to read from the device\n"));
+        return A_ERROR;
+    }
+
+    A_MEMCPY(param, data, sizeof(*param));
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI, ("BMI Execute: Exit (param: %d)\n", *param));
+    return A_OK;
+}
+
+A_STATUS
+BMISetAppStart(HIF_DEVICE *device,
+               A_UINT32 address)
+{
+    A_UINT32 cid;
+    A_STATUS status;
+    A_UINT32 offset;
+    static A_UCHAR data[sizeof(cid) + sizeof(address)];
+    memset (&data, 0, sizeof(cid) + sizeof(address));
+
+    if (bmiDone) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Command disallowed\n"));
+        return A_ERROR;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI,
+       ("BMI Set App Start: Enter (device: 0x%p, address: 0x%x)\n",
+        device, address));
+
+    cid = BMI_SET_APP_START;
+
+    offset = 0;
+    A_MEMCPY(&data[offset], &cid, sizeof(cid));
+    offset += sizeof(cid);
+    A_MEMCPY(&data[offset], &address, sizeof(address));
+    offset += sizeof(address);
+    status = bmiBufferSend(device, data, offset);
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to write to the device\n"));
+        return A_ERROR;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI, ("BMI Set App Start: Exit\n"));
+    return A_OK;
+}
+
+A_STATUS
+BMIReadSOCRegister(HIF_DEVICE *device,
+                   A_UINT32 address,
+                   A_UINT32 *param)
+{
+    A_UINT32 cid;
+    A_STATUS status;
+    A_UINT32 offset;
+    static A_UCHAR data[sizeof(cid) + sizeof(address)];
+    memset (&data, 0, sizeof(cid) + sizeof(address));
+
+    if (bmiDone) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Command disallowed\n"));
+        return A_ERROR;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI,
+       ("BMI Read SOC Register: Enter (device: 0x%p, address: 0x%x)\n",
+       device, address));
+
+    cid = BMI_READ_SOC_REGISTER;
+
+    offset = 0;
+    A_MEMCPY(&data[offset], &cid, sizeof(cid));
+    offset += sizeof(cid);
+    A_MEMCPY(&data[offset], &address, sizeof(address));
+    offset += sizeof(address);
+
+    status = bmiBufferSend(device, data, offset);
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to write to the device\n"));
+        return A_ERROR;
+    }
+
+    status = bmiBufferReceive(device, data, sizeof(*param));
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to read from the device\n"));
+        return A_ERROR;
+    }
+    A_MEMCPY(param, data, sizeof(*param));
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI, ("BMI Read SOC Register: Exit (value: %d)\n", *param));
+    return A_OK;
+}
+
+A_STATUS
+BMIWriteSOCRegister(HIF_DEVICE *device,
+                    A_UINT32 address,
+                    A_UINT32 param)
+{
+    A_UINT32 cid;
+    A_STATUS status;
+    A_UINT32 offset;
+    static A_UCHAR data[sizeof(cid) + sizeof(address) + sizeof(param)];
+
+    memset (&data, 0, sizeof(cid) + sizeof(address) + sizeof(param));
+
+    if (bmiDone) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Command disallowed\n"));
+        return A_ERROR;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI,
+     ("BMI Write SOC Register: Enter (device: 0x%p, address: 0x%x, param: %d)\n",
+     device, address, param));
+
+    cid = BMI_WRITE_SOC_REGISTER;
+
+    offset = 0;
+    A_MEMCPY(&data[offset], &cid, sizeof(cid));
+    offset += sizeof(cid);
+    A_MEMCPY(&data[offset], &address, sizeof(address));
+    offset += sizeof(address);
+    A_MEMCPY(&data[offset], &param, sizeof(param));
+    offset += sizeof(param);
+    status = bmiBufferSend(device, data, offset);
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to write to the device\n"));
+        return A_ERROR;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI, ("BMI Read SOC Register: Exit\n"));
+    return A_OK;
+}
+
+A_STATUS
+BMIrompatchInstall(HIF_DEVICE *device,
+                   A_UINT32 ROM_addr,
+                   A_UINT32 RAM_addr,
+                   A_UINT32 nbytes,
+                   A_UINT32 do_activate,
+                   A_UINT32 *rompatch_id)
+{
+    A_UINT32 cid;
+    A_STATUS status;
+    A_UINT32 offset;
+    static A_UCHAR data[sizeof(cid) + sizeof(ROM_addr) + sizeof(RAM_addr) +
+                                sizeof(nbytes) + sizeof(do_activate)];
+
+	memset (&data, 0, sizeof(cid) + sizeof(ROM_addr) + sizeof(RAM_addr) +
+                      sizeof(nbytes) + sizeof(do_activate));
+
+    if (bmiDone) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Command disallowed\n"));
+        return A_ERROR;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI,
+         ("BMI rompatch Install: Enter (device: 0x%p, ROMaddr: 0x%x, RAMaddr: 0x%x length: %d activate: %d)\n",
+         device, ROM_addr, RAM_addr, nbytes, do_activate));
+
+    cid = BMI_ROMPATCH_INSTALL;
+
+    offset = 0;
+    A_MEMCPY(&data[offset], &cid, sizeof(cid));
+    offset += sizeof(cid);
+    A_MEMCPY(&data[offset], &ROM_addr, sizeof(ROM_addr));
+    offset += sizeof(ROM_addr);
+    A_MEMCPY(&data[offset], &RAM_addr, sizeof(RAM_addr));
+    offset += sizeof(RAM_addr);
+    A_MEMCPY(&data[offset], &nbytes, sizeof(nbytes));
+    offset += sizeof(nbytes);
+    A_MEMCPY(&data[offset], &do_activate, sizeof(do_activate));
+    offset += sizeof(do_activate);
+    status = bmiBufferSend(device, data, offset);
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to write to the device\n"));
+        return A_ERROR;
+    }
+
+    status = bmiBufferReceive(device, (A_UCHAR *)rompatch_id, sizeof(*rompatch_id));
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to read from the device\n"));
+        return A_ERROR;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI, ("BMI rompatch Install: (rompatch_id=%d)\n", *rompatch_id));
+    return A_OK;
+}
+
+A_STATUS
+BMIrompatchUninstall(HIF_DEVICE *device,
+                     A_UINT32 rompatch_id)
+{
+    A_UINT32 cid;
+    A_STATUS status;
+    A_UINT32 offset;
+    static A_UCHAR data[sizeof(cid) + sizeof(rompatch_id)];
+    memset (&data, 0, sizeof(cid) + sizeof(rompatch_id));
+
+    if (bmiDone) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Command disallowed\n"));
+        return A_ERROR;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI,
+         ("BMI rompatch Uninstall: Enter (device: 0x%p, rompatch_id: %d)\n",
+         								 device, rompatch_id));
+
+    cid = BMI_ROMPATCH_UNINSTALL;
+
+    offset = 0;
+    A_MEMCPY(&data[offset], &cid, sizeof(cid));
+    offset += sizeof(cid);
+    A_MEMCPY(&data[offset], &rompatch_id, sizeof(rompatch_id));
+    offset += sizeof(rompatch_id);
+    status = bmiBufferSend(device, data, offset);
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to write to the device\n"));
+        return A_ERROR;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI, ("BMI rompatch UNinstall: (rompatch_id=0x%x)\n", rompatch_id));
+    return A_OK;
+}
+
+static A_STATUS
+_BMIrompatchChangeActivation(HIF_DEVICE *device,
+                             A_UINT32 rompatch_count,
+                             A_UINT32 *rompatch_list,
+                             A_UINT32 do_activate)
+{
+    A_UINT32 cid;
+    A_STATUS status;
+    A_UINT32 offset;
+    static A_UCHAR data[BMI_DATASZ_MAX + sizeof(cid) + sizeof(rompatch_count)];
+    A_UINT32 length;
+
+	memset (&data, 0, BMI_DATASZ_MAX + sizeof(cid) + sizeof(rompatch_count));
+
+    if (bmiDone) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Command disallowed\n"));
+        return A_ERROR;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI,
+         ("BMI Change rompatch Activation: Enter (device: 0x%p, count: %d)\n",
+           device, rompatch_count));
+
+    cid = do_activate ? BMI_ROMPATCH_ACTIVATE : BMI_ROMPATCH_DEACTIVATE;
+
+    offset = 0;
+    A_MEMCPY(&data[offset], &cid, sizeof(cid));
+    offset += sizeof(cid);
+    A_MEMCPY(&data[offset], &rompatch_count, sizeof(rompatch_count));
+    offset += sizeof(rompatch_count);
+    length = rompatch_count * sizeof(*rompatch_list);
+    A_MEMCPY(&data[offset], rompatch_list, length);
+    offset += length;
+    status = bmiBufferSend(device, data, offset);
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to write to the device\n"));
+        return A_ERROR;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_BMI, ("BMI Change rompatch Activation: Exit\n"));
+
+    return A_OK;
+}
+
+A_STATUS
+BMIrompatchActivate(HIF_DEVICE *device,
+                    A_UINT32 rompatch_count,
+                    A_UINT32 *rompatch_list)
+{
+    return _BMIrompatchChangeActivation(device, rompatch_count, rompatch_list, 1);
+}
+
+A_STATUS
+BMIrompatchDeactivate(HIF_DEVICE *device,
+                      A_UINT32 rompatch_count,
+                      A_UINT32 *rompatch_list)
+{
+    return _BMIrompatchChangeActivation(device, rompatch_count, rompatch_list, 0);
+}
+
+/* BMI Access routines */
+A_STATUS
+bmiBufferSend(HIF_DEVICE *device,
+              A_UCHAR *buffer,
+              A_UINT32 length)
+{
+    A_STATUS status;
+    A_UINT32 timeout;
+    A_UINT32 address;
+    static A_UINT32 cmdCredits;
+    A_UINT32 mboxAddress[HTC_MAILBOX_NUM_MAX];
+
+    HIFConfigureDevice(device, HIF_DEVICE_GET_MBOX_ADDR,
+                       &mboxAddress, sizeof(mboxAddress));
+
+    cmdCredits = 0;
+    timeout = BMI_COMMUNICATION_TIMEOUT;
+
+    while(timeout-- && !cmdCredits) {
+        /* Read the counter register to get the command credits */
+        address = COUNT_DEC_ADDRESS + (HTC_MAILBOX_NUM_MAX + ENDPOINT1) * 4;
+        /* hit the credit counter with a 4-byte access, the first byte read will hit the counter and cause
+         * a decrement, while the remaining 3 bytes has no effect.  The rationale behind this is to
+         * make all HIF accesses 4-byte aligned */
+        status = HIFReadWrite(device, address, (A_UINT8 *)&cmdCredits, 4,
+            HIF_RD_SYNC_BYTE_INC, NULL);
+        if (status != A_OK) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to decrement the command credit count register\n"));
+            return A_ERROR;
+        }
+        /* the counter is only 8=bits, ignore anything in the upper 3 bytes */        
+        cmdCredits &= 0xFF;
+    }
+
+    if (cmdCredits) {
+        address = mboxAddress[ENDPOINT1];
+        status = HIFReadWrite(device, address, buffer, length,
+            HIF_WR_SYNC_BYTE_INC, NULL);
+        if (status != A_OK) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to send the BMI data to the device\n"));
+            return A_ERROR;
+        }
+    } else {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("BMI Communication timeout\n"));
+        return A_ERROR;
+    }
+
+    return status;
+}
+
+A_STATUS
+bmiBufferReceive(HIF_DEVICE *device,
+                 A_UCHAR *buffer,
+                 A_UINT32 length)
+{
+    A_STATUS status;
+    A_UINT32 address;
+    A_UINT32 timeout;
+    static A_UINT32 cmdCredits;
+    A_UINT32 mboxAddress[HTC_MAILBOX_NUM_MAX];
+
+    HIFConfigureDevice(device, HIF_DEVICE_GET_MBOX_ADDR,
+                       &mboxAddress, sizeof(mboxAddress));
+
+    cmdCredits = 0;
+    timeout = BMI_COMMUNICATION_TIMEOUT;
+    while(timeout-- && !cmdCredits) {
+        /* Read the counter register to get the command credits */
+        address = COUNT_ADDRESS + (HTC_MAILBOX_NUM_MAX + ENDPOINT1) * 1;
+        /* read the counter using a 4-byte read.  Since the counter is NOT auto-decrementing,
+         * we can read this counter multiple times using a non-incrementing address mode.
+         * The rationale here is to make all HIF accesses a multiple of 4 bytes */
+        status = HIFReadWrite(device, address, (A_UINT8 *)&cmdCredits, sizeof(cmdCredits),
+            HIF_RD_SYNC_BYTE_FIX, NULL);
+        if (status != A_OK) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to read the command credit count register\n"));
+            return A_ERROR;
+        }
+            /* we did a 4-byte read to the same count register so mask off upper bytes */
+        cmdCredits &= 0xFF;
+        status = A_ERROR;
+    }
+
+    if (cmdCredits) {
+        address = mboxAddress[ENDPOINT1];
+        status = HIFReadWrite(device, address, buffer, length,
+            HIF_RD_SYNC_BYTE_INC, NULL);
+        if (status != A_OK) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to read the BMI data from the device\n"));
+            return A_ERROR;
+        }
+    } else {
+        AR_DEBUG_PRINTF(ATH_DEBUG_BMI, ("BMI Communication timeout\n"));
+        return A_ERROR;
+    }
+
+    return status;
+}

Added: trunk/src/target/AR6kSDK.build_sw.18/host/bmi/src/makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/bmi/src/makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/bmi/src/makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,4 @@
+# Copyright (c) 2004-2006 Atheros Communications Inc.
+# All rights reserved.
+!INCLUDE $(_MAKEENVROOT)\makefile.def
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/hif/sdio/Makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/hif/sdio/Makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/hif/sdio/Makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,57 @@
+#
+#SDIO HIF makefile for atheros SDIO stack
+#  
+#Copyright (c) 2004-2006 Atheros Communications Inc.
+#
+#$ATH_LICENSE_HOSTSDK0_MK$
+#
+
+# Check for SDIO stack
+ifdef ATH_SDIO_STACK_BASE
+# Someone already set it on entry, the stack resides outside this tree, we will try to build it
+_SDIO_STACK = YES
+else
+# Check for SDIO stack within this tree
+_SDIO_STACK = $(shell if [ -f $(ATH_SRC_BASE)/sdiostack/src/Makefile ]; then echo "YES"; else echo "NO"; fi)
+
+ifeq ($(_SDIO_STACK), YES)
+    # SDIO stack is part of the kit and will need to be compiled
+ATH_SDIO_STACK_BASE := $(ATH_SRC_BASE)/sdiostack
+endif
+endif 
+
+ifeq ($(_SDIO_STACK), YES)
+    # Pass and translate build variables to the SDIO stack makefile
+_SDIO_STACK_MAKE_PARAMS := CT_BUILD_TYPE=$(ATH_BUILD_TYPE) \
+                           CT_OS_TYPE=linux \
+                           CT_OS_SUB_TYPE=$(ATH_OS_SUB_TYPE) \
+                           CT_LINUXPATH=$(ATH_LINUXPATH) \
+                           CT_BUILD_TYPE=$(ATH_BUILD_TYPE) \
+                           CT_CROSS_COMPILE_TYPE=$(ATH_CROSS_COMPILE_TYPE) \
+                           CT_ARCH_CPU_TYPE=$(ATH_ARCH_CPU_TYPE) \
+                           CT_HC_DRIVERS=$(ATH_HC_DRIVERS) \
+                           CT_MAKE_INCLUDE_OVERRIDE=$(_LOCALMAKE_INCLUDE)   \
+                           CT_BUILD_OUTPUT_OVERRIDE=$(COMPILED_IMAGE_OBJECTS_PATH) \
+                           BUS_BUILD=1
+endif
+EXTRA_CFLAGS += -I$(ATH_SRC_BASE)/hif/sdio/linux_athsdio/include
+EXTRA_CFLAGS += -DSDIO
+EXTRA_CFLAGS += -I$(ATH_SDIO_STACK_BASE)/src/include
+
+ifeq ($(ATH_OS_SUB_TYPE),linux_2_4)
+obj-y += ../../hif/sdio/linux_athsdio/src/hif.o
+endif
+
+ifneq ($(ATH_OS_SUB_TYPE),linux_2_4)
+ar6000-objs := ../../hif/sdio/linux_athsdio/src/hif.o
+endif
+
+all:
+ifeq ($(_SDIO_STACK),YES)
+	$(MAKE) $(_SDIO_STACK_MAKE_PARAMS) -C  $(ATH_SDIO_STACK_BASE)/src default
+endif
+
+clean:
+ifeq ($(_SDIO_STACK),YES)
+	$(MAKE) $(_SDIO_STACK_MAKE_PARAMS) -C $(ATH_SDIO_STACK_BASE)/src clean
+endif

Added: trunk/src/target/AR6kSDK.build_sw.18/host/hif/sdio/linux_athsdio/include/hif_internal.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/hif/sdio/linux_athsdio/include/hif_internal.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/hif/sdio/linux_athsdio/include/hif_internal.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,102 @@
+/* 
+ * @file: hif_internal.h
+ * 
+ * @abstract: internal header file for hif layer
+ * 
+ * @notice: Copyright (c) 2004-2006 Atheros Communications Inc.
+ * 
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+ 
+#include "a_config.h"
+#include "ctsystem.h"
+#include "sdio_busdriver.h"
+#include "_sdio_defs.h"
+#include "sdio_lib.h"
+#include "athdefs.h"
+#include "a_types.h"
+#include "a_osapi.h"
+#include "hif.h"
+
+#define MANUFACTURER_ID_AR6001_BASE        0x100
+#define MANUFACTURER_ID_AR6002_BASE        0x200
+#define FUNCTION_CLASS                     0x0
+#define MANUFACTURER_CODE                  0x271
+
+#define BUS_REQUEST_MAX_NUM                64
+
+#define SDIO_CLOCK_FREQUENCY_DEFAULT       25000000
+#define SDWLAN_ENABLE_DISABLE_TIMEOUT      20
+#define FLAGS_CARD_ENAB                    0x02
+#define FLAGS_CARD_IRQ_UNMSK               0x04
+
+#define HIF_MBOX_BLOCK_SIZE                128
+#define HIF_MBOX_BASE_ADDR                 0x800
+#define HIF_MBOX_WIDTH                     0x800
+#define HIF_MBOX0_BLOCK_SIZE               1
+#define HIF_MBOX1_BLOCK_SIZE               HIF_MBOX_BLOCK_SIZE
+#define HIF_MBOX2_BLOCK_SIZE               HIF_MBOX_BLOCK_SIZE
+#define HIF_MBOX3_BLOCK_SIZE               HIF_MBOX_BLOCK_SIZE
+
+#define HIF_MBOX_START_ADDR(mbox)                        \
+    HIF_MBOX_BASE_ADDR + mbox * HIF_MBOX_WIDTH
+
+#define HIF_MBOX_END_ADDR(mbox)	                         \
+    HIF_MBOX_START_ADDR(mbox) + HIF_MBOX_WIDTH - 1
+
+struct hif_device {
+    SDDEVICE *handle;
+    void *htc_handle;
+    OSKERNEL_HELPER insert_helper;
+    BOOL  helper_started;
+};
+
+typedef struct target_function_context {
+    SDFUNCTION           function; /* function description of the bus driver */
+    OS_SEMAPHORE         instanceSem; /* instance lock. Unused */
+    SDLIST               instanceList; /* list of instances. Unused */
+} TARGET_FUNCTION_CONTEXT;
+
+typedef struct bus_request {
+    struct bus_request *next;
+    SDREQUEST *request;
+    void *context;
+} BUS_REQUEST;
+
+BOOL
+hifDeviceInserted(SDFUNCTION *function, SDDEVICE *device);
+
+void
+hifDeviceRemoved(SDFUNCTION *function, SDDEVICE *device);
+
+SDREQUEST *
+hifAllocateDeviceRequest(SDDEVICE *device);
+
+void
+hifFreeDeviceRequest(SDREQUEST *request);
+
+void 
+hifRWCompletionHandler(SDREQUEST *request);
+
+void
+hifIRQHandler(void *context);
+
+HIF_DEVICE *
+addHifDevice(SDDEVICE *handle);
+
+HIF_DEVICE *
+getHifDevice(SDDEVICE *handle);
+
+void
+delHifDevice(SDDEVICE *handle);

Added: trunk/src/target/AR6kSDK.build_sw.18/host/hif/sdio/linux_athsdio/src/hif.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/hif/sdio/linux_athsdio/src/hif.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/hif/sdio/linux_athsdio/src/hif.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,818 @@
+/* 
+ * @file: hif.c
+ * 
+ * @abstract: HIF layer reference implementation for Atheros SDIO stack
+ * 
+ * @notice: Copyright (c) 2004-2006 Atheros Communications Inc.
+ * 
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+ 
+#include "hif_internal.h"
+
+/* ------ Static Variables ------ */
+
+/* ------ Global Variable Declarations ------- */
+SD_PNP_INFO Ids[] = {
+    {
+        .SDIO_ManufacturerID = MANUFACTURER_ID_AR6001_BASE | 0xB,  
+        .SDIO_ManufacturerCode = MANUFACTURER_CODE,
+        .SDIO_FunctionClass = FUNCTION_CLASS,
+        .SDIO_FunctionNo = 1
+    },
+    {
+        .SDIO_ManufacturerID = MANUFACTURER_ID_AR6001_BASE | 0xA,  
+        .SDIO_ManufacturerCode = MANUFACTURER_CODE,
+        .SDIO_FunctionClass = FUNCTION_CLASS,
+        .SDIO_FunctionNo = 1
+    },
+    {
+        .SDIO_ManufacturerID = MANUFACTURER_ID_AR6001_BASE | 0x9,  
+        .SDIO_ManufacturerCode = MANUFACTURER_CODE,
+        .SDIO_FunctionClass = FUNCTION_CLASS,
+        .SDIO_FunctionNo = 1
+    },
+    {
+        .SDIO_ManufacturerID = MANUFACTURER_ID_AR6001_BASE | 0x8,  
+        .SDIO_ManufacturerCode = MANUFACTURER_CODE,
+        .SDIO_FunctionClass = FUNCTION_CLASS,
+        .SDIO_FunctionNo = 1
+    },
+    {
+        .SDIO_ManufacturerID = MANUFACTURER_ID_AR6002_BASE | 0x0,
+        .SDIO_ManufacturerCode = MANUFACTURER_CODE,
+        .SDIO_FunctionClass = FUNCTION_CLASS,
+        .SDIO_FunctionNo = 1
+    },
+    {
+        .SDIO_ManufacturerID = MANUFACTURER_ID_AR6002_BASE | 0x1,
+        .SDIO_ManufacturerCode = MANUFACTURER_CODE,
+        .SDIO_FunctionClass = FUNCTION_CLASS,
+        .SDIO_FunctionNo = 1
+    },
+    {
+    }                      //list is null termintaed
+};
+
+TARGET_FUNCTION_CONTEXT FunctionContext = {
+    .function.Version    = CT_SDIO_STACK_VERSION_CODE,
+    .function.pName      = "sdio_wlan",
+    .function.MaxDevices = 1,
+    .function.NumDevices = 0,
+    .function.pIds       = Ids,
+    .function.pProbe     = hifDeviceInserted, 
+    .function.pRemove    = hifDeviceRemoved,
+    .function.pSuspend   = NULL,
+    .function.pResume    = NULL,
+    .function.pWake      = NULL,
+    .function.pContext   = &FunctionContext,
+};
+
+HIF_DEVICE hifDevice[HIF_MAX_DEVICES];
+HTC_CALLBACKS htcCallbacks; 
+BUS_REQUEST busRequest[BUS_REQUEST_MAX_NUM];
+static BUS_REQUEST *s_busRequestFreeQueue = NULL;
+OS_CRITICALSECTION lock;
+extern A_UINT32 onebitmode;
+extern A_UINT32 busspeedlow;
+extern A_UINT32 debughif;
+
+#ifdef DEBUG
+#define ATH_DEBUG_ERROR 1  
+#define ATH_DEBUG_WARN  2  
+#define ATH_DEBUG_TRACE 3  
+#define _AR_DEBUG_PRINTX_ARG(arg...) arg 
+#define AR_DEBUG_PRINTF(lvl, args)\
+    {if (lvl <= debughif)\
+        A_PRINTF(KERN_ALERT _AR_DEBUG_PRINTX_ARG args);\
+    }
+#else
+#define AR_DEBUG_PRINTF(lvl, args)
+#endif
+
+static BUS_REQUEST *hifAllocateBusRequest(void);
+static void hifFreeBusRequest(BUS_REQUEST *busrequest);
+static THREAD_RETURN insert_helper_func(POSKERNEL_HELPER pHelper);
+static void ResetAllCards(void);
+     
+/* ------ Functions ------ */
+int HIFInit(HTC_CALLBACKS *callbacks)
+{
+    SDIO_STATUS status;
+    DBG_ASSERT(callbacks != NULL);
+
+    /* Store the callback and event handlers */
+    htcCallbacks.deviceInsertedHandler = callbacks->deviceInsertedHandler;
+    htcCallbacks.deviceRemovedHandler = callbacks->deviceRemovedHandler;
+    htcCallbacks.deviceSuspendHandler = callbacks->deviceSuspendHandler;
+    htcCallbacks.deviceResumeHandler = callbacks->deviceResumeHandler;
+    htcCallbacks.deviceWakeupHandler = callbacks->deviceWakeupHandler;
+    htcCallbacks.rwCompletionHandler = callbacks->rwCompletionHandler;
+    htcCallbacks.dsrHandler = callbacks->dsrHandler;
+
+    CriticalSectionInit(&lock);
+
+    /* Register with bus driver core */
+    status = SDIO_RegisterFunction(&FunctionContext.function);
+    DBG_ASSERT(SDIO_SUCCESS(status));
+
+    return(0);
+}
+
+A_STATUS 
+HIFReadWrite(HIF_DEVICE *device, 
+             A_UINT32 address, 
+             A_UCHAR *buffer, 
+             A_UINT32 length, 
+             A_UINT32 request, 
+             void *context) 
+{
+    A_UINT8 rw;
+    A_UINT8 mode;
+    A_UINT8 funcNo;
+    A_UINT8 opcode;
+    A_UINT16 count;
+    SDREQUEST *sdrequest;
+    SDIO_STATUS sdiostatus;
+    BUS_REQUEST *busrequest;
+    A_STATUS    status = A_OK;
+
+    DBG_ASSERT(device != NULL);
+    DBG_ASSERT(device->handle != NULL);
+ 
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, ("Device: %p\n", device));
+    
+    do {
+        busrequest = hifAllocateBusRequest();
+        if (busrequest == NULL) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERROR, ("HIF Unable to allocate bus request\n"));
+            status = A_NO_RESOURCE;
+            break;
+        }
+    
+        sdrequest = busrequest->request;
+        busrequest->context = context;
+    
+        sdrequest->pDataBuffer = buffer;
+        if (request & HIF_SYNCHRONOUS) {
+            sdrequest->Flags = SDREQ_FLAGS_RESP_SDIO_R5 | SDREQ_FLAGS_DATA_TRANS;
+            sdrequest->pCompleteContext = NULL;
+            sdrequest->pCompletion = NULL;
+            AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, ("Execution mode: Synchronous\n"));
+        } else if (request & HIF_ASYNCHRONOUS) {
+            sdrequest->Flags = SDREQ_FLAGS_RESP_SDIO_R5 | SDREQ_FLAGS_DATA_TRANS | 
+                               SDREQ_FLAGS_TRANS_ASYNC;
+            sdrequest->pCompleteContext = busrequest;
+            sdrequest->pCompletion = hifRWCompletionHandler;
+            AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, ("Execution mode: Asynchronous\n"));
+        } else {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERROR, 
+                            ("Invalid execution mode: 0x%08x\n", request));
+            status = A_EINVAL;
+            break;
+        }
+    
+        if (request & HIF_EXTENDED_IO) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, ("Command type: CMD53\n"));
+            sdrequest->Command = CMD53;
+        } else {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERROR,
+                            ("Invalid command type: 0x%08x\n", request));
+            status = A_EINVAL;
+            break;
+        }
+    
+        if (request & HIF_BLOCK_BASIS) {
+            mode = CMD53_BLOCK_BASIS;
+            sdrequest->BlockLen = HIF_MBOX_BLOCK_SIZE;
+            sdrequest->BlockCount = length / HIF_MBOX_BLOCK_SIZE;
+            count = sdrequest->BlockCount;
+            AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, 
+                            ("Block mode (BlockLen: %d, BlockCount: %d)\n",
+                            sdrequest->BlockLen, sdrequest->BlockCount));
+        } else if (request & HIF_BYTE_BASIS) {
+            mode = CMD53_BYTE_BASIS;
+            sdrequest->BlockLen = length;
+            sdrequest->BlockCount = 1;
+            count = sdrequest->BlockLen;
+            AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, 
+                            ("Byte mode (BlockLen: %d, BlockCount: %d)\n",
+                            sdrequest->BlockLen, sdrequest->BlockCount));
+        } else {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERROR, 
+                            ("Invalid data mode: 0x%08x\n", request));
+            status = A_EINVAL;
+            break;
+        }
+
+#if 0    
+        /* useful for checking register accesses */
+        if (length & 0x3) {
+            A_PRINTF(KERN_ALERT"HIF (%s) is not a multiple of 4 bytes, addr:0x%X, len:%d\n", 
+                                request & HIF_WRITE ? "write":"read", address, length);    
+        }
+#endif
+        
+        if ((address >= HIF_MBOX_START_ADDR(0)) && 
+            (address <= HIF_MBOX_END_ADDR(3)))
+        {
+            
+            DBG_ASSERT(length <= HIF_MBOX_WIDTH);
+            
+            /* 
+             * Mailbox write. Adjust the address so that the last byte 
+             * falls on the EOM address.
+             */
+            address += (HIF_MBOX_WIDTH - length);
+        }
+    
+        
+    
+        if (request & HIF_WRITE) {
+            rw = CMD53_WRITE;
+            sdrequest->Flags |= SDREQ_FLAGS_DATA_WRITE;
+            AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, ("Direction: Write\n"));
+        } else if (request & HIF_READ) {
+            rw = CMD53_READ;
+            AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, ("Direction: Read\n"));
+        } else {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERROR, 
+                            ("Invalid direction: 0x%08x\n", request));
+            status = A_EINVAL;
+            break;
+        }
+    
+        if (request & HIF_FIXED_ADDRESS) {
+            opcode = CMD53_FIXED_ADDRESS;
+            AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, ("Address mode: Fixed\n"));
+        } else if (request & HIF_INCREMENTAL_ADDRESS) {
+            opcode = CMD53_INCR_ADDRESS;
+            AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, ("Address mode: Incremental\n"));
+        } else {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERROR, 
+                            ("Invalid address mode: 0x%08x\n", request));
+            status = A_EINVAL;
+            break;
+        }
+    
+        funcNo = SDDEVICE_GET_SDIO_FUNCNO(device->handle);
+        AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, ("Function number: %d\n", funcNo));
+        SDIO_SET_CMD53_ARG(sdrequest->Argument, rw, funcNo, 
+                           mode, opcode, address, count);
+    
+        /* Send the command out */
+        sdiostatus = SDDEVICE_CALL_REQUEST_FUNC(device->handle, sdrequest);
+        
+        if (!SDIO_SUCCESS(sdiostatus)) {
+            status = A_ERROR;    
+        }
+        
+    } while (FALSE);
+
+    if (A_FAILED(status) || (request & HIF_SYNCHRONOUS)) {
+        if (busrequest != NULL) {
+            hifFreeBusRequest(busrequest);
+        }
+    }
+    
+    if (A_FAILED(status) && (request & HIF_ASYNCHRONOUS)) {
+            /* call back async handler on failure */
+        htcCallbacks.rwCompletionHandler(context, status);    
+    }   
+    
+    return status;
+}
+
+A_STATUS
+HIFConfigureDevice(HIF_DEVICE *device, HIF_DEVICE_CONFIG_OPCODE opcode, 
+                   void *config, A_UINT32 configLen)
+{
+    A_UINT32 count;
+
+    switch(opcode) {
+        case HIF_DEVICE_GET_MBOX_BLOCK_SIZE:
+            ((A_UINT32 *)config)[0] = HIF_MBOX0_BLOCK_SIZE;
+            ((A_UINT32 *)config)[1] = HIF_MBOX1_BLOCK_SIZE;
+            ((A_UINT32 *)config)[2] = HIF_MBOX2_BLOCK_SIZE;
+            ((A_UINT32 *)config)[3] = HIF_MBOX3_BLOCK_SIZE;
+            break;
+
+        case HIF_DEVICE_GET_MBOX_ADDR:
+            for (count = 0; count < 4; count ++) {
+                ((A_UINT32 *)config)[count] = HIF_MBOX_START_ADDR(count);
+            }
+            break;
+        case HIF_DEVICE_GET_IRQ_PROC_MODE:
+                /* the SDIO stack allows the interrupts to be processed either way, ASYNC or SYNC */
+            *((HIF_DEVICE_IRQ_PROCESSING_MODE *)config) = HIF_DEVICE_IRQ_ASYNC_SYNC;
+            break;
+        default:
+            AR_DEBUG_PRINTF(ATH_DEBUG_WARN, 
+                            ("Unsupported configuration opcode: %d\n", opcode));
+            return A_ERROR;
+    }
+
+    return A_OK;
+}
+
+void
+HIFShutDownDevice(HIF_DEVICE *device)
+{
+    A_UINT8 data;
+    A_UINT32 count;
+    SDIO_STATUS status;
+    SDCONFIG_BUS_MODE_DATA busSettings;
+    SDCONFIG_FUNC_ENABLE_DISABLE_DATA fData;
+
+    if (device != NULL) {
+        DBG_ASSERT(device->handle != NULL);
+
+        /* Remove the allocated current if any */
+        status = SDLIB_IssueConfig(device->handle, 
+                                   SDCONFIG_FUNC_FREE_SLOT_CURRENT, NULL, 0);
+        DBG_ASSERT(SDIO_SUCCESS(status));
+    
+        /* Disable the card */
+        fData.EnableFlags = SDCONFIG_DISABLE_FUNC;
+        fData.TimeOut = 1;
+        status = SDLIB_IssueConfig(device->handle, SDCONFIG_FUNC_ENABLE_DISABLE,
+                                   &fData, sizeof(fData));
+        DBG_ASSERT(SDIO_SUCCESS(status));
+    
+        /* Perform a soft I/O reset */
+        data = SDIO_IO_RESET;
+        status = SDLIB_IssueCMD52(device->handle, 0, SDIO_IO_ABORT_REG, 
+                                  &data, 1, 1);
+        DBG_ASSERT(SDIO_SUCCESS(status));
+    
+        /* 
+         * WAR - Codetelligence driver does not seem to shutdown correctly in 1
+         * bit mode. By default it configures the HC in the 4 bit. Its later in
+         * our driver that we switch to 1 bit mode. If we try to shutdown, the
+         * driver hangs so we revert to 4 bit mode, to be transparent to the 
+         * underlying bus driver.
+         */
+        if (onebitmode) {
+            ZERO_OBJECT(busSettings);
+            busSettings.BusModeFlags = SDDEVICE_GET_BUSMODE_FLAGS(device->handle);
+            SDCONFIG_SET_BUS_WIDTH(busSettings.BusModeFlags, 
+                                   SDCONFIG_BUS_WIDTH_4_BIT);
+    
+            /* Issue config request to change the bus width to 4 bit */
+            status = SDLIB_IssueConfig(device->handle, SDCONFIG_BUS_MODE_CTRL,
+                                       &busSettings, 
+                                       sizeof(SDCONFIG_BUS_MODE_DATA));
+            DBG_ASSERT(SDIO_SUCCESS(status));
+        }
+    
+        /* Free the bus requests */
+        for (count = 0; count < BUS_REQUEST_MAX_NUM; count ++) {
+            SDDeviceFreeRequest(device->handle, busRequest[count].request);
+        }
+        /* Clean up the queue */
+        s_busRequestFreeQueue = NULL;
+    } else {
+            /* since we are unloading the driver anyways, reset all cards in case the SDIO card
+             * is externally powered and we are unloading the SDIO stack.  This avoids the problem when 
+             * the SDIO stack is reloaded and attempts are made to re-enumerate a card that is already
+             * enumerated */
+        ResetAllCards();
+        /* Unregister with bus driver core */
+        AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, 
+                        ("Unregistering with the bus driver\n"));
+        status = SDIO_UnregisterFunction(&FunctionContext.function);
+        DBG_ASSERT(SDIO_SUCCESS(status));
+    }
+}
+
+void 
+hifRWCompletionHandler(SDREQUEST *request) 
+{
+    A_STATUS status;
+    void *context;
+    BUS_REQUEST *busrequest;
+
+    if (SDIO_SUCCESS(request->Status)) {
+        status = A_OK;
+    } else {
+        status = A_ERROR;
+    }
+    
+    DBG_ASSERT(status == A_OK);
+    busrequest = (BUS_REQUEST *) request->pCompleteContext;
+    context = (void *) busrequest->context;
+        /* free the request before calling the callback, in case the 
+         * callback submits another request, this guarantees that
+         * there is at least 1 free request available everytime the callback
+         * is invoked */
+    hifFreeBusRequest(busrequest);    
+    htcCallbacks.rwCompletionHandler(context, status);
+}
+
+void
+hifIRQHandler(void *context)
+{
+    A_STATUS status;
+    HIF_DEVICE *device;
+
+    device = (HIF_DEVICE *)context;
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, ("Device: %p\n", device));
+    status = htcCallbacks.dsrHandler(device->htc_handle);
+    DBG_ASSERT(status == A_OK);
+}
+
+BOOL
+hifDeviceInserted(SDFUNCTION *function, SDDEVICE *handle)
+{
+    BOOL enabled;
+    A_UINT8 data;
+    A_UINT32 count;
+    HIF_DEVICE *device;
+    SDIO_STATUS status;
+    A_UINT16 maxBlocks;
+    A_UINT16 maxBlockSize;
+    SDCONFIG_BUS_MODE_DATA busSettings;
+    SDCONFIG_FUNC_ENABLE_DISABLE_DATA fData;
+    TARGET_FUNCTION_CONTEXT *functionContext;
+    SDCONFIG_FUNC_SLOT_CURRENT_DATA slotCurrent;
+    SD_BUSCLOCK_RATE                currentBusClock;
+    
+    DBG_ASSERT(function != NULL);
+    DBG_ASSERT(handle != NULL);
+
+    device = addHifDevice(handle);
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, ("Device: %p\n", device));
+    functionContext =  (TARGET_FUNCTION_CONTEXT *)function->pContext;
+    
+    /* 
+     * Issue commands to get the manufacturer ID and stuff and compare it 
+     * against the rev Id derived from the ID registered during the 
+     * initialization process. Report the device only in the case there 
+     * is a match. In the case od SDIO, the bus driver has already queried
+     * these details so we just need to use their data structures to get the
+     * relevant values. Infact, the driver has already matched it against
+     * the Ids that we registered with it so we dont need to the step here.
+     */
+
+    /* Configure the SDIO Bus Width */
+    if (onebitmode) {
+        data = SDIO_BUS_WIDTH_1_BIT;
+        status = SDLIB_IssueCMD52(handle, 0, SDIO_BUS_IF_REG, &data, 1, 1);
+        if (!SDIO_SUCCESS(status)) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERROR, 
+                            ("Unable to set the bus width to 1 bit\n"));
+            return FALSE;
+        }
+    }
+
+    /* Get current bus flags */
+    ZERO_OBJECT(busSettings);
+        
+    busSettings.BusModeFlags = SDDEVICE_GET_BUSMODE_FLAGS(handle);
+    if (onebitmode) {
+        SDCONFIG_SET_BUS_WIDTH(busSettings.BusModeFlags, 
+                               SDCONFIG_BUS_WIDTH_1_BIT);
+    }
+    
+        /* get the current operating clock, the bus driver sets us up based
+         * on what our CIS reports and what the host controller can handle
+         * we can use this to determine whether we want to drop our clock rate
+         * down */
+    currentBusClock = SDDEVICE_GET_OPER_CLOCK(handle);
+    busSettings.ClockRate = currentBusClock;
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, 
+                        ("HIF currently running at: %d \n",currentBusClock));
+    
+        /* see if HIF wants to run at a lower clock speed, we may already be
+         * at that lower clock speed */
+    if (currentBusClock > (SDIO_CLOCK_FREQUENCY_DEFAULT >> busspeedlow)) {
+        busSettings.ClockRate = SDIO_CLOCK_FREQUENCY_DEFAULT >> busspeedlow;
+        AR_DEBUG_PRINTF(ATH_DEBUG_WARN, 
+                        ("HIF overriding clock to %d \n",busSettings.ClockRate));
+    }
+
+    /* Issue config request to override clock rate */
+    status = SDLIB_IssueConfig(handle, SDCONFIG_FUNC_CHANGE_BUS_MODE, &busSettings, 
+                               sizeof(SDCONFIG_BUS_MODE_DATA));
+    if (!SDIO_SUCCESS(status)) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERROR, 
+                        ("Unable to configure the host clock\n"));
+        return FALSE;
+    } else {
+        AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, 
+                        ("Configured clock: %d, Maximum clock: %d\n", 
+                        busSettings.ActualClockRate, 
+                        SDDEVICE_GET_MAX_CLOCK(handle)));
+    }
+
+    /* 
+     * Check if the target supports block mode. This result of this check
+     * can be used to implement the HIFReadWrite API.
+     */
+    if (SDDEVICE_GET_SDIO_FUNC_MAXBLKSIZE(handle)) {
+        /* Limit block size to operational block limit or card function 
+           capability */
+        maxBlockSize = min(SDDEVICE_GET_OPER_BLOCK_LEN(handle),
+                           SDDEVICE_GET_SDIO_FUNC_MAXBLKSIZE(handle));
+ 
+        /* check if the card support multi-block transfers */
+        if (!(SDDEVICE_GET_SDIOCARD_CAPS(handle) & SDIO_CAPS_MULTI_BLOCK)) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, ("Byte basis only\n"));
+
+            /* Limit block size to max byte basis */
+            maxBlockSize =  min(maxBlockSize, 
+                                (A_UINT16)SDIO_MAX_LENGTH_BYTE_BASIS);
+            maxBlocks = 1;
+        } else {
+            AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, ("Multi-block capable\n"));
+            maxBlocks = SDDEVICE_GET_OPER_BLOCKS(handle); 
+            status = SDLIB_SetFunctionBlockSize(handle, HIF_MBOX_BLOCK_SIZE);
+            if (!SDIO_SUCCESS(status)) {
+                AR_DEBUG_PRINTF(ATH_DEBUG_ERROR, 
+                                ("Failed to set block size. Err:%d\n", status));
+                return FALSE;
+            }      
+        }
+        
+        AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, 
+                        ("Bytes Per Block: %d bytes, Block Count:%d \n", 
+                        maxBlockSize, maxBlocks));
+    } else {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERROR, 
+                        ("Function does not support Block Mode!\n"));
+        return FALSE;
+    }
+
+    /* Allocate the slot current */
+    status = SDLIB_GetDefaultOpCurrent(handle, &slotCurrent.SlotCurrent);
+    if (SDIO_SUCCESS(status)) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, ("Allocating Slot current: %d mA\n", 
+                                slotCurrent.SlotCurrent));         
+        status = SDLIB_IssueConfig(handle, SDCONFIG_FUNC_ALLOC_SLOT_CURRENT,
+                                   &slotCurrent, sizeof(slotCurrent));
+        if (!SDIO_SUCCESS(status)) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERROR, 
+                            ("Failed to allocate slot current %d\n", status));
+            return FALSE;
+        }
+    }
+
+    /* Enable the dragon function */
+    count = 0;
+    enabled = FALSE;
+    fData.TimeOut = 1;
+    fData.EnableFlags = SDCONFIG_ENABLE_FUNC;
+    while ((count++ < SDWLAN_ENABLE_DISABLE_TIMEOUT) && !enabled) 
+    {
+        /* Enable dragon */
+        status = SDLIB_IssueConfig(handle, SDCONFIG_FUNC_ENABLE_DISABLE,
+                                   &fData, sizeof(fData));
+        if (!SDIO_SUCCESS(status)) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, 
+                            ("Attempting to enable the card again\n"));
+            continue;
+        }
+
+        /* Mark the status as enabled */         
+        enabled = TRUE;
+    }
+
+    /* Check if we were succesful in enabling the target */
+    if (!enabled) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERROR, 
+                        ("Failed to communicate with the target\n"));
+        return FALSE;
+    }
+
+    /* Allocate the bus requests to be used later */
+    A_MEMZERO(busRequest, sizeof(busRequest));
+    for (count = 0; count < BUS_REQUEST_MAX_NUM; count ++) {
+        if ((busRequest[count].request = SDDeviceAllocRequest(handle)) == NULL){
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERROR, ("Unable to allocate memory\n"));
+            /* TODO: Free the memory that has already been allocated */
+            return FALSE;
+        }
+        hifFreeBusRequest(&busRequest[count]);
+		
+        AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, 
+                ("0x%08x = busRequest[%d].request = 0x%08x\n",
+				(unsigned int) &busRequest[count], count,
+				(unsigned int) busRequest[count].request));
+    }
+
+        /* Schedule a worker to handle device inserted, this is a temporary workaround
+         * to fix a deadlock if the device fails to intialize in the insertion handler
+         * The failure causes the instance to shutdown the HIF layer and unregister the 
+         * function driver within the busdriver probe context which can deadlock
+         * 
+         * NOTE: we cannot use the default work queue because that would block 
+         * SD bus request processing for all synchronous I/O. We must use a kernel
+         * thread that is creating using the helper library.
+         * */  
+    
+    if (SDIO_SUCCESS(SDLIB_OSCreateHelper(&device->insert_helper,
+                         insert_helper_func, 
+                         device))) {
+        device->helper_started = TRUE;                            
+    } 
+        
+    return TRUE;
+}
+
+static THREAD_RETURN insert_helper_func(POSKERNEL_HELPER pHelper)
+{
+        
+    /* 
+     * Adding a wait of around a second before we issue the very first 
+     * command to dragon. During the process of loading/unloading the 
+     * driver repeatedly it was observed that we get a data timeout
+     * while accessing function 1 registers in the chip. The theory at
+     * this point is that some initialization delay in dragon is 
+     * causing the SDIO state in dragon core to be not ready even after
+     * the ready bit indicates that function 1 is ready. Accomodating
+     * for this behavior by adding some delay in the driver before it
+     * issues the first command after switching on dragon. Need to 
+     * investigate this a bit more - TODO
+     */
+       
+    A_MDELAY(1000);
+        /* Inform HTC */
+    if ((htcCallbacks.deviceInsertedHandler(SD_GET_OS_HELPER_CONTEXT(pHelper))) != A_OK) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, ("Device rejected\n"));
+    }
+    
+    return 0;
+}
+
+void
+HIFAckInterrupt(HIF_DEVICE *device)
+{
+    SDIO_STATUS status;
+    DBG_ASSERT(device != NULL);
+    DBG_ASSERT(device->handle != NULL);
+
+    /* Acknowledge our function IRQ */
+    status = SDLIB_IssueConfig(device->handle, SDCONFIG_FUNC_ACK_IRQ, 
+                               NULL, 0);
+    DBG_ASSERT(SDIO_SUCCESS(status));
+}
+
+void
+HIFUnMaskInterrupt(HIF_DEVICE *device)
+{
+    SDIO_STATUS status;
+
+    DBG_ASSERT(device != NULL);
+    DBG_ASSERT(device->handle != NULL);
+
+    /* Register the IRQ Handler */
+    SDDEVICE_SET_IRQ_HANDLER(device->handle, hifIRQHandler, device);
+
+    /* Unmask our function IRQ */
+    status = SDLIB_IssueConfig(device->handle, SDCONFIG_FUNC_UNMASK_IRQ, 
+                               NULL, 0);
+    DBG_ASSERT(SDIO_SUCCESS(status));
+}
+
+void HIFMaskInterrupt(HIF_DEVICE *device)
+{
+    SDIO_STATUS status;
+    DBG_ASSERT(device != NULL);
+    DBG_ASSERT(device->handle != NULL);
+
+    /* Mask our function IRQ */
+    status = SDLIB_IssueConfig(device->handle, SDCONFIG_FUNC_MASK_IRQ, 
+                               NULL, 0);
+    DBG_ASSERT(SDIO_SUCCESS(status));
+
+    /* Unregister the IRQ Handler */
+    SDDEVICE_SET_IRQ_HANDLER(device->handle, NULL, NULL);
+}
+
+static BUS_REQUEST *hifAllocateBusRequest(void) 
+{
+    BUS_REQUEST *busrequest;
+
+    /* Acquire lock */
+    CriticalSectionAcquire(&lock);
+
+    /* Remove first in list */
+    if((busrequest = s_busRequestFreeQueue) != NULL)
+    {
+        s_busRequestFreeQueue = busrequest->next;
+    }
+
+    /* Release lock */
+    CriticalSectionRelease(&lock);
+
+    return busrequest;
+}
+
+static void
+hifFreeBusRequest(BUS_REQUEST *busrequest)
+{
+    DBG_ASSERT(busrequest != NULL);
+
+    /* Acquire lock */
+    CriticalSectionAcquire(&lock);
+
+    /* Insert first in list */
+    busrequest->next = s_busRequestFreeQueue;
+    s_busRequestFreeQueue = busrequest;
+
+    /* Release lock */
+    CriticalSectionRelease(&lock);
+}
+
+void
+hifDeviceRemoved(SDFUNCTION *function, SDDEVICE *handle)
+{
+    A_STATUS status;
+    HIF_DEVICE *device;
+    DBG_ASSERT(function != NULL);
+    DBG_ASSERT(handle != NULL);
+
+    device = getHifDevice(handle);
+    status = htcCallbacks.deviceRemovedHandler(device->htc_handle, A_OK);
+   
+        /* cleanup the helper thread */ 
+    if (device->helper_started) {
+        SDLIB_OSDeleteHelper(&device->insert_helper);
+        device->helper_started = FALSE;        
+    }
+    
+    delHifDevice(handle);
+    DBG_ASSERT(status == A_OK);
+}
+
+HIF_DEVICE *
+addHifDevice(SDDEVICE *handle)
+{
+    DBG_ASSERT(handle != NULL);
+    hifDevice[0].handle = handle;
+    return &hifDevice[0];
+}
+
+HIF_DEVICE *
+getHifDevice(SDDEVICE *handle)
+{
+    DBG_ASSERT(handle != NULL);
+    return &hifDevice[0];
+}
+
+void
+delHifDevice(SDDEVICE *handle)
+{
+    DBG_ASSERT(handle != NULL);
+    hifDevice[0].handle = NULL;
+}
+
+static void ResetAllCards(void)
+{
+    UINT8       data;
+    SDIO_STATUS status;
+    int         i;
+    
+    data = SDIO_IO_RESET;
+    
+    /* set the I/O CARD reset bit:
+     * NOTE: we are exploiting a "feature" of the SDIO core that resets the core when you
+     * set the RES bit in the SDIO_IO_ABORT register.  This bit however "normally" resets the
+     * I/O functions leaving the SDIO core in the same state (as per SDIO spec).  
+     * In this design, this reset can be used to reset the SDIO core itself */
+    for (i = 0; i < HIF_MAX_DEVICES; i++) {
+        if (hifDevice[i].handle != NULL) {            
+            AR_DEBUG_PRINTF(ATH_DEBUG_TRACE, 
+                        ("Issuing I/O Card reset for instance: %d \n",i));
+                /* set the I/O Card reset bit */    
+            status = SDLIB_IssueCMD52(hifDevice[i].handle, 
+                                      0,                    /* function 0 space */
+                                      SDIO_IO_ABORT_REG, 
+                                      &data,                
+                                      1,                    /* 1 byte */ 
+                                      TRUE);                /* write */
+        }    
+    }
+    
+}
+
+void HIFSetHandle(void *hif_handle, void *handle)
+{
+    HIF_DEVICE *device = (HIF_DEVICE *) hif_handle;
+
+    device->htc_handle = handle;
+
+    return;
+}

Added: trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/ar6k.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/ar6k.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/ar6k.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,991 @@
+/*
+ * AR6K device layer that handles register level I/O
+ *
+ * Copyright (c) 2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+#include "a_config.h"
+#include "athdefs.h"
+#include "a_types.h"
+#include "AR6Khwreg.h"
+#include "a_osapi.h"
+#include "a_debug.h"
+#include "hif.h"
+#include "htc_packet.h"
+#include "ar6k.h"
+
+#define MAILBOX_FOR_BLOCK_SIZE 1
+
+extern A_UINT32 resetok;
+
+static A_STATUS DevEnableInterrupts(AR6K_DEVICE *pDev);
+static A_STATUS DevDisableInterrupts(AR6K_DEVICE *pDev);
+
+#define LOCK_AR6K(p)      A_MUTEX_LOCK(&(p)->Lock);
+#define UNLOCK_AR6K(p)    A_MUTEX_UNLOCK(&(p)->Lock);
+
+void AR6KFreeIOPacket(AR6K_DEVICE *pDev, HTC_PACKET *pPacket)
+{
+    LOCK_AR6K(pDev);
+    HTC_PACKET_ENQUEUE(&pDev->RegisterIOList,pPacket);
+    UNLOCK_AR6K(pDev);
+}
+
+HTC_PACKET *AR6KAllocIOPacket(AR6K_DEVICE *pDev)
+{
+    HTC_PACKET *pPacket;
+
+    LOCK_AR6K(pDev);
+    pPacket = HTC_PACKET_DEQUEUE(&pDev->RegisterIOList);
+    UNLOCK_AR6K(pDev);
+
+    return pPacket;
+}
+
+A_STATUS DevSetup(AR6K_DEVICE *pDev)
+{
+    A_UINT32 mailboxaddrs[AR6K_MAILBOXES];
+    A_UINT32 blocksizes[AR6K_MAILBOXES];
+    A_STATUS status = A_OK;
+    int      i;
+
+    AR_DEBUG_ASSERT(AR6K_IRQ_PROC_REGS_SIZE == 16);
+    AR_DEBUG_ASSERT(AR6K_IRQ_ENABLE_REGS_SIZE == 4);
+
+    do {
+            /* give a handle to HIF for this target */
+        HIFSetHandle(pDev->HIFDevice, (void *)pDev);
+            /* initialize our free list of IO packets */
+        INIT_HTC_PACKET_QUEUE(&pDev->RegisterIOList);
+        A_MUTEX_INIT(&pDev->Lock);
+
+            /* get the addresses for all 4 mailboxes */
+        status = HIFConfigureDevice(pDev->HIFDevice, HIF_DEVICE_GET_MBOX_ADDR,
+                                    mailboxaddrs, sizeof(mailboxaddrs));
+
+        if (status != A_OK) {
+            AR_DEBUG_ASSERT(FALSE);
+            break;
+        }
+
+            /* carve up register I/O packets (these are for ASYNC register I/O ) */
+        for (i = 0; i < AR6K_MAX_REG_IO_BUFFERS; i++) {
+            HTC_PACKET *pIOPacket;
+            pIOPacket = &pDev->RegIOBuffers[i].HtcPacket;
+            SET_HTC_PACKET_INFO_RX_REFILL(pIOPacket,
+                                          pDev,
+                                          pDev->RegIOBuffers[i].Buffer,
+                                          AR6K_REG_IO_BUFFER_SIZE,
+                                          0); /* don't care */
+            AR6KFreeIOPacket(pDev,pIOPacket);
+        }
+
+            /* get the address of the mailbox we are using */
+        pDev->MailboxAddress = mailboxaddrs[HTC_MAILBOX];
+
+            /* get the block sizes */
+        status = HIFConfigureDevice(pDev->HIFDevice, HIF_DEVICE_GET_MBOX_BLOCK_SIZE,
+                                    blocksizes, sizeof(blocksizes));
+
+        if (status != A_OK) {
+            AR_DEBUG_ASSERT(FALSE);
+            break;
+        }
+
+            /* note: we actually get the block size of a mailbox other than 0, for SDIO the block
+             * size on mailbox 0 is artificially set to 1.  So we use the block size that is set
+             * for the other 3 mailboxes */
+        pDev->BlockSize = blocksizes[MAILBOX_FOR_BLOCK_SIZE];
+            /* must be a power of 2 */
+        AR_DEBUG_ASSERT((pDev->BlockSize & (pDev->BlockSize - 1)) == 0);
+
+            /* assemble mask, used for padding to a block */
+        pDev->BlockMask = pDev->BlockSize - 1;
+
+        AR_DEBUG_PRINTF(ATH_DEBUG_TRC,("BlockSize: %d, MailboxAddress:0x%X \n",
+                    pDev->BlockSize, pDev->MailboxAddress));
+
+        pDev->GetPendingEventsFunc = NULL;
+            /* see if the HIF layer implements the get pending events function  */
+        HIFConfigureDevice(pDev->HIFDevice,
+                           HIF_DEVICE_GET_PENDING_EVENTS_FUNC,
+                           &pDev->GetPendingEventsFunc,
+                           sizeof(pDev->GetPendingEventsFunc));
+
+            /* assume we can process HIF interrupt events asynchronously */
+        pDev->HifIRQProcessingMode = HIF_DEVICE_IRQ_ASYNC_SYNC;
+
+            /* see if the HIF layer overrides this assumption */
+        HIFConfigureDevice(pDev->HIFDevice,
+                           HIF_DEVICE_GET_IRQ_PROC_MODE,
+                           &pDev->HifIRQProcessingMode,
+                           sizeof(pDev->HifIRQProcessingMode));
+
+        switch (pDev->HifIRQProcessingMode) {
+            case HIF_DEVICE_IRQ_SYNC_ONLY:
+                AR_DEBUG_PRINTF(ATH_DEBUG_TRC,("HIF Interrupt processing is SYNC ONLY\n"));
+                break;
+            case HIF_DEVICE_IRQ_ASYNC_SYNC:
+                AR_DEBUG_PRINTF(ATH_DEBUG_TRC,("HIF Interrupt processing is ASYNC and SYNC\n"));
+                break;
+            default:
+                AR_DEBUG_ASSERT(FALSE);
+        }
+
+        pDev->HifMaskUmaskRecvEvent = NULL;
+
+            /* see if the HIF layer implements the mask/unmask recv events function  */
+        HIFConfigureDevice(pDev->HIFDevice,
+                           HIF_DEVICE_GET_RECV_EVENT_MASK_UNMASK_FUNC,
+                           &pDev->HifMaskUmaskRecvEvent,
+                           sizeof(pDev->HifMaskUmaskRecvEvent));
+
+        AR_DEBUG_PRINTF(ATH_DEBUG_TRC,("HIF special overrides : 0x%X , 0x%X\n",
+                 (A_UINT32)pDev->GetPendingEventsFunc, (A_UINT32)pDev->HifMaskUmaskRecvEvent));
+
+        status = DevDisableInterrupts(pDev);
+
+    } while (FALSE);
+
+    if (A_FAILED(status)) {
+            /* make sure handle is cleared */
+        HIFSetHandle(pDev->HIFDevice, NULL);
+    }
+
+    return status;
+
+}
+
+static A_STATUS DevEnableInterrupts(AR6K_DEVICE *pDev)
+{
+    A_STATUS                  status;
+    AR6K_IRQ_ENABLE_REGISTERS regs;
+
+    LOCK_AR6K(pDev);
+
+        /* Enable all the interrupts except for the dragon interrupt */
+    pDev->IrqEnableRegisters.int_status_enable = INT_STATUS_ENABLE_ERROR_SET(0x01) |
+                                      INT_STATUS_ENABLE_CPU_SET(0x01) |
+                                      INT_STATUS_ENABLE_COUNTER_SET(0x01);
+
+    if (NULL == pDev->GetPendingEventsFunc) {
+        pDev->IrqEnableRegisters.int_status_enable |= INT_STATUS_ENABLE_MBOX_DATA_SET(0x01);
+    } else {
+        /* The HIF layer provided us with a pending events function which means that
+         * the detection of pending mbox messages is handled in the HIF layer.
+         * This is the case for the SPI2 interface.
+         * In the normal case we enable MBOX interrupts, for the case
+         * with HIFs that offer this mechanism, we keep these interrupts
+         * masked */
+        pDev->IrqEnableRegisters.int_status_enable &= ~INT_STATUS_ENABLE_MBOX_DATA_SET(0x01);
+    }
+
+
+    /* Set up the CPU Interrupt Status Register */
+    pDev->IrqEnableRegisters.cpu_int_status_enable = CPU_INT_STATUS_ENABLE_BIT_SET(0x00);
+
+    /* Set up the Error Interrupt Status Register */
+    pDev->IrqEnableRegisters.error_status_enable =
+                                  ERROR_STATUS_ENABLE_RX_UNDERFLOW_SET(0x01) |
+                                  ERROR_STATUS_ENABLE_TX_OVERFLOW_SET(0x01);
+
+    /* Set up the Counter Interrupt Status Register (only for debug interrupt to catch fatal errors) */
+    pDev->IrqEnableRegisters.counter_int_status_enable =
+        COUNTER_INT_STATUS_ENABLE_BIT_SET(AR6K_TARGET_DEBUG_INTR_MASK);
+
+        /* copy into our temp area */
+    A_MEMCPY(&regs,&pDev->IrqEnableRegisters,AR6K_IRQ_ENABLE_REGS_SIZE);
+
+    UNLOCK_AR6K(pDev);
+
+        /* always synchronous */
+    status = HIFReadWrite(pDev->HIFDevice,
+                          INT_STATUS_ENABLE_ADDRESS,
+                          &regs.int_status_enable,
+                          AR6K_IRQ_ENABLE_REGS_SIZE,
+                          HIF_WR_SYNC_BYTE_INC,
+                          NULL);
+
+    if (status != A_OK) {
+        /* Can't write it for some reason */
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR,
+                        ("Failed to update interrupt control registers err: %d\n", status));
+
+    }
+
+    return status;
+}
+
+static A_STATUS DevDisableInterrupts(AR6K_DEVICE *pDev)
+{
+    AR6K_IRQ_ENABLE_REGISTERS regs;
+
+    LOCK_AR6K(pDev);
+        /* Disable all interrupts */
+    pDev->IrqEnableRegisters.int_status_enable = 0;
+    pDev->IrqEnableRegisters.cpu_int_status_enable = 0;
+    pDev->IrqEnableRegisters.error_status_enable = 0;
+    pDev->IrqEnableRegisters.counter_int_status_enable = 0;
+        /* copy into our temp area */
+    A_MEMCPY(&regs,&pDev->IrqEnableRegisters,AR6K_IRQ_ENABLE_REGS_SIZE);
+
+    UNLOCK_AR6K(pDev);
+
+        /* always synchronous */
+    return HIFReadWrite(pDev->HIFDevice,
+                        INT_STATUS_ENABLE_ADDRESS,
+                        &regs.int_status_enable,
+                        AR6K_IRQ_ENABLE_REGS_SIZE,
+                        HIF_WR_SYNC_BYTE_INC,
+                        NULL);
+}
+
+/* enable device interrupts */
+A_STATUS DevUnmaskInterrupts(AR6K_DEVICE *pDev)
+{
+        /* Unmask the host controller interrupts */
+    HIFUnMaskInterrupt(pDev->HIFDevice);
+
+    return DevEnableInterrupts(pDev);
+}
+
+/* disable all device interrupts */
+A_STATUS DevMaskInterrupts(AR6K_DEVICE *pDev)
+{
+    A_STATUS status;
+
+    status = DevDisableInterrupts(pDev);
+
+    if (A_SUCCESS(status)) {
+            /* Disable the interrupt at the HIF layer */
+        HIFMaskInterrupt(pDev->HIFDevice);
+    }
+
+    return status;
+}
+
+/* callback when our fetch to enable/disable completes */
+static void DevDoEnableDisableRecvAsyncHandler(void *Context, HTC_PACKET *pPacket)
+{
+    AR6K_DEVICE *pDev = (AR6K_DEVICE *)Context;
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,("+DevDoEnableDisableRecvAsyncHandler: (dev: 0x%X)\n", (A_UINT32)pDev));
+
+    if (A_FAILED(pPacket->Status)) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR,
+                (" Failed to disable receiver, status:%d \n", pPacket->Status));
+    }
+        /* free this IO packet */
+    AR6KFreeIOPacket(pDev,pPacket);
+    AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,("-DevDoEnableDisableRecvAsyncHandler \n"));
+}
+
+/* disable packet reception (used in case the host runs out of buffers)
+ * this is the "override" method when the HIF reports another methods to
+ * disable recv events */
+static A_STATUS DevDoEnableDisableRecvOverride(AR6K_DEVICE *pDev, A_BOOL EnableRecv, A_BOOL AsyncMode)
+{
+    A_STATUS                  status = A_OK;
+    HTC_PACKET                *pIOPacket = NULL;
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC,("DevDoEnableDisableRecvOverride: Enable:%d Mode:%d\n",
+            EnableRecv,AsyncMode));
+
+    do {
+
+        if (AsyncMode) {
+
+            pIOPacket = AR6KAllocIOPacket(pDev);
+
+            if (NULL == pIOPacket) {
+                status = A_NO_MEMORY;
+                AR_DEBUG_ASSERT(FALSE);
+                break;
+            }
+
+                /* stick in our completion routine when the I/O operation completes */
+            pIOPacket->Completion = DevDoEnableDisableRecvAsyncHandler;
+            pIOPacket->pContext = pDev;
+
+                /* call the HIF layer override and do this asynchronously */
+            status = pDev->HifMaskUmaskRecvEvent(pDev->HIFDevice,
+                                                 EnableRecv ? HIF_UNMASK_RECV : HIF_MASK_RECV,
+                                                 pIOPacket);
+            break;
+        }
+
+            /* if we get here we are doing it synchronously */
+        status = pDev->HifMaskUmaskRecvEvent(pDev->HIFDevice,
+                                             EnableRecv ? HIF_UNMASK_RECV : HIF_MASK_RECV,
+                                             NULL);
+
+    } while (FALSE);
+
+    if (A_FAILED(status) && (pIOPacket != NULL)) {
+        AR6KFreeIOPacket(pDev,pIOPacket);
+    }
+
+    return status;
+}
+
+/* disable packet reception (used in case the host runs out of buffers)
+ * this is the "normal" method using the interrupt enable registers through
+ * the host I/F */
+static A_STATUS DevDoEnableDisableRecvNormal(AR6K_DEVICE *pDev, A_BOOL EnableRecv, A_BOOL AsyncMode)
+{
+    A_STATUS                  status = A_OK;
+    HTC_PACKET                *pIOPacket = NULL;
+    AR6K_IRQ_ENABLE_REGISTERS regs;
+
+        /* take the lock to protect interrupt enable shadows */
+    LOCK_AR6K(pDev);
+
+    if (EnableRecv) {
+        pDev->IrqEnableRegisters.int_status_enable |= INT_STATUS_ENABLE_MBOX_DATA_SET(0x01);
+    } else {
+        pDev->IrqEnableRegisters.int_status_enable &= ~INT_STATUS_ENABLE_MBOX_DATA_SET(0x01);
+    }
+
+        /* copy into our temp area */
+    A_MEMCPY(&regs,&pDev->IrqEnableRegisters,AR6K_IRQ_ENABLE_REGS_SIZE);
+    UNLOCK_AR6K(pDev);
+
+    do {
+
+        if (AsyncMode) {
+
+            pIOPacket = AR6KAllocIOPacket(pDev);
+
+            if (NULL == pIOPacket) {
+                status = A_NO_MEMORY;
+                AR_DEBUG_ASSERT(FALSE);
+                break;
+            }
+
+                /* copy values to write to our async I/O buffer */
+            A_MEMCPY(pIOPacket->pBuffer,&regs,AR6K_IRQ_ENABLE_REGS_SIZE);
+
+                /* stick in our completion routine when the I/O operation completes */
+            pIOPacket->Completion = DevDoEnableDisableRecvAsyncHandler;
+            pIOPacket->pContext = pDev;
+
+                /* write it out asynchronously */
+            HIFReadWrite(pDev->HIFDevice,
+                         INT_STATUS_ENABLE_ADDRESS,
+                         pIOPacket->pBuffer,
+                         AR6K_IRQ_ENABLE_REGS_SIZE,
+                         HIF_WR_ASYNC_BYTE_INC,
+                         pIOPacket);
+            break;
+        }
+
+        /* if we get here we are doing it synchronously */
+
+        status = HIFReadWrite(pDev->HIFDevice,
+                              INT_STATUS_ENABLE_ADDRESS,
+                              &regs.int_status_enable,
+                              AR6K_IRQ_ENABLE_REGS_SIZE,
+                              HIF_WR_SYNC_BYTE_INC,
+                              NULL);
+
+    } while (FALSE);
+
+    if (A_FAILED(status) && (pIOPacket != NULL)) {
+        AR6KFreeIOPacket(pDev,pIOPacket);
+    }
+
+    return status;
+}
+
+
+A_STATUS DevStopRecv(AR6K_DEVICE *pDev, A_BOOL AsyncMode)
+{
+    if (NULL == pDev->HifMaskUmaskRecvEvent) {
+        return DevDoEnableDisableRecvNormal(pDev,FALSE,AsyncMode);
+    } else {
+        return DevDoEnableDisableRecvOverride(pDev,FALSE,AsyncMode);
+    }
+}
+
+A_STATUS DevEnableRecv(AR6K_DEVICE *pDev, A_BOOL AsyncMode)
+{
+    if (NULL == pDev->HifMaskUmaskRecvEvent) {
+        return DevDoEnableDisableRecvNormal(pDev,TRUE,AsyncMode);
+    } else {
+        return DevDoEnableDisableRecvOverride(pDev,TRUE,AsyncMode);
+    }
+}
+
+void DevDumpRegisters(AR6K_IRQ_PROC_REGISTERS   *pIrqProcRegs,
+                      AR6K_IRQ_ENABLE_REGISTERS *pIrqEnableRegs)
+{
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_DUMP, ("\n<------- Register Table -------->\n"));
+
+    if (pIrqProcRegs != NULL) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_DUMP,
+            ("Int Status:               0x%x\n",pIrqProcRegs->host_int_status));
+        AR_DEBUG_PRINTF(ATH_DEBUG_DUMP,
+            ("CPU Int Status:            0x%x\n",pIrqProcRegs->cpu_int_status));
+        AR_DEBUG_PRINTF(ATH_DEBUG_DUMP,
+            ("Error Int Status:          0x%x\n",pIrqProcRegs->error_int_status));
+        AR_DEBUG_PRINTF(ATH_DEBUG_DUMP,
+            ("Counter Int Status:        0x%x\n",pIrqProcRegs->counter_int_status));
+        AR_DEBUG_PRINTF(ATH_DEBUG_DUMP,
+            ("Mbox Frame:                0x%x\n",pIrqProcRegs->mbox_frame));
+        AR_DEBUG_PRINTF(ATH_DEBUG_DUMP,
+            ("Rx Lookahead Valid:        0x%x\n",pIrqProcRegs->rx_lookahead_valid));
+        AR_DEBUG_PRINTF(ATH_DEBUG_DUMP,
+            ("Rx Lookahead 0:            0x%x\n",pIrqProcRegs->rx_lookahead[0]));
+        AR_DEBUG_PRINTF(ATH_DEBUG_DUMP,
+            ("Rx Lookahead 1:            0x%x\n",pIrqProcRegs->rx_lookahead[1]));
+    }
+
+    if (pIrqEnableRegs != NULL) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_DUMP,
+            ("Int Status Enable:         0x%x\n",pIrqEnableRegs->int_status_enable));
+        AR_DEBUG_PRINTF(ATH_DEBUG_DUMP,
+            ("Counter Int Status Enable: 0x%x\n",pIrqEnableRegs->counter_int_status_enable));
+        AR_DEBUG_PRINTF(ATH_DEBUG_DUMP, ("<------------------------------->\n"));
+    }
+}
+
+
+#ifdef MBOXHW_UNIT_TEST
+
+
+/* This is a mailbox hardware unit test that must be called in a schedulable context
+ * This test is very simple, it will send a list of buffers with a counting pattern
+ * and the target will invert the data and send the message back
+ *
+ * the unit test has the following constraints:
+ *
+ * The target has at least 8 buffers of 256 bytes each. The host will send
+ * the following pattern of buffers in rapid succession :
+ *
+ * 1 buffer - 128 bytes
+ * 1 buffer - 256 bytes
+ * 1 buffer - 512 bytes
+ * 1 buffer - 1024 bytes
+ *
+ * The host will send the buffers to one mailbox and wait for buffers to be reflected
+ * back from the same mailbox. The target sends the buffers FIFO order.
+ * Once the final buffer has been received for a mailbox, the next mailbox is tested.
+ *
+ *
+ * Note:  To simplifythe test , we assume that the chosen buffer sizes
+ *        will fall on a nice block pad
+ *
+ * It is expected that higher-order tests will be written to stress the mailboxes using
+ * a message-based protocol (with some performance timming) that can create more
+ * randomness in the packets sent over mailboxes.
+ *
+ * */
+
+#define A_ROUND_UP_PWR2(x, align)    (((int) (x) + ((align)-1)) & ~((align)-1))
+
+#define BUFFER_BLOCK_PAD 128
+
+#if 0
+#define BUFFER1 128
+#define BUFFER2 256
+#define BUFFER3 512
+#define BUFFER4 1024
+#endif
+
+#if 1
+#define BUFFER1 80
+#define BUFFER2 200
+#define BUFFER3 444
+#define BUFFER4 800
+#endif
+
+#define TOTAL_BYTES (A_ROUND_UP_PWR2(BUFFER1,BUFFER_BLOCK_PAD) + \
+                     A_ROUND_UP_PWR2(BUFFER2,BUFFER_BLOCK_PAD) + \
+                     A_ROUND_UP_PWR2(BUFFER3,BUFFER_BLOCK_PAD) + \
+                     A_ROUND_UP_PWR2(BUFFER4,BUFFER_BLOCK_PAD) )
+
+#define TEST_BYTES (BUFFER1 +  BUFFER2 + BUFFER3 + BUFFER4)
+
+#define TEST_CREDITS_RECV_TIMEOUT 100
+
+static A_UINT8  g_Buffer[TOTAL_BYTES];
+static A_UINT32 g_MailboxAddrs[AR6K_MAILBOXES];
+static A_UINT32 g_BlockSizes[AR6K_MAILBOXES];
+
+#define BUFFER_PROC_LIST_DEPTH 4
+
+typedef struct _BUFFER_PROC_LIST{
+    A_UINT8  *pBuffer;
+    A_UINT32 length;
+}BUFFER_PROC_LIST;
+
+
+#define PUSH_BUFF_PROC_ENTRY(pList,len,pCurrpos) \
+{                                                   \
+    (pList)->pBuffer = (pCurrpos);                  \
+    (pList)->length = (len);                        \
+    (pCurrpos) += (len);                            \
+    (pList)++;                                      \
+}
+
+/* a simple and crude way to send different "message" sizes */
+static void AssembleBufferList(BUFFER_PROC_LIST *pList)
+{
+    A_UINT8 *pBuffer = g_Buffer;
+
+#if BUFFER_PROC_LIST_DEPTH < 4
+#error "Buffer processing list depth is not deep enough!!"
+#endif
+
+    PUSH_BUFF_PROC_ENTRY(pList,BUFFER1,pBuffer);
+    PUSH_BUFF_PROC_ENTRY(pList,BUFFER2,pBuffer);
+    PUSH_BUFF_PROC_ENTRY(pList,BUFFER3,pBuffer);
+    PUSH_BUFF_PROC_ENTRY(pList,BUFFER4,pBuffer);
+
+}
+
+#define FILL_ZERO     TRUE
+#define FILL_COUNTING FALSE
+static void InitBuffers(A_BOOL Zero)
+{
+    A_UINT16 *pBuffer16 = (A_UINT16 *)g_Buffer;
+    int      i;
+
+        /* fill buffer with 16 bit counting pattern or zeros */
+    for (i = 0; i <  (TOTAL_BYTES / 2) ; i++) {
+        if (!Zero) {
+            pBuffer16[i] = (A_UINT16)i;
+        } else {
+            pBuffer16[i] = 0;
+        }
+    }
+}
+
+
+static A_BOOL CheckOneBuffer(A_UINT16 *pBuffer16, int Length)
+{
+    int      i;
+    A_UINT16 startCount;
+    A_BOOL   success = TRUE;
+
+        /* get the starting count */
+    startCount = pBuffer16[0];
+        /* invert it, this is the expected value */
+    startCount = ~startCount;
+        /* scan the buffer and verify */
+    for (i = 0; i < (Length / 2) ; i++,startCount++) {
+            /* target will invert all the data */
+        if ((A_UINT16)pBuffer16[i] != (A_UINT16)~startCount) {
+            success = FALSE;
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Invalid Data Got:0x%X, Expecting:0x%X (offset:%d, total:%d) \n",
+                        pBuffer16[i], ((A_UINT16)~startCount), i, Length));
+             AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("0x%X 0x%X 0x%X 0x%X \n",
+                        pBuffer16[i], pBuffer16[i + 1], pBuffer16[i + 2],pBuffer16[i+3]));
+            break;
+        }
+    }
+
+    return success;
+}
+
+static A_BOOL CheckBuffers(void)
+{
+    int      i;
+    A_BOOL   success = TRUE;
+    BUFFER_PROC_LIST checkList[BUFFER_PROC_LIST_DEPTH];
+
+        /* assemble the list */
+    AssembleBufferList(checkList);
+
+        /* scan the buffers and verify */
+    for (i = 0; i < BUFFER_PROC_LIST_DEPTH ; i++) {
+        success = CheckOneBuffer((A_UINT16 *)checkList[i].pBuffer, checkList[i].length);
+        if (!success) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Buffer : 0x%X, Length:%d failed verify \n",
+                        (A_UINT32)checkList[i].pBuffer, checkList[i].length));
+            break;
+        }
+    }
+
+    return success;
+}
+
+    /* find the end marker for the last buffer we will be sending */
+static A_UINT16 GetEndMarker(void)
+{
+    A_UINT8  *pBuffer;
+    BUFFER_PROC_LIST checkList[BUFFER_PROC_LIST_DEPTH];
+
+        /* fill up buffers with the normal counting pattern */
+    InitBuffers(FILL_COUNTING);
+
+        /* assemble the list we will be sending down */
+    AssembleBufferList(checkList);
+        /* point to the last 2 bytes of the last buffer */
+    pBuffer = &(checkList[BUFFER_PROC_LIST_DEPTH - 1].pBuffer[(checkList[BUFFER_PROC_LIST_DEPTH - 1].length) - 2]);
+
+        /* the last count in the last buffer is the marker */
+    return (A_UINT16)pBuffer[0] | ((A_UINT16)pBuffer[1] << 8);
+}
+
+#define ATH_PRINT_OUT_ZONE ATH_DEBUG_ERR
+
+/* send the ordered buffers to the target */
+static A_STATUS SendBuffers(AR6K_DEVICE *pDev, int mbox)
+{
+    A_STATUS         status = A_OK;
+    A_UINT32         request = HIF_WR_SYNC_BLOCK_INC;
+    BUFFER_PROC_LIST sendList[BUFFER_PROC_LIST_DEPTH];
+    int              i;
+    int              totalBytes = 0;
+    int              paddedLength;
+    int              totalwPadding = 0;
+
+    AR_DEBUG_PRINTF(ATH_PRINT_OUT_ZONE, ("Sending buffers on mailbox : %d \n",mbox));
+
+        /* fill buffer with counting pattern */
+    InitBuffers(FILL_COUNTING);
+
+        /* assemble the order in which we send */
+    AssembleBufferList(sendList);
+
+    for (i = 0; i < BUFFER_PROC_LIST_DEPTH; i++) {
+
+            /* we are doing block transfers, so we need to pad everything to a block size */
+        paddedLength = (sendList[i].length + (g_BlockSizes[mbox] - 1)) &
+                       (~(g_BlockSizes[mbox] - 1));
+
+            /* send each buffer synchronously */
+        status = HIFReadWrite(pDev->HIFDevice,
+                              g_MailboxAddrs[mbox],
+                              sendList[i].pBuffer,
+                              paddedLength,
+                              request,
+                              NULL);
+        if (status != A_OK) {
+            break;
+        }
+        totalBytes += sendList[i].length;
+        totalwPadding += paddedLength;
+    }
+
+    AR_DEBUG_PRINTF(ATH_PRINT_OUT_ZONE, ("Sent %d bytes (%d padded bytes) to mailbox : %d \n",totalBytes,totalwPadding,mbox));
+
+    return status;
+}
+
+/* poll the mailbox credit counter until we get a credit or timeout */
+static A_STATUS GetCredits(AR6K_DEVICE *pDev, int mbox, int *pCredits)
+{
+    A_STATUS status = A_OK;
+    int      timeout = TEST_CREDITS_RECV_TIMEOUT;
+    A_UINT8  credits = 0;
+    A_UINT32 address;
+
+    while (TRUE) {
+
+            /* Read the counter register to get credits, this auto-decrements  */
+        address = COUNT_DEC_ADDRESS + (AR6K_MAILBOXES + mbox) * 4;
+        status = HIFReadWrite(pDev->HIFDevice, address, &credits, sizeof(credits),
+                              HIF_RD_SYNC_BYTE_FIX, NULL);
+        if (status != A_OK) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR,
+                ("Unable to decrement the command credit count register (mbox=%d)\n",mbox));
+            status = A_ERROR;
+            break;
+        }
+
+        if (credits) {
+            break;
+        }
+
+        timeout--;
+
+        if (timeout <= 0) {
+              AR_DEBUG_PRINTF(ATH_DEBUG_ERR,
+                (" Timeout reading credit registers (mbox=%d, address:0x%X) \n",mbox,address));
+            status = A_ERROR;
+            break;
+        }
+
+         /* delay a little, target may not be ready */
+         A_MDELAY(1000);
+
+    }
+
+    if (status == A_OK) {
+        *pCredits = credits;
+    }
+
+    return status;
+}
+
+
+/* wait for the buffers to come back */
+static A_STATUS RecvBuffers(AR6K_DEVICE *pDev, int mbox)
+{
+    A_STATUS         status = A_OK;
+    A_UINT32         request = HIF_RD_SYNC_BLOCK_INC;
+    BUFFER_PROC_LIST recvList[BUFFER_PROC_LIST_DEPTH];
+    int              curBuffer;
+    int              credits;
+    int              i;
+    int              totalBytes = 0;
+    int              paddedLength;
+    int              totalwPadding = 0;
+
+    AR_DEBUG_PRINTF(ATH_PRINT_OUT_ZONE, ("Waiting for buffers on mailbox : %d \n",mbox));
+
+        /* zero the buffers */
+    InitBuffers(FILL_ZERO);
+
+        /* assemble the order in which we should receive */
+    AssembleBufferList(recvList);
+
+    curBuffer = 0;
+
+    while (curBuffer < BUFFER_PROC_LIST_DEPTH) {
+
+            /* get number of buffers that have been completed, this blocks
+             * until we get at least 1 credit or it times out */
+        status = GetCredits(pDev, mbox, &credits);
+
+        if (status != A_OK) {
+            break;
+        }
+
+        AR_DEBUG_PRINTF(ATH_PRINT_OUT_ZONE, ("Got %d messages on mailbox : %d \n",credits, mbox));
+
+            /* get all the buffers that are sitting on the queue */
+        for (i = 0; i < credits; i++) {
+            AR_DEBUG_ASSERT(curBuffer < BUFFER_PROC_LIST_DEPTH);
+                /* recv the current buffer synchronously, the buffers should come back in
+                 * order... with padding applied by the target */
+            paddedLength = (recvList[curBuffer].length + (g_BlockSizes[mbox] - 1)) &
+                       (~(g_BlockSizes[mbox] - 1));
+
+            status = HIFReadWrite(pDev->HIFDevice,
+                                  g_MailboxAddrs[mbox],
+                                  recvList[curBuffer].pBuffer,
+                                  paddedLength,
+                                  request,
+                                  NULL);
+            if (status != A_OK) {
+                AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Failed to read %d bytes on mailbox:%d : address:0x%X \n",
+                        recvList[curBuffer].length, mbox, g_MailboxAddrs[mbox]));
+                break;
+            }
+
+            totalwPadding += paddedLength;
+            totalBytes += recvList[curBuffer].length;
+            curBuffer++;
+        }
+
+        if (status != A_OK) {
+            break;
+        }
+            /* go back and get some more */
+        credits = 0;
+    }
+
+    if (totalBytes != TEST_BYTES) {
+        AR_DEBUG_ASSERT(FALSE);
+    }  else {
+        AR_DEBUG_PRINTF(ATH_PRINT_OUT_ZONE, ("Got all buffers on mbox:%d total recv :%d (w/Padding : %d) \n",
+            mbox, totalBytes, totalwPadding));
+    }
+
+    return status;
+
+
+}
+
+static A_STATUS DoOneMboxHWTest(AR6K_DEVICE *pDev, int mbox)
+{
+    A_STATUS status;
+
+    do {
+            /* send out buffers */
+        status = SendBuffers(pDev,mbox);
+
+        if (status != A_OK) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Sending buffers Failed : %d mbox:%d\n",status,mbox));
+            break;
+        }
+
+            /* go get them, this will block */
+        status =  RecvBuffers(pDev, mbox);
+
+        if (status != A_OK) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Recv buffers Failed : %d mbox:%d\n",status,mbox));
+            break;
+        }
+
+            /* check the returned data patterns */
+        if (!CheckBuffers()) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Buffer Verify Failed : mbox:%d\n",mbox));
+            status = A_ERROR;
+            break;
+        }
+
+        AR_DEBUG_PRINTF(ATH_PRINT_OUT_ZONE, (" Send/Recv success! mailbox : %d \n",mbox));
+
+    }  while (FALSE);
+
+    return status;
+}
+
+/* here is where the test starts */
+A_STATUS DoMboxHWTest(AR6K_DEVICE *pDev)
+{
+    int      i;
+    A_STATUS status;
+    int      credits = 0;
+    A_UINT8  params[4];
+    int      numBufs;
+    int      bufferSize;
+    A_UINT16 temp;
+
+
+    AR_DEBUG_PRINTF(ATH_PRINT_OUT_ZONE, (" DoMboxHWTest START -  \n"));
+
+    do {
+            /* get the addresses for all 4 mailboxes */
+        status = HIFConfigureDevice(pDev->HIFDevice, HIF_DEVICE_GET_MBOX_ADDR,
+                                    g_MailboxAddrs, sizeof(g_MailboxAddrs));
+
+        if (status != A_OK) {
+            AR_DEBUG_ASSERT(FALSE);
+            break;
+        }
+
+            /* get the block sizes */
+        status = HIFConfigureDevice(pDev->HIFDevice, HIF_DEVICE_GET_MBOX_BLOCK_SIZE,
+                                    g_BlockSizes, sizeof(g_BlockSizes));
+
+        if (status != A_OK) {
+            AR_DEBUG_ASSERT(FALSE);
+            break;
+        }
+
+            /* note, the HIF layer usually reports mbox 0 to have a block size of
+             * 1, but our test wants to run in block-mode for all mailboxes, so we treat all mailboxes
+             * the same. */
+        g_BlockSizes[0] = g_BlockSizes[1];
+        AR_DEBUG_PRINTF(ATH_PRINT_OUT_ZONE, ("Block Size to use: %d \n",g_BlockSizes[0]));
+
+        if (g_BlockSizes[1] > BUFFER_BLOCK_PAD) {
+            AR_DEBUG_PRINTF(ATH_PRINT_OUT_ZONE, ("%d Block size is too large for buffer pad %d\n",
+                g_BlockSizes[1], BUFFER_BLOCK_PAD));
+            break;
+        }
+
+        AR_DEBUG_PRINTF(ATH_PRINT_OUT_ZONE, ("Waiting for target.... \n"));
+
+            /* the target lets us know it is ready by giving us 1 credit on
+             * mailbox 0 */
+        status = GetCredits(pDev, 0, &credits);
+
+        if (status != A_OK) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Failed to wait for target ready \n"));
+            break;
+        }
+
+        AR_DEBUG_PRINTF(ATH_PRINT_OUT_ZONE, ("Target is ready ...\n"));
+
+            /* read the first 4 scratch registers */
+        status = HIFReadWrite(pDev->HIFDevice,
+                              SCRATCH_ADDRESS,
+                              params,
+                              4,
+                              HIF_RD_SYNC_BYTE_INC,
+                              NULL);
+
+        if (status != A_OK) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Failed to wait get parameters \n"));
+            break;
+        }
+
+        numBufs = params[0];
+        bufferSize = (int)(((A_UINT16)params[2] << 8) | (A_UINT16)params[1]);
+
+        AR_DEBUG_PRINTF(ATH_PRINT_OUT_ZONE,
+            ("Target parameters: bufs per mailbox:%d, buffer size:%d bytes (total space: %d, minimum required space (w/padding): %d) \n",
+            numBufs, bufferSize, (numBufs * bufferSize), TOTAL_BYTES));
+
+        if ((numBufs * bufferSize) < TOTAL_BYTES) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Not Enough buffer space to run test! need:%d, got:%d \n",
+                TOTAL_BYTES, (numBufs*bufferSize)));
+            status = A_ERROR;
+            break;
+        }
+
+        temp = GetEndMarker();
+
+        status = HIFReadWrite(pDev->HIFDevice,
+                              SCRATCH_ADDRESS + 4,
+                              (A_UINT8 *)&temp,
+                              2,
+                              HIF_WR_SYNC_BYTE_INC,
+                              NULL);
+
+        if (status != A_OK) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Failed to write end marker \n"));
+            break;
+        }
+
+        AR_DEBUG_PRINTF(ATH_PRINT_OUT_ZONE, ("End Marker: 0x%X \n",temp));
+
+        temp = (A_UINT16)g_BlockSizes[1];
+            /* convert to a mask */
+        temp = temp - 1;
+        status = HIFReadWrite(pDev->HIFDevice,
+                              SCRATCH_ADDRESS + 6,
+                              (A_UINT8 *)&temp,
+                              2,
+                              HIF_WR_SYNC_BYTE_INC,
+                              NULL);
+
+        if (status != A_OK) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Failed to write block mask \n"));
+            break;
+        }
+
+        AR_DEBUG_PRINTF(ATH_PRINT_OUT_ZONE, ("Set Block Mask: 0x%X \n",temp));
+
+            /* execute the test on each mailbox */
+        for (i = 0; i < AR6K_MAILBOXES; i++) {
+            status = DoOneMboxHWTest(pDev, i);
+            if (status != A_OK) {
+                break;
+            }
+        }
+
+    } while (FALSE);
+
+    if (status == A_OK) {
+        AR_DEBUG_PRINTF(ATH_PRINT_OUT_ZONE, (" DoMboxHWTest DONE - SUCCESS! -  \n"));
+    } else {
+        AR_DEBUG_PRINTF(ATH_PRINT_OUT_ZONE, (" DoMboxHWTest DONE - FAILED! -  \n"));
+    }
+        /* don't let HTC_Start continue, the target is actually not running any HTC code */
+    return A_ERROR;
+}
+#endif
+
+
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/ar6k.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/ar6k.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/ar6k.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,191 @@
+/*
+ *
+ * Copyright (c) 2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#ifndef AR6K_H_
+#define AR6K_H_
+
+#define AR6K_MAILBOXES 4
+
+/* HTC runs over mailbox 0 */
+#define HTC_MAILBOX          0
+
+#define AR6K_TARGET_DEBUG_INTR_MASK     0x01
+
+#define OTHER_INTS_ENABLED (INT_STATUS_ENABLE_ERROR_MASK |   \
+                            INT_STATUS_ENABLE_CPU_MASK   |   \
+                            INT_STATUS_ENABLE_COUNTER_MASK)
+
+//#define MBOXHW_UNIT_TEST 1
+
+#include "athstartpack.h"
+typedef PREPACK struct _AR6K_IRQ_PROC_REGISTERS {
+    A_UINT8                      host_int_status;
+    A_UINT8                      cpu_int_status;
+    A_UINT8                      error_int_status;
+    A_UINT8                      counter_int_status;
+    A_UINT8                      mbox_frame;
+    A_UINT8                      rx_lookahead_valid;
+    A_UINT8                      hole[2];
+    A_UINT32                     rx_lookahead[2];
+} POSTPACK AR6K_IRQ_PROC_REGISTERS;
+
+#define AR6K_IRQ_PROC_REGS_SIZE sizeof(AR6K_IRQ_PROC_REGISTERS)
+
+
+
+typedef PREPACK struct _AR6K_IRQ_ENABLE_REGISTERS {     
+    A_UINT8                      int_status_enable;
+    A_UINT8                      cpu_int_status_enable;
+    A_UINT8                      error_status_enable;
+    A_UINT8                      counter_int_status_enable;
+} POSTPACK AR6K_IRQ_ENABLE_REGISTERS;
+
+#include "athendpack.h"
+
+#define AR6K_IRQ_ENABLE_REGS_SIZE sizeof(AR6K_IRQ_ENABLE_REGISTERS)
+
+#define AR6K_REG_IO_BUFFER_SIZE     32
+#define AR6K_MAX_REG_IO_BUFFERS     8
+
+/* buffers for ASYNC I/O */
+typedef struct AR6K_ASYNC_REG_IO_BUFFER {
+    HTC_PACKET    HtcPacket;   /* we use an HTC packet as a wrapper for our async register-based I/O */
+    A_UINT8       Buffer[AR6K_REG_IO_BUFFER_SIZE];
+} AR6K_ASYNC_REG_IO_BUFFER;
+
+typedef struct _AR6K_DEVICE {
+    A_MUTEX_T                   Lock;
+    AR6K_IRQ_PROC_REGISTERS     IrqProcRegisters;
+    AR6K_IRQ_ENABLE_REGISTERS   IrqEnableRegisters;
+    void                        *HIFDevice;
+    A_UINT32                    BlockSize;
+    A_UINT32                    BlockMask;
+    A_UINT32                    MailboxAddress;
+    HIF_PENDING_EVENTS_FUNC     GetPendingEventsFunc;
+    void                        *HTCContext;
+    HTC_PACKET_QUEUE            RegisterIOList;
+    AR6K_ASYNC_REG_IO_BUFFER    RegIOBuffers[AR6K_MAX_REG_IO_BUFFERS];
+    void                        (*TargetFailureCallback)(void *Context);
+    A_STATUS                    (*MessagePendingCallback)(void *Context, A_UINT32 LookAhead, A_BOOL *pAsyncProc);
+    HIF_DEVICE_IRQ_PROCESSING_MODE  HifIRQProcessingMode;
+    HIF_MASK_UNMASK_RECV_EVENT      HifMaskUmaskRecvEvent;
+} AR6K_DEVICE;
+
+#define IS_DEV_IRQ_PROCESSING_ASYNC_ALLOWED(pDev) ((pDev)->HifIRQProcessingMode != HIF_DEVICE_IRQ_SYNC_ONLY)
+
+A_STATUS DevSetup(AR6K_DEVICE *pDev);
+A_STATUS DevUnmaskInterrupts(AR6K_DEVICE *pDev);
+A_STATUS DevMaskInterrupts(AR6K_DEVICE *pDev);
+A_STATUS DevPollMboxMsgRecv(AR6K_DEVICE *pDev,
+                            A_UINT32    *pLookAhead,
+                            int          TimeoutMS);
+A_STATUS DevRWCompletionHandler(void *context, A_STATUS status);
+A_STATUS DevDsrHandler(void *context);
+A_STATUS DevCheckPendingRecvMsgsAsync(void *context);
+void     DevDumpRegisters(AR6K_IRQ_PROC_REGISTERS   *pIrqProcRegs,
+                          AR6K_IRQ_ENABLE_REGISTERS *pIrqEnableRegs);
+
+#define DEV_STOP_RECV_ASYNC TRUE
+#define DEV_STOP_RECV_SYNC  FALSE
+#define DEV_ENABLE_RECV_ASYNC TRUE
+#define DEV_ENABLE_RECV_SYNC  FALSE
+A_STATUS DevStopRecv(AR6K_DEVICE *pDev, A_BOOL ASyncMode);
+A_STATUS DevEnableRecv(AR6K_DEVICE *pDev, A_BOOL ASyncMode);
+
+static INLINE A_STATUS DevSendPacket(AR6K_DEVICE *pDev, HTC_PACKET *pPacket, A_UINT32 SendLength) {
+    A_UINT32 paddedLength;
+    A_BOOL   sync = (pPacket->Completion == NULL) ? TRUE : FALSE;
+    A_STATUS status;
+
+       /* adjust the length to be a multiple of block size if appropriate */
+    paddedLength = (SendLength + (pDev->BlockMask)) &
+                    (~(pDev->BlockMask));
+#if 0 // BufferLength may not be set in , fix this...
+    if (paddedLength > pPacket->BufferLength) {
+        AR_DEBUG_ASSERT(FALSE);
+        if (pPacket->Completion != NULL) {
+            COMPLETE_HTC_PACKET(pPacket,A_EINVAL);
+        }
+        return A_EINVAL;
+    }
+#endif
+    AR_DEBUG_PRINTF(ATH_DEBUG_SEND,
+                ("DevSendPacket, Padded Length: %d Mbox:0x%X (mode:%s)\n",
+                paddedLength,
+                pDev->MailboxAddress,
+                sync ? "SYNC" : "ASYNC"));
+
+    status = HIFReadWrite(pDev->HIFDevice,
+                          pDev->MailboxAddress,
+                          pPacket->pBuffer,
+                          paddedLength,     /* the padded length */
+                          sync ? HIF_WR_SYNC_BLOCK_INC : HIF_WR_ASYNC_BLOCK_INC,
+                          sync ? NULL : pPacket);  /* pass the packet as the context to the HIF request */
+
+    if (sync) {
+        pPacket->Status = status;
+    }
+
+    return status;
+}
+
+static INLINE A_STATUS DevRecvPacket(AR6K_DEVICE *pDev, HTC_PACKET *pPacket, A_UINT32 RecvLength) {
+    A_UINT32 paddedLength;
+    A_STATUS status;
+    A_BOOL   sync = (pPacket->Completion == NULL) ? TRUE : FALSE;
+
+        /* adjust the length to be a multiple of block size if appropriate */
+    paddedLength = (RecvLength + (pDev->BlockMask)) &
+                    (~(pDev->BlockMask));
+    if (paddedLength > pPacket->BufferLength) {
+        AR_DEBUG_ASSERT(FALSE);
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR,
+                ("DevRecvPacket, Not enough space for padlen:%d recvlen:%d bufferlen:%d \n",
+                    paddedLength,RecvLength,pPacket->BufferLength));
+        if (pPacket->Completion != NULL) {
+            COMPLETE_HTC_PACKET(pPacket,A_EINVAL);
+        }
+        return A_EINVAL;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_RECV,
+                ("DevRecvPacket, Padded Length: %d Mbox:0x%X (mode:%s)\n",
+                paddedLength,
+                pDev->MailboxAddress,
+                sync ? "SYNC" : "ASYNC"));
+
+    status = HIFReadWrite(pDev->HIFDevice,
+                          pDev->MailboxAddress,
+                          pPacket->pBuffer,
+                          paddedLength,
+                          sync ? HIF_RD_SYNC_BLOCK_INC : HIF_RD_ASYNC_BLOCK_INC,
+                          sync ? NULL : pPacket);  /* pass the packet as the context to the HIF request */
+
+    if (sync) {
+        pPacket->Status = status;
+    }
+
+    return status;
+}
+
+#ifdef MBOXHW_UNIT_TEST
+A_STATUS DoMboxHWTest(AR6K_DEVICE *pDev);
+#endif
+
+#endif /*AR6K_H_*/

Added: trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/ar6k_events.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/ar6k_events.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/ar6k_events.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,638 @@
+/*
+ * AR6K Driver layer event handling (i.e. interrupts, message polling)
+ *
+ * Copyright (c) 2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+#include "a_config.h"
+#include "athdefs.h"
+#include "a_types.h"
+#include "AR6Khwreg.h"
+#include "a_osapi.h"
+#include "a_debug.h"
+#include "hif.h"
+#include "htc_packet.h"
+#include "ar6k.h"
+
+extern void AR6KFreeIOPacket(AR6K_DEVICE *pDev, HTC_PACKET *pPacket);
+extern HTC_PACKET *AR6KAllocIOPacket(AR6K_DEVICE *pDev);
+
+static A_STATUS DevServiceDebugInterrupt(AR6K_DEVICE *pDev);
+
+#define DELAY_PER_INTERVAL_MS 10  /* 10 MS delay per polling interval */
+
+/* completion routine for ALL HIF layer async I/O */
+A_STATUS DevRWCompletionHandler(void *context, A_STATUS status)
+{
+    HTC_PACKET *pPacket = (HTC_PACKET *)context;
+
+    COMPLETE_HTC_PACKET(pPacket,status);
+
+    return A_OK;
+}
+
+/* mailbox recv message polling */
+A_STATUS DevPollMboxMsgRecv(AR6K_DEVICE *pDev,
+                            A_UINT32    *pLookAhead,
+                            int          TimeoutMS)
+{
+    A_STATUS status = A_OK;
+    int      timeout = TimeoutMS/DELAY_PER_INTERVAL_MS;
+
+    AR_DEBUG_ASSERT(timeout > 0);
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_RECV,("+DevPollMboxMsgRecv \n"));
+
+    while (TRUE) {
+
+        if (pDev->GetPendingEventsFunc != NULL)
+		{
+
+            HIF_PENDING_EVENTS_INFO events;
+
+            /* the HIF layer uses a special mechanism to get events, do this
+             * synchronously */
+            status = pDev->GetPendingEventsFunc(pDev->HIFDevice,
+                                            &events,
+                                            NULL);
+            if (A_FAILED(status))
+			{
+                AR_DEBUG_PRINTF(ATH_DEBUG_ERR,("Failed to get pending events \n"));
+				break;
+            }
+
+            if (events.Events & HIF_RECV_MSG_AVAIL)
+			{
+                    /*  there is a message available, the lookahead should be valid now */
+                *pLookAhead = events.LookAhead;
+
+                break;
+            }
+        }
+		else
+		{
+
+                /* this is the standard HIF way.... */
+                /* load the register table */
+            status = HIFReadWrite(pDev->HIFDevice,
+                                  HOST_INT_STATUS_ADDRESS,
+                                  (A_UINT8 *)&pDev->IrqProcRegisters,
+                                  AR6K_IRQ_PROC_REGS_SIZE,
+                                  HIF_RD_SYNC_BYTE_INC,
+                                  NULL);
+
+            if (A_FAILED(status))
+			{
+                AR_DEBUG_PRINTF(ATH_DEBUG_ERR,("Failed to read register table \n"));
+                break;
+            }
+
+                /* check for MBOX data and valid lookahead */
+            if (pDev->IrqProcRegisters.host_int_status & (1 << HTC_MAILBOX))
+			{
+                if (pDev->IrqProcRegisters.rx_lookahead_valid & (1 << HTC_MAILBOX))
+				{
+                    /* mailbox has a message and the look ahead is valid */
+                    *pLookAhead = pDev->IrqProcRegisters.rx_lookahead[HTC_MAILBOX];
+                    break;
+                }
+            }
+
+        }
+
+        timeout--;
+
+        if (timeout <= 0)
+		{
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, (" Timeout waiting for recv message \n"));
+            status = A_ERROR;
+              
+                /* check if the target asserted */
+            if ( pDev->IrqProcRegisters.counter_int_status & AR6K_TARGET_DEBUG_INTR_MASK) {
+                    /* target signaled an assert, process this pending interrupt 
+                     * this will call the target failure handler */
+                DevServiceDebugInterrupt(pDev);
+            }
+            
+            break;
+        }
+
+            /* delay a little  */
+         A_MDELAY(DELAY_PER_INTERVAL_MS);
+         AR_DEBUG_PRINTF(ATH_DEBUG_RECV,("  Retry Mbox Poll : %d \n",timeout));
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_RECV,("-DevPollMboxMsgRecv \n"));
+
+    return status;
+}
+
+static A_STATUS DevServiceCPUInterrupt(AR6K_DEVICE *pDev)
+{
+    A_STATUS status;
+    A_UINT8  cpu_int_status;
+    A_UINT8  regBuffer[4];
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_IRQ, ("CPU Interrupt\n"));
+    cpu_int_status = pDev->IrqProcRegisters.cpu_int_status &
+                     pDev->IrqEnableRegisters.cpu_int_status_enable;
+    AR_DEBUG_ASSERT(cpu_int_status);
+    AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,
+                    ("Valid interrupt source(s) in CPU_INT_STATUS: 0x%x\n",
+                    cpu_int_status));
+
+        /* Clear the interrupt */
+    pDev->IrqProcRegisters.cpu_int_status &= ~cpu_int_status; /* W1C */
+    
+        /* set up the register transfer buffer to hit the register 4 times , this is done
+         * to make the access 4-byte aligned to mitigate issues with host bus interconnects that
+         * restrict bus transfer lengths to be a multiple of 4-bytes */
+         
+        /* set W1C value to clear the interrupt, this hits the register first */
+    regBuffer[0] = cpu_int_status; 
+        /* the remaining 4 values are set to zero which have no-effect  */
+    regBuffer[1] = 0;  
+    regBuffer[2] = 0;
+    regBuffer[3] = 0;
+    
+    status = HIFReadWrite(pDev->HIFDevice,
+                          CPU_INT_STATUS_ADDRESS,
+                          regBuffer,
+                          4,
+                          HIF_WR_SYNC_BYTE_FIX,
+                          NULL);
+
+    AR_DEBUG_ASSERT(status == A_OK);
+    return status;
+}
+
+
+static A_STATUS DevServiceErrorInterrupt(AR6K_DEVICE *pDev)
+{
+    A_STATUS status;
+    A_UINT8  error_int_status;
+    A_UINT8  regBuffer[4];
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_IRQ, ("Error Interrupt\n"));
+    error_int_status = pDev->IrqProcRegisters.error_int_status & 0x0F;
+    AR_DEBUG_ASSERT(error_int_status);
+    AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,
+                    ("Valid interrupt source(s) in ERROR_INT_STATUS: 0x%x\n",
+                    error_int_status));
+
+    if (ERROR_INT_STATUS_WAKEUP_GET(error_int_status)) {
+        /* Wakeup */
+        AR_DEBUG_PRINTF(ATH_DEBUG_IRQ, ("Error : Wakeup\n"));
+    }
+
+    if (ERROR_INT_STATUS_RX_UNDERFLOW_GET(error_int_status)) {
+        /* Rx Underflow */
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Error : Rx Underflow\n"));
+    }
+
+    if (ERROR_INT_STATUS_TX_OVERFLOW_GET(error_int_status)) {
+        /* Tx Overflow */
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Error : Tx Overflow\n"));
+    }
+
+        /* Clear the interrupt */
+    pDev->IrqProcRegisters.error_int_status &= ~error_int_status; /* W1C */
+
+        /* set up the register transfer buffer to hit the register 4 times , this is done
+         * to make the access 4-byte aligned to mitigate issues with host bus interconnects that
+         * restrict bus transfer lengths to be a multiple of 4-bytes */
+         
+        /* set W1C value to clear the interrupt, this hits the register first */
+    regBuffer[0] = error_int_status; 
+        /* the remaining 4 values are set to zero which have no-effect  */
+    regBuffer[1] = 0;  
+    regBuffer[2] = 0;
+    regBuffer[3] = 0;
+    
+    status = HIFReadWrite(pDev->HIFDevice,
+                          ERROR_INT_STATUS_ADDRESS,
+                          regBuffer,
+                          4,
+                          HIF_WR_SYNC_BYTE_FIX,
+                          NULL);
+
+    AR_DEBUG_ASSERT(status == A_OK);
+    return status;
+}
+
+static A_STATUS DevServiceDebugInterrupt(AR6K_DEVICE *pDev)
+{
+    A_UINT32 dummy;
+    A_STATUS status;
+
+    /* Send a target failure event to the application */
+    AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Target debug interrupt\n"));
+
+    if (pDev->TargetFailureCallback != NULL) {
+        pDev->TargetFailureCallback(pDev->HTCContext);
+    }
+
+    /* clear the interrupt , the debug error interrupt is
+     * counter 0 */
+        /* read counter to clear interrupt */
+    status = HIFReadWrite(pDev->HIFDevice,
+                          COUNT_DEC_ADDRESS,
+                          (A_UINT8 *)&dummy,
+                          4,
+                          HIF_RD_SYNC_BYTE_INC,
+                          NULL);
+
+    AR_DEBUG_ASSERT(status == A_OK);
+    return status;
+}
+
+static A_STATUS DevServiceCounterInterrupt(AR6K_DEVICE *pDev)
+{
+    A_UINT8 counter_int_status;
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_IRQ, ("Counter Interrupt\n"));
+
+    counter_int_status = pDev->IrqProcRegisters.counter_int_status &
+                         pDev->IrqEnableRegisters.counter_int_status_enable;
+
+    AR_DEBUG_ASSERT(counter_int_status);
+    AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,
+                    ("Valid interrupt source(s) in COUNTER_INT_STATUS: 0x%x\n",
+                    counter_int_status));
+
+    /* Check if the debug interrupt is pending */
+    if (counter_int_status & AR6K_TARGET_DEBUG_INTR_MASK) {
+        return DevServiceDebugInterrupt(pDev);
+    }
+
+    return A_OK;
+}
+
+/* callback when our fetch to get interrupt status registers completes */
+static void DevGetEventAsyncHandler(void *Context, HTC_PACKET *pPacket)
+{
+    AR6K_DEVICE *pDev = (AR6K_DEVICE *)Context;
+    A_UINT32    lookAhead = 0;
+    A_BOOL      otherInts = FALSE;
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,("+DevGetEventAsyncHandler: (dev: 0x%X)\n", (A_UINT32)pDev));
+
+    do {
+
+        if (A_FAILED(pPacket->Status)) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR,
+                    (" GetEvents I/O request failed, status:%d \n", pPacket->Status));
+            /* bail out, don't unmask HIF interrupt */
+            break;
+        }
+
+        if (pDev->GetPendingEventsFunc != NULL) {
+                /* the HIF layer collected the information for us */
+            HIF_PENDING_EVENTS_INFO *pEvents = (HIF_PENDING_EVENTS_INFO *)pPacket->pBuffer;
+            if (pEvents->Events & HIF_RECV_MSG_AVAIL) {
+                lookAhead = pEvents->LookAhead;
+                if (0 == lookAhead) {
+                    AR_DEBUG_PRINTF(ATH_DEBUG_ERR,(" DevGetEventAsyncHandler1, lookAhead is zero! \n"));
+                }
+            }
+            if (pEvents->Events & HIF_OTHER_EVENTS) {
+                otherInts = TRUE;
+            }
+        } else {
+                /* standard interrupt table handling.... */
+            AR6K_IRQ_PROC_REGISTERS *pReg = (AR6K_IRQ_PROC_REGISTERS *)pPacket->pBuffer;
+            A_UINT8                 host_int_status;
+
+            host_int_status = pReg->host_int_status & pDev->IrqEnableRegisters.int_status_enable;
+
+            if (host_int_status & (1 << HTC_MAILBOX)) {
+                host_int_status &= ~(1 << HTC_MAILBOX);
+                if (pReg->rx_lookahead_valid & (1 << HTC_MAILBOX)) {
+                        /* mailbox has a message and the look ahead is valid */
+                    lookAhead = pReg->rx_lookahead[HTC_MAILBOX];
+                    if (0 == lookAhead) {
+                        AR_DEBUG_PRINTF(ATH_DEBUG_ERR,(" DevGetEventAsyncHandler2, lookAhead is zero! \n"));
+                    }
+                }
+            }
+
+            if (host_int_status) {
+                    /* there are other interrupts to handle */
+                otherInts = TRUE;
+            }
+        }
+
+        if (otherInts || (lookAhead == 0)) {
+            /* if there are other interrupts to process, we cannot do this in the async handler so
+             * ack the interrupt which will cause our sync handler to run again
+             * if however there are no more messages, we can now ack the interrupt  */
+            AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,
+                (" Acking interrupt from DevGetEventAsyncHandler (otherints:%d, lookahead:0x%X)\n",
+                otherInts, lookAhead));
+            HIFAckInterrupt(pDev->HIFDevice);
+        } else {
+            AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,
+                    (" DevGetEventAsyncHandler : detected another message, lookahead :0x%X \n",
+                    lookAhead));
+                /* lookahead is non-zero and there are no other interrupts to service,
+                 * go get the next message */
+            pDev->MessagePendingCallback(pDev->HTCContext, lookAhead, NULL);
+        }
+
+    } while (FALSE);
+
+        /* free this IO packet */
+    AR6KFreeIOPacket(pDev,pPacket);
+    AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,("-DevGetEventAsyncHandler \n"));
+}
+
+/* called by the HTC layer when it wants us to check if the device has any more pending
+ * recv messages, this starts off a series of async requests to read interrupt registers  */
+A_STATUS DevCheckPendingRecvMsgsAsync(void *context)
+{
+    AR6K_DEVICE  *pDev = (AR6K_DEVICE *)context;
+    A_STATUS      status = A_OK;
+    HTC_PACKET   *pIOPacket;
+
+    /* this is called in an ASYNC only context, we may NOT block, sleep or call any apis that can
+     * cause us to switch contexts */
+
+   AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,("+DevCheckPendingRecvMsgsAsync: (dev: 0x%X)\n", (A_UINT32)pDev));
+
+   do {
+
+        if (HIF_DEVICE_IRQ_SYNC_ONLY == pDev->HifIRQProcessingMode) {
+                /* break the async processing chain right here, no need to continue.
+                 * The DevDsrHandler() will handle things in a loop when things are driven
+                 * synchronously  */
+            break;
+        }
+            /* first allocate one of our HTC packets we created for async I/O
+             * we reuse HTC packet definitions so that we can use the completion mechanism
+             * in DevRWCompletionHandler() */
+        pIOPacket = AR6KAllocIOPacket(pDev);
+
+        if (NULL == pIOPacket) {
+                /* there should be only 1 asynchronous request out at a time to read these registers
+                 * so this should actually never happen */
+            status = A_NO_MEMORY;
+            AR_DEBUG_ASSERT(FALSE);
+            break;
+        }
+
+            /* stick in our completion routine when the I/O operation completes */
+        pIOPacket->Completion = DevGetEventAsyncHandler;
+        pIOPacket->pContext = pDev;
+
+        if (pDev->GetPendingEventsFunc) {
+                /* HIF layer has it's own mechanism, pass the IO to it.. */
+            status = pDev->GetPendingEventsFunc(pDev->HIFDevice,
+                                                (HIF_PENDING_EVENTS_INFO *)pIOPacket->pBuffer,
+                                                pIOPacket);
+
+        } else {
+                /* standard way, read the interrupt register table asynchronously again */
+            status = HIFReadWrite(pDev->HIFDevice,
+                                  HOST_INT_STATUS_ADDRESS,
+                                  pIOPacket->pBuffer,
+                                  AR6K_IRQ_PROC_REGS_SIZE,
+                                  HIF_RD_ASYNC_BYTE_INC,
+                                  pIOPacket);
+        }
+
+        AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,(" Async IO issued to get interrupt status...\n"));
+   } while (FALSE);
+
+   AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,("-DevCheckPendingRecvMsgsAsync \n"));
+
+   return status;
+}
+
+/* process pending interrupts synchronously */
+static A_STATUS ProcessPendingIRQs(AR6K_DEVICE *pDev, A_BOOL *pDone, A_BOOL *pASyncProcessing)
+{
+    A_STATUS    status = A_OK;
+    A_UINT8     host_int_status = 0;
+    A_UINT32    lookAhead = 0;
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,("+ProcessPendingIRQs: (dev: 0x%X)\n", (A_UINT32)pDev));
+
+    /*** NOTE: the HIF implementation guarantees that the context of this call allows
+     *         us to perform SYNCHRONOUS I/O, that is we can block, sleep or call any API that
+     *         can block or switch thread/task ontexts.
+     *         This is a fully schedulable context.
+     * */
+    do {
+
+        if (pDev->GetPendingEventsFunc != NULL) {
+            HIF_PENDING_EVENTS_INFO events;
+
+                /* the HIF layer uses a special mechanism to get events
+                 * get this synchronously  */
+            status = pDev->GetPendingEventsFunc(pDev->HIFDevice,
+                                                &events,
+                                                NULL);
+
+            if (A_FAILED(status)) {
+                break;
+            }
+
+            if (events.Events & HIF_RECV_MSG_AVAIL) {
+                lookAhead = events.LookAhead;
+                if (0 == lookAhead) {
+                    AR_DEBUG_PRINTF(ATH_DEBUG_ERR,(" ProcessPendingIRQs1 lookAhead is zero! \n"));
+                }
+            }
+
+            if (!(events.Events & HIF_OTHER_EVENTS) ||
+                !(pDev->IrqEnableRegisters.int_status_enable & OTHER_INTS_ENABLED)) {
+                    /* no need to read the register table, no other interesting interrupts.
+                     * Some interfaces (like SPI) can shadow interrupt sources without
+                     * requiring the host to do a full table read */
+                break;
+            }
+
+            /* otherwise fall through and read the register table */
+        }
+
+        /*
+         * Read the first 28 bytes of the HTC register table. This will yield us
+         * the value of different int status registers and the lookahead
+         * registers.
+         *    length = sizeof(int_status) + sizeof(cpu_int_status) +
+         *             sizeof(error_int_status) + sizeof(counter_int_status) +
+         *             sizeof(mbox_frame) + sizeof(rx_lookahead_valid) +
+         *             sizeof(hole) +  sizeof(rx_lookahead) +
+         *             sizeof(int_status_enable) + sizeof(cpu_int_status_enable) +
+         *             sizeof(error_status_enable) +
+         *             sizeof(counter_int_status_enable);
+         *
+        */
+        status = HIFReadWrite(pDev->HIFDevice,
+                              HOST_INT_STATUS_ADDRESS,
+                              (A_UINT8 *)&pDev->IrqProcRegisters,
+                              AR6K_IRQ_PROC_REGS_SIZE,
+                              HIF_RD_SYNC_BYTE_INC,
+                              NULL);
+
+        if (A_FAILED(status)) {
+            break;
+        }
+
+        if (AR_DEBUG_LVL_CHECK(ATH_DEBUG_IRQ)) {
+            DevDumpRegisters(&pDev->IrqProcRegisters,
+                             &pDev->IrqEnableRegisters);
+        }
+
+            /* Update only those registers that are enabled */
+        host_int_status = pDev->IrqProcRegisters.host_int_status &
+                          pDev->IrqEnableRegisters.int_status_enable;
+
+        if (NULL == pDev->GetPendingEventsFunc) {
+                /* only look at mailbox status if the HIF layer did not provide this function,
+                 * on some HIF interfaces reading the RX lookahead is not valid to do */
+            if (host_int_status & (1 << HTC_MAILBOX)) {
+                    /* mask out pending mailbox value, we use "lookAhead" as the real flag for
+                     * mailbox processing below */
+                host_int_status &= ~(1 << HTC_MAILBOX);
+                if (pDev->IrqProcRegisters.rx_lookahead_valid & (1 << HTC_MAILBOX)) {
+                        /* mailbox has a message and the look ahead is valid */
+                    lookAhead = pDev->IrqProcRegisters.rx_lookahead[HTC_MAILBOX];
+                    if (0 == lookAhead) {
+                        AR_DEBUG_PRINTF(ATH_DEBUG_ERR,(" ProcessPendingIRQs2, lookAhead is zero! \n"));
+                    }
+                }
+            }
+        } else {
+                /* not valid to check if the HIF has another mechanism for reading mailbox pending status*/
+            host_int_status &= ~(1 << HTC_MAILBOX);
+        }
+
+    } while (FALSE);
+
+
+    do {
+
+            /* did the interrupt status fetches succeed? */
+        if (A_FAILED(status)) {
+            break;
+        }
+
+        if ((0 == host_int_status) && (0 == lookAhead)) {
+                /* nothing to process, the caller can use this to break out of a loop */
+            *pDone = TRUE;
+            break;
+        }
+
+        if (lookAhead != 0) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,("Pending mailbox message, LookAhead: 0x%X\n",lookAhead));
+                /* Mailbox Interrupt, the HTC layer may issue async requests to empty the
+                 * mailbox...
+                 * When emptying the recv mailbox we use the async handler above called from the
+                 * completion routine of the callers read request. This can improve performance
+                 * by reducing context switching when we rapidly pull packets */
+            status = pDev->MessagePendingCallback(pDev->HTCContext, lookAhead, pASyncProcessing);
+            if (A_FAILED(status)) {
+                break;
+            }
+        }
+
+            /* now handle the rest of them */
+        AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,
+                            (" Valid interrupt source(s) for OTHER interrupts: 0x%x\n",
+                            host_int_status));
+
+        if (HOST_INT_STATUS_CPU_GET(host_int_status)) {
+                /* CPU Interrupt */
+            status = DevServiceCPUInterrupt(pDev);
+            if (A_FAILED(status)){
+                break;
+            }
+        }
+
+        if (HOST_INT_STATUS_ERROR_GET(host_int_status)) {
+                /* Error Interrupt */
+            status = DevServiceErrorInterrupt(pDev);
+            if (A_FAILED(status)){
+                break;
+            }
+        }
+
+        if (HOST_INT_STATUS_COUNTER_GET(host_int_status)) {
+                /* Counter Interrupt */
+            status = DevServiceCounterInterrupt(pDev);
+            if (A_FAILED(status)){
+                break;
+            }
+        }
+
+    } while (FALSE);
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,("-ProcessPendingIRQs: (done:%d, async:%d) status=%d \n",
+                *pDone, *pASyncProcessing, status));
+
+    return status;
+}
+
+
+/* Synchronousinterrupt handler, this handler kicks off all interrupt processing.*/
+A_STATUS DevDsrHandler(void *context)
+{
+    AR6K_DEVICE *pDev = (AR6K_DEVICE *)context;
+    A_STATUS    status = A_OK;
+    A_BOOL      done = FALSE;
+    A_BOOL      asyncProc = FALSE;
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,("+DevDsrHandler: (dev: 0x%X)\n", (A_UINT32)pDev));
+
+
+    while (!done) {
+        status = ProcessPendingIRQs(pDev, &done, &asyncProc);
+        if (A_FAILED(status)) {
+            break;
+        }
+
+        if (HIF_DEVICE_IRQ_SYNC_ONLY == pDev->HifIRQProcessingMode) {
+            /* the HIF layer does not allow async IRQ processing, override the asyncProc flag */
+            asyncProc = FALSE;
+            /* this will cause us to re-enter ProcessPendingIRQ() and re-read interrupt status registers.
+             * this has a nice side effect of blocking us until all async read requests are completed.
+             * This behavior is required on some HIF implementations that do not allow ASYNC
+             * processing in interrupt handlers (like Windows CE) */
+        }
+
+        if (asyncProc) {
+                /* the function performed some async I/O for performance, we
+                   need to exit the ISR immediately, the check below will prevent the interrupt from being
+                   Ack'd while we handle it asynchronously */
+            break;
+        }
+
+    }
+
+    if (A_SUCCESS(status) && !asyncProc) {
+            /* Ack the interrupt only if :
+             *  1. we did not get any errors in processing interrupts
+             *  2. there are no outstanding async processing requests */
+        AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,(" Acking interrupt from DevDsrHandler \n"));
+        HIFAckInterrupt(pDev->HIFDevice);
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_IRQ,("-DevDsrHandler \n"));
+    return A_OK;
+}
+
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/htc2/AR6000/makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,4 @@
+# Copyright (c) 2004-2006 Atheros Communications Inc.
+# All rights reserved.
+!INCLUDE $(_MAKEENVROOT)\makefile.def
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,507 @@
+/*
+ * 
+ * Copyright (c) 2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+
+#include "htc_internal.h"
+
+
+static HTC_INIT_INFO  HTCInitInfo = {NULL,NULL,NULL};
+static A_BOOL         HTCInitialized = FALSE;
+
+static A_STATUS HTCTargetInsertedHandler(void *hif_handle);
+static A_STATUS HTCTargetRemovedHandler(void *handle, A_STATUS status);
+static void HTCReportFailure(void *Context);
+
+/* Initializes the HTC layer */
+A_STATUS HTCInit(HTC_INIT_INFO *pInitInfo)
+{
+    HTC_CALLBACKS htcCallbacks;
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("HTCInit: Enter\n"));
+    if (HTCInitialized) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("HTCInit: Exit\n"));
+        return A_OK;
+    }
+    
+    A_MEMCPY(&HTCInitInfo,pInitInfo,sizeof(HTC_INIT_INFO)); 
+    
+    A_MEMZERO(&htcCallbacks, sizeof(HTC_CALLBACKS));
+    
+        /* setup HIF layer callbacks */
+    htcCallbacks.deviceInsertedHandler = HTCTargetInsertedHandler;
+    htcCallbacks.deviceRemovedHandler = HTCTargetRemovedHandler;
+        /* the device layer handles these */
+    htcCallbacks.rwCompletionHandler = DevRWCompletionHandler;
+    htcCallbacks.dsrHandler = DevDsrHandler;
+    HIFInit(&htcCallbacks);
+    HTCInitialized = TRUE;
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("HTCInit: Exit\n"));
+    return A_OK;
+}
+
+void HTCFreeControlBuffer(HTC_TARGET *target, HTC_PACKET *pPacket, HTC_PACKET_QUEUE *pList)
+{
+    LOCK_HTC(target);
+    HTC_PACKET_ENQUEUE(pList,pPacket);
+    UNLOCK_HTC(target); 
+}
+
+HTC_PACKET *HTCAllocControlBuffer(HTC_TARGET *target,  HTC_PACKET_QUEUE *pList)
+{
+    HTC_PACKET *pPacket;    
+    
+    LOCK_HTC(target);
+    pPacket = HTC_PACKET_DEQUEUE(pList);
+    UNLOCK_HTC(target); 
+    
+    return pPacket;
+}
+
+/* cleanup the HTC instance */
+static void HTCCleanup(HTC_TARGET *target)
+{
+    if (A_IS_MUTEX_VALID(&target->HTCLock)) {
+        A_MUTEX_DELETE(&target->HTCLock);
+    }
+    
+    if (A_IS_MUTEX_VALID(&target->HTCRxLock)) {
+        A_MUTEX_DELETE(&target->HTCRxLock);
+    }
+    
+    if (A_IS_MUTEX_VALID(&target->HTCTxLock)) {
+        A_MUTEX_DELETE(&target->HTCTxLock);
+    }      
+        /* free our instance */
+    A_FREE(target);
+}
+
+/* registered target arrival callback from the HIF layer */
+static A_STATUS HTCTargetInsertedHandler(void *hif_handle)
+{  
+    HTC_TARGET              *target = NULL;   
+    A_STATUS                 status;
+    int                      i;
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("htcTargetInserted - Enter\n"));
+
+    do {
+        
+            /* allocate target memory */
+        if ((target = (HTC_TARGET *)A_MALLOC(sizeof(HTC_TARGET))) == NULL) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Unable to allocate memory\n"));
+            status = A_ERROR;
+            break;
+        }
+        
+        A_MEMZERO(target, sizeof(HTC_TARGET));
+        A_MUTEX_INIT(&target->HTCLock);
+        A_MUTEX_INIT(&target->HTCRxLock);
+        A_MUTEX_INIT(&target->HTCTxLock);
+        INIT_HTC_PACKET_QUEUE(&target->ControlBufferTXFreeList);
+        INIT_HTC_PACKET_QUEUE(&target->ControlBufferRXFreeList);
+                
+            /* give device layer the hif device handle */
+        target->Device.HIFDevice = hif_handle;
+            /* give the device layer our context (for event processing)
+             * the device layer will register it's own context with HIF 
+             * so we need to set this so we can fetch it in the target remove handler */
+        target->Device.HTCContext = target;   
+            /* set device layer target failure callback */
+        target->Device.TargetFailureCallback = HTCReportFailure;
+            /* set device layer recv message pending callback */
+        target->Device.MessagePendingCallback = HTCRecvMessagePendingHandler;
+        target->EpWaitingForBuffers = ENDPOINT_MAX; 
+        
+            /* setup device layer */
+        status = DevSetup(&target->Device);
+        
+        if (A_FAILED(status)) {
+            break;    
+        }
+        
+            /* carve up buffers/packets for control messages */
+        for (i = 0; i < NUM_CONTROL_RX_BUFFERS; i++) {
+            HTC_PACKET *pControlPacket;
+            pControlPacket = &target->HTCControlBuffers[i].HtcPacket;            
+            SET_HTC_PACKET_INFO_RX_REFILL(pControlPacket,
+                                          target,
+                                          target->HTCControlBuffers[i].Buffer,
+                                          HTC_CONTROL_BUFFER_SIZE,
+                                          ENDPOINT_0);
+            HTC_FREE_CONTROL_RX(target,pControlPacket);
+        }
+        
+        for (;i < NUM_CONTROL_BUFFERS;i++) {
+             HTC_PACKET *pControlPacket;
+             pControlPacket = &target->HTCControlBuffers[i].HtcPacket;             
+             INIT_HTC_PACKET_INFO(pControlPacket,
+                                  target->HTCControlBuffers[i].Buffer,
+                                  HTC_CONTROL_BUFFER_SIZE);
+             HTC_FREE_CONTROL_TX(target,pControlPacket);
+        }
+         
+    } while (FALSE);
+        
+    if (A_SUCCESS(status)) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_TRC, (" calling AddInstance callback \n"));
+            /* announce ourselves */
+        HTCInitInfo.AddInstance((HTC_HANDLE)target);    
+    } else {
+        if (target != NULL) {
+            HTCCleanup(target);    
+        }
+    }
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("htcTargetInserted - Exit\n"));
+        
+    return status;
+}
+
+/* registered removal callback from the HIF layer */
+static A_STATUS HTCTargetRemovedHandler(void *handle, A_STATUS status)
+{
+    HTC_TARGET *target;
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("+HTCTargetRemovedHandler handle:0x%X \n",(A_UINT32)handle));
+     
+    if (NULL == handle) {
+            /* this could be NULL in the event that target initialization failed */
+        return A_OK;    
+    }
+    
+    target = ((AR6K_DEVICE *)handle)->HTCContext;
+       
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("   removing target:0x%X instance:0x%X ... \n",
+            (A_UINT32)target, (A_UINT32)target->pInstanceContext));
+        
+    if (target->pInstanceContext != NULL) {            
+            /* let upper layer know, it needs to call HTCStop() */
+        HTCInitInfo.DeleteInstance(target->pInstanceContext);
+    }
+    
+    HIFShutDownDevice(target->Device.HIFDevice);
+    
+    HTCCleanup(target);
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("-HTCTargetRemovedHandler \n"));
+    return A_OK;
+}
+
+/* get the low level HIF device for the caller , the caller may wish to do low level
+ * HIF requests */
+void *HTCGetHifDevice(HTC_HANDLE HTCHandle)
+{
+    HTC_TARGET *target = GET_HTC_TARGET_FROM_HANDLE(HTCHandle);
+    return target->Device.HIFDevice;    
+}
+
+/* set the instance block for this HTC handle, so that on removal, the blob can be 
+ * returned to the caller */
+void HTCSetInstance(HTC_HANDLE HTCHandle, void *Instance)
+{
+    HTC_TARGET  *target = GET_HTC_TARGET_FROM_HANDLE(HTCHandle);  
+   
+    target->pInstanceContext = Instance; 
+}
+
+/* wait for the target to arrive (sends HTC Ready message)
+ * this operation is fully synchronous and the message is polled for */
+A_STATUS HTCWaitTarget(HTC_HANDLE HTCHandle)
+{
+    HTC_TARGET              *target = GET_HTC_TARGET_FROM_HANDLE(HTCHandle);  
+    A_STATUS                 status;
+    HTC_PACKET              *pPacket = NULL;
+    HTC_READY_MSG           *pRdyMsg;
+    HTC_SERVICE_CONNECT_REQ  connect;
+    HTC_SERVICE_CONNECT_RESP resp;
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("HTCWaitTarget - Enter (target:0x%X) \n", (A_UINT32)target));
+
+    do {
+         
+#ifdef MBOXHW_UNIT_TEST
+
+        status = DoMboxHWTest(&target->Device);
+        
+        if (status != A_OK) {
+            break;    
+        }
+    
+#endif
+ 
+            /* we should be getting 1 control message that the target is ready */
+        status = HTCWaitforControlMessage(target, &pPacket);    
+        
+        if (A_FAILED(status)) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, (" Target Not Available!!\n"));
+            break;    
+        }
+        
+            /* we controlled the buffer creation so it has to be properly aligned */    
+        pRdyMsg = (HTC_READY_MSG *)pPacket->pBuffer;
+        
+        if ((pRdyMsg->MessageID != HTC_MSG_READY_ID) ||
+            (pPacket->ActualLength < sizeof(HTC_READY_MSG))) {
+                /* this message is not valid */
+            AR_DEBUG_ASSERT(FALSE);
+            status = A_EPROTO;
+            break;    
+        }
+        
+        if (pRdyMsg->CreditCount == 0 || pRdyMsg->CreditSize == 0) {
+              /* this message is not valid */
+            AR_DEBUG_ASSERT(FALSE);
+            status = A_EPROTO;    
+            break;
+        }
+        
+        target->TargetCredits = pRdyMsg->CreditCount;
+        target->TargetCreditSize = pRdyMsg->CreditSize;   
+        
+        AR_DEBUG_PRINTF(ATH_DEBUG_TRC, (" Target Ready: credits: %d credit size: %d\n",
+                target->TargetCredits, target->TargetCreditSize));
+          
+            /* setup our pseudo HTC control endpoint connection */
+        A_MEMZERO(&connect,sizeof(connect));
+        A_MEMZERO(&resp,sizeof(resp));
+        connect.EpCallbacks.pContext = target;
+        connect.EpCallbacks.EpTxComplete = HTCControlTxComplete;   
+        connect.EpCallbacks.EpRecv = HTCControlRecv;         
+        connect.EpCallbacks.EpRecvRefill = NULL;  /* not needed */
+        connect.EpCallbacks.EpSendFull = NULL;    /* not nedded */
+        connect.MaxSendQueueDepth = NUM_CONTROL_BUFFERS;  
+        connect.ServiceID = HTC_CTRL_RSVD_SVC;
+        
+            /* connect fake service */
+        status = HTCConnectService((HTC_HANDLE)target, 
+                                   &connect,
+                                   &resp);
+        
+        if (!A_FAILED(status)) {
+            break;    
+        }        
+        
+    } while (FALSE);
+    
+    if (pPacket != NULL) {
+        HTC_FREE_CONTROL_RX(target,pPacket);        
+    }
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("HTCWaitTarget - Exit\n"));
+        
+    return status;
+}
+
+
+
+/* Start HTC, enable interrupts and let the target know host has finished setup */
+A_STATUS HTCStart(HTC_HANDLE HTCHandle) 
+{
+    HTC_TARGET *target = GET_HTC_TARGET_FROM_HANDLE(HTCHandle);
+    HTC_PACKET *pPacket;
+    A_STATUS   status;
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("HTCStart Enter\n"));
+
+        /* now that we are starting, push control receive buffers into the 
+         * HTC control endpoint */
+         
+    while (1) {
+        pPacket = HTC_ALLOC_CONTROL_RX(target);
+        if (NULL == pPacket) {
+            break;    
+        }
+        HTCAddReceivePkt((HTC_HANDLE)target,pPacket);         
+    }   
+
+    do {
+        
+        AR_DEBUG_ASSERT(target->InitCredits != NULL);
+        AR_DEBUG_ASSERT(target->EpCreditDistributionListHead != NULL);
+        AR_DEBUG_ASSERT(target->EpCreditDistributionListHead->pNext != NULL);
+        
+            /* call init credits callback to do the distribution , 
+             * NOTE: the first entry in the distribution list is ENDPOINT_0, so
+             * we pass the start of the list after this one. */
+        target->InitCredits(target->pCredDistContext, 
+                            target->EpCreditDistributionListHead->pNext,
+                            target->TargetCredits);
+        
+        if (AR_DEBUG_LVL_CHECK(ATH_DEBUG_TRC)) {
+            DumpCreditDistStates(target); 
+        }
+    
+            /* the caller is done connecting to services, so we can indicate to the
+            * target that the setup phase is complete */    
+        status = HTCSendSetupComplete(target);        
+        
+        if (A_FAILED(status)) {
+            break;    
+        }
+    
+            /* unmask interrupts */
+        status = DevUnmaskInterrupts(&target->Device);
+        
+        if (A_FAILED(status)) {
+            HTCStop(target);
+        }
+    
+    } while (FALSE);
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("HTCStart Exit\n"));
+    return status;
+}
+
+
+/* stop HTC communications, i.e. stop interrupt reception, and flush all queued buffers */
+void HTCStop(HTC_HANDLE HTCHandle)
+{
+    HTC_TARGET *target = GET_HTC_TARGET_FROM_HANDLE(HTCHandle);
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("+HTCStop \n"));
+
+        /* mark that we are shutting down .. */
+    target->HTCStateFlags |= HTC_STATE_STOPPING;
+   
+        /* Masking interrupts is a synchronous operation, when this function returns
+         * all pending HIF I/O has completed, we can safely flush the queues */ 
+    DevMaskInterrupts(&target->Device);
+    
+        /* flush all send packets */
+    HTCFlushSendPkts(target);
+        /* flush all recv buffers */
+    HTCFlushRecvBuffers(target);
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("-HTCStop \n"));
+}
+
+/* undo what was done in HTCInit() */
+void HTCShutDown(void)
+{
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("+HTCShutDown: \n"));
+    HTCInitialized = FALSE;
+        /* undo HTCInit */
+    HIFShutDownDevice(NULL);    
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("-HTCShutDown: \n"));
+}
+
+void HTCDumpCreditStates(HTC_HANDLE HTCHandle)
+{
+    HTC_TARGET *target = GET_HTC_TARGET_FROM_HANDLE(HTCHandle);    
+    
+    LOCK_HTC_TX(target);
+    
+    DumpCreditDistStates(target);
+    
+    UNLOCK_HTC_TX(target);
+}
+
+/* report a target failure from the device, this is a callback from the device layer
+ * which uses a mechanism to report errors from the target (i.e. special interrupts) */
+static void HTCReportFailure(void *Context)
+{
+    HTC_TARGET *target = (HTC_TARGET *)Context;
+    
+    target->TargetFailure = TRUE;
+
+    if ((target->pInstanceContext != NULL) && (HTCInitInfo.TargetFailure != NULL)) {            
+            /* let upper layer know, it needs to call HTCStop() */
+        HTCInitInfo.TargetFailure(target->pInstanceContext, A_ERROR);
+    }
+}
+
+void DebugDumpBytes(A_UCHAR *buffer, A_UINT16 length, char *pDescription)
+{
+    A_CHAR stream[60];
+    A_UINT32 i;
+    A_UINT16 offset, count;
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_ANY, ("<---------Dumping %d Bytes : %s ------>\n", length, pDescription));
+
+    count = 0;
+    offset = 0;
+    for(i = 0; i < length; i++) {
+        sprintf(stream + offset, "%2.2X ", buffer[i]);
+        count ++;
+        offset += 3;
+
+        if(count == 16) {
+            count = 0;
+            offset = 0;
+            AR_DEBUG_PRINTF(ATH_DEBUG_ANY, ("[H]: %s\n", stream));
+            A_MEMZERO(stream, 60);
+        }
+    }
+
+    if(offset != 0) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ANY, ("[H]: %s\n", stream));
+    }
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_ANY, ("<------------------------------------------------->\n"));
+}
+
+A_BOOL HTCGetEndpointStatistics(HTC_HANDLE               HTCHandle, 
+                                HTC_ENDPOINT_ID          Endpoint,
+                                HTC_ENDPOINT_STAT_ACTION Action,
+                                HTC_ENDPOINT_STATS       *pStats)
+{
+    
+#ifdef HTC_EP_STAT_PROFILING
+    HTC_TARGET *target = GET_HTC_TARGET_FROM_HANDLE(HTCHandle);    
+    A_BOOL     clearStats = FALSE;
+    A_BOOL     sample = FALSE;
+    
+    switch (Action) {        
+        case HTC_EP_STAT_SAMPLE :
+            sample = TRUE;        
+            break;
+        case HTC_EP_STAT_SAMPLE_AND_CLEAR :
+            sample = TRUE;
+            clearStats = TRUE;
+            break;
+        case HTC_EP_STAT_CLEAR :   
+            clearStats = TRUE;
+            break;
+        default:        
+            break;
+    }
+    
+    A_ASSERT(Endpoint < ENDPOINT_MAX);
+    
+        /* lock out TX and RX while we sample and/or clear */        
+    LOCK_HTC_TX(target);
+    LOCK_HTC_RX(target);
+    
+    if (sample) {
+        A_ASSERT(pStats != NULL);
+            /* return the stats to the caller */
+        A_MEMCPY(pStats, &target->EndPoint[Endpoint].EndPointStats, sizeof(HTC_ENDPOINT_STATS));    
+    }
+    
+    if (clearStats) {
+            /* reset stats */
+        A_MEMZERO(&target->EndPoint[Endpoint].EndPointStats, sizeof(HTC_ENDPOINT_STATS));    
+    }
+    
+    UNLOCK_HTC_RX(target);
+    UNLOCK_HTC_TX(target);
+    
+    return TRUE;    
+#else
+    return FALSE;
+#endif    
+}

Added: trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_debug.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_debug.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_debug.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,65 @@
+#ifndef HTC_DEBUG_H_
+#define HTC_DEBUG_H_
+/*
+ *
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+/* ------- Debug related stuff ------- */
+enum {
+    ATH_DEBUG_SEND = 0x0001,
+    ATH_DEBUG_RECV = 0x0002,
+    ATH_DEBUG_SYNC = 0x0004,
+    ATH_DEBUG_DUMP = 0x0008,
+    ATH_DEBUG_IRQ  = 0x0010,
+    ATH_DEBUG_TRC  = 0x0020,
+    ATH_DEBUG_WARN = 0x0040,
+    ATH_DEBUG_ERR  = 0x0080,
+    ATH_DEBUG_ANY  = 0xFFFF,
+};
+
+#ifdef DEBUG
+
+// TODO FIX usage of A_PRINTF!
+#define AR_DEBUG_LVL_CHECK(lvl) (debughtc & (lvl))
+#define AR_DEBUG_PRINTBUF(buffer, length, desc) do {   \
+    if (debughtc & ATH_DEBUG_DUMP) {             \
+        DebugDumpBytes(buffer, length,desc);               \
+    }                                            \
+} while(0)
+#define PRINTX_ARG(arg...) arg
+#define AR_DEBUG_PRINTF(flags, args) do {        \
+    if (debughtc & (flags)) {                    \
+        A_PRINTF(KERN_ALERT PRINTX_ARG args);    \
+    }                                            \
+} while (0)
+#define AR_DEBUG_ASSERT(test) do {               \
+    if (!(test)) {                               \
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Debug Assert Caught, File %s, Line: %d, Test:%s \n",__FILE__, __LINE__,#test));         \
+    }                                            \
+} while(0)  
+extern int debughtc;
+#else
+#define AR_DEBUG_PRINTF(flags, args)
+#define AR_DEBUG_PRINTBUF(buffer, length, desc)
+#define AR_DEBUG_ASSERT(test)
+#define AR_DEBUG_LVL_CHECK(lvl) 0
+#endif
+
+void DebugDumpBytes(A_UCHAR *buffer, A_UINT16 length, char *pDescription);
+
+#endif /*HTC_DEBUG_H_*/

Added: trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_internal.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_internal.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_internal.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,168 @@
+/*
+ *
+ * Copyright (c) 2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#ifndef _HTC_INTERNAL_H_
+#define _HTC_INTERNAL_H_
+
+/* for debugging, uncomment this to capture the last frame header, on frame header
+ * processing errors, the last frame header is dump for comparison */
+//#define HTC_CAPTURE_LAST_FRAME
+
+//#define HTC_EP_STAT_PROFILING
+
+#ifdef __cplusplus
+extern "C" {
+#endif /* __cplusplus */
+
+/* Header files */
+#include "a_config.h"
+#include "athdefs.h"
+#include "a_types.h"
+#include "a_osapi.h"
+#include "a_debug.h"
+#include "htc.h"
+#include "htc_api.h"
+#include "bmi_msg.h"
+#include "hif.h"
+#include "AR6000/ar6k.h"
+
+/* HTC operational parameters */
+#define HTC_TARGET_RESPONSE_TIMEOUT        2000 /* in ms */
+#define HTC_TARGET_DEBUG_INTR_MASK         0x01
+#define HTC_TARGET_CREDIT_INTR_MASK        0xF0
+
+typedef struct _HTC_ENDPOINT {
+    HTC_SERVICE_ID              ServiceID;      /* service ID this endpoint is bound to
+                                                   non-zero value means this endpoint is in use */
+    HTC_PACKET_QUEUE            TxQueue;        /* HTC frame buffer TX queue */
+    HTC_PACKET_QUEUE            RxBuffers;      /* HTC frame buffer RX list */
+    HTC_ENDPOINT_CREDIT_DIST    CreditDist;     /* credit distribution structure (exposed to driver layer) */
+    HTC_EP_CALLBACKS            EpCallBacks;    /* callbacks associated with this endpoint */
+    int                         MaxTxQueueDepth;   /* max depth of the TX queue before we need to
+                                                      call driver's full handler */
+    int                         CurrentTxQueueDepth; /* current TX queue depth */
+    int                         MaxMsgLength;        /* max length of endpoint message */
+#ifdef HTC_EP_STAT_PROFILING
+    HTC_ENDPOINT_STATS          EndPointStats;  /* endpoint statistics */
+#endif
+} HTC_ENDPOINT;
+
+#ifdef HTC_EP_STAT_PROFILING
+#define INC_HTC_EP_STAT(p,stat,count) (p)->EndPointStats.stat += (count);
+#else
+#define INC_HTC_EP_STAT(p,stat,count)
+#endif
+
+#define HTC_SERVICE_TX_PACKET_TAG  HTC_TX_PACKET_TAG_INTERNAL
+
+#define NUM_CONTROL_BUFFERS     8
+#define NUM_CONTROL_TX_BUFFERS  2
+#define NUM_CONTROL_RX_BUFFERS  (NUM_CONTROL_BUFFERS - NUM_CONTROL_TX_BUFFERS)
+
+#define HTC_CONTROL_BUFFER_SIZE (HTC_MAX_CONTROL_MESSAGE_LENGTH + HTC_HDR_LENGTH)
+
+typedef struct HTC_CONTROL_BUFFER {
+    HTC_PACKET    HtcPacket;
+    A_UINT8       Buffer[HTC_CONTROL_BUFFER_SIZE];
+} HTC_CONTROL_BUFFER;
+
+/* our HTC target state */
+typedef struct _HTC_TARGET {
+    HTC_ENDPOINT                EndPoint[ENDPOINT_MAX];
+    HTC_CONTROL_BUFFER          HTCControlBuffers[NUM_CONTROL_BUFFERS];
+    HTC_ENDPOINT_CREDIT_DIST   *EpCreditDistributionListHead;
+    HTC_PACKET_QUEUE            ControlBufferTXFreeList;
+    HTC_PACKET_QUEUE            ControlBufferRXFreeList;
+    HTC_CREDIT_DIST_CALLBACK    DistributeCredits;
+    HTC_CREDIT_INIT_CALLBACK    InitCredits;
+    void                       *pCredDistContext;
+    int                         TargetCredits;
+    int                         TargetCreditSize;
+    A_MUTEX_T                   HTCLock;
+    A_MUTEX_T                   HTCRxLock;
+    A_MUTEX_T                   HTCTxLock;
+    AR6K_DEVICE                 Device;         /* AR6K - specific state */
+    A_UINT32                    HTCStateFlags;
+    HTC_ENDPOINT_ID             EpWaitingForBuffers;
+    A_BOOL                      TargetFailure;
+    void                       *pInstanceContext;
+#define HTC_STATE_WAIT_BUFFERS  (1 << 0)
+#define HTC_STATE_STOPPING      (1 << 1)
+#ifdef HTC_CAPTURE_LAST_FRAME
+    HTC_FRAME_HDR               LastFrameHdr;  /* useful for debugging */
+    A_UINT8                     LastTrailer[256];
+    A_UINT8                     LastTrailerLength;
+#endif
+} HTC_TARGET;
+
+#define HTC_STOPPING(t) ((t)->HTCStateFlags & HTC_STATE_STOPPING)
+#define LOCK_HTC(t)      A_MUTEX_LOCK(&(t)->HTCLock);
+#define UNLOCK_HTC(t)    A_MUTEX_UNLOCK(&(t)->HTCLock);
+#define LOCK_HTC_RX(t)   A_MUTEX_LOCK(&(t)->HTCRxLock);
+#define UNLOCK_HTC_RX(t) A_MUTEX_UNLOCK(&(t)->HTCRxLock);
+#define LOCK_HTC_TX(t)   A_MUTEX_LOCK(&(t)->HTCTxLock);
+#define UNLOCK_HTC_TX(t) A_MUTEX_UNLOCK(&(t)->HTCTxLock);
+
+#define GET_HTC_TARGET_FROM_HANDLE(hnd) ((HTC_TARGET *)(hnd))
+#define HTC_RECYCLE_RX_PKT(target,p)                \
+{                                                   \
+    HTC_PACKET_RESET_RX(pPacket);                   \
+    HTCAddReceivePkt((HTC_HANDLE)(target),(p));     \
+}
+
+/* internal HTC functions */
+void        HTCControlTxComplete(void *Context, HTC_PACKET *pPacket);
+void        HTCControlRecv(void *Context, HTC_PACKET *pPacket);
+A_STATUS    HTCWaitforControlMessage(HTC_TARGET *target, HTC_PACKET **ppControlPacket);
+HTC_PACKET *HTCAllocControlBuffer(HTC_TARGET *target, HTC_PACKET_QUEUE *pList);
+void        HTCFreeControlBuffer(HTC_TARGET *target, HTC_PACKET *pPacket, HTC_PACKET_QUEUE *pList);
+A_STATUS    HTCIssueSend(HTC_TARGET *target, HTC_PACKET *pPacket, A_UINT8 Flags);
+A_STATUS    HTCIssueRecv(HTC_TARGET *target, HTC_PACKET *pPacket);
+void        HTCRecvCompleteHandler(void *Context, HTC_PACKET *pPacket);
+A_STATUS    HTCRecvMessagePendingHandler(void *Context, A_UINT32 LookAhead, A_BOOL *pAsyncProc);
+void        HTCProcessCreditRpt(HTC_TARGET *target, HTC_CREDIT_REPORT *pRpt, int NumEntries, HTC_ENDPOINT_ID FromEndpoint);
+A_STATUS    HTCSendSetupComplete(HTC_TARGET *target);
+void        HTCFlushRecvBuffers(HTC_TARGET *target);
+void        HTCFlushSendPkts(HTC_TARGET *target);
+void        DumpCreditDist(HTC_ENDPOINT_CREDIT_DIST *pEPDist);
+void        DumpCreditDistStates(HTC_TARGET *target);
+void 		DebugDumpBytes(A_UCHAR *buffer, A_UINT16 length, char *pDescription);
+
+static INLINE HTC_PACKET *HTC_ALLOC_CONTROL_TX(HTC_TARGET *target) {
+    HTC_PACKET *pPacket = HTCAllocControlBuffer(target,&target->ControlBufferTXFreeList);
+    if (pPacket != NULL) {
+            /* set payload pointer area with some headroom */
+        pPacket->pBuffer = pPacket->pBufferStart + HTC_HDR_LENGTH;
+    }
+    return pPacket;
+}
+
+#define HTC_FREE_CONTROL_TX(t,p) HTCFreeControlBuffer((t),(p),&(t)->ControlBufferTXFreeList)
+#define HTC_ALLOC_CONTROL_RX(t)  HTCAllocControlBuffer((t),&(t)->ControlBufferRXFreeList)
+#define HTC_FREE_CONTROL_RX(t,p) \
+{                                                                \
+    HTC_PACKET_RESET_RX(p);                                      \
+    HTCFreeControlBuffer((t),(p),&(t)->ControlBufferRXFreeList); \
+}
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _HTC_INTERNAL_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_recv.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_recv.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_recv.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,703 @@
+/*
+ * 
+ * Copyright (c) 2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+
+#include "htc_internal.h"
+
+#define HTCIssueRecv(t, p) \
+    DevRecvPacket(&(t)->Device,  \
+                  (p),          \
+                  (p)->ActualLength)
+
+#define DO_RCV_COMPLETION(t,p,e)            \
+{                                           \
+    if ((p)->ActualLength > 0) {            \
+        AR_DEBUG_PRINTF(ATH_DEBUG_RECV, (" completing packet 0x%X (%d bytes) on ep : %d \n", \
+            (A_UINT32)(p), (p)->ActualLength, (p)->Endpoint));  \
+        (e)->EpCallBacks.EpRecv((e)->EpCallBacks.pContext,      \
+                                (p));                           \
+    } else {                                                    \
+        AR_DEBUG_PRINTF(ATH_DEBUG_RECV, (" recycling empty packet \n"));  \
+        HTC_RECYCLE_RX_PKT((t), (p));                           \
+    }                                                           \
+}
+
+#ifdef HTC_EP_STAT_PROFILING   
+#define HTC_RX_STAT_PROFILE(t,ep,lookAhead)            \
+{                                                      \
+    LOCK_HTC_RX((t));                                  \
+    INC_HTC_EP_STAT((ep), RxReceived, 1);              \
+    if ((lookAhead) != 0) {                            \
+        INC_HTC_EP_STAT((ep), RxLookAheads, 1);        \
+    }                                                  \
+    UNLOCK_HTC_RX((t));                                \
+}
+#else
+#define HTC_RX_STAT_PROFILE(t,ep,lookAhead)
+#endif 
+        
+static INLINE A_STATUS HTCProcessTrailer(HTC_TARGET *target, 
+                                         A_UINT8    *pBuffer, 
+                                         int         Length, 
+                                         A_UINT32   *pNextLookAhead,
+                                         HTC_ENDPOINT_ID FromEndpoint)
+{
+    HTC_RECORD_HDR          *pRecord;
+    A_UINT8                 *pRecordBuf;
+    HTC_LOOKAHEAD_REPORT    *pLookAhead;
+    A_UINT8                 *pOrigBuffer;
+    int                     origLength;
+    A_STATUS                status;
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_RECV, ("+HTCProcessTrailer (length:%d) \n", Length));   
+    
+    if (AR_DEBUG_LVL_CHECK(ATH_DEBUG_RECV)) {
+        AR_DEBUG_PRINTBUF(pBuffer,Length,"Recv Trailer");
+    }
+   
+    pOrigBuffer = pBuffer;
+    origLength = Length;
+    status = A_OK;
+      
+    while (Length > 0) {
+       
+        if (Length < sizeof(HTC_RECORD_HDR)) {
+            status = A_EPROTO;
+            break;    
+        }
+            /* these are byte aligned structs */
+        pRecord = (HTC_RECORD_HDR *)pBuffer;
+        Length -= sizeof(HTC_RECORD_HDR);
+        pBuffer += sizeof(HTC_RECORD_HDR);
+        
+        if (pRecord->Length > Length) {
+                /* no room left in buffer for record */
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, 
+                (" invalid record length: %d (id:%d) buffer has: %d bytes left \n", 
+                        pRecord->Length, pRecord->RecordID, Length));
+            status = A_EPROTO;
+            break;    
+        }        
+            /* start of record follows the header */
+        pRecordBuf = pBuffer;
+        
+        switch (pRecord->RecordID) {
+            case HTC_RECORD_CREDITS:
+                AR_DEBUG_ASSERT(pRecord->Length >= sizeof(HTC_CREDIT_REPORT));
+                HTCProcessCreditRpt(target,
+                                    (HTC_CREDIT_REPORT *)pRecordBuf, 
+                                    pRecord->Length / (sizeof(HTC_CREDIT_REPORT)),
+                                    FromEndpoint);
+                break;
+            case HTC_RECORD_LOOKAHEAD:
+                AR_DEBUG_ASSERT(pRecord->Length >= sizeof(HTC_LOOKAHEAD_REPORT));  
+                pLookAhead = (HTC_LOOKAHEAD_REPORT *)pRecordBuf;    
+                if ((pLookAhead->PreValid == ((~pLookAhead->PostValid) & 0xFF)) && 
+                    (pNextLookAhead != NULL)) {
+                                    
+                    AR_DEBUG_PRINTF(ATH_DEBUG_RECV, 
+                                (" LookAhead Report Found (pre valid:0x%X, post valid:0x%X) \n", 
+                                pLookAhead->PreValid,
+                                pLookAhead->PostValid));  
+                                
+                        /* look ahead bytes are valid, copy them over */
+                    ((A_UINT8 *)pNextLookAhead)[0] = pLookAhead->LookAhead[0];
+                    ((A_UINT8 *)pNextLookAhead)[1] = pLookAhead->LookAhead[1];
+                    ((A_UINT8 *)pNextLookAhead)[2] = pLookAhead->LookAhead[2];
+                    ((A_UINT8 *)pNextLookAhead)[3] = pLookAhead->LookAhead[3];
+                    
+                    if (AR_DEBUG_LVL_CHECK(ATH_DEBUG_RECV)) {
+                        DebugDumpBytes((A_UINT8 *)pNextLookAhead,4,"Next Look Ahead");
+                    }
+                }    
+                break;   
+            default:
+                AR_DEBUG_PRINTF(ATH_DEBUG_ERR, (" unhandled record: id:%d length:%d \n", 
+                        pRecord->RecordID, pRecord->Length));
+                break;
+        }
+        
+        if (A_FAILED(status)) {
+            break;    
+        }
+        
+            /* advance buffer past this record for next time around */
+        pBuffer += pRecord->Length;
+        Length -= pRecord->Length;
+    }
+
+    if (A_FAILED(status)) {
+        DebugDumpBytes(pOrigBuffer,origLength,"BAD Recv Trailer");    
+    }
+        
+    AR_DEBUG_PRINTF(ATH_DEBUG_RECV, ("-HTCProcessTrailer \n"));
+    return status;
+    
+}
+
+/* process a received message (i.e. strip off header, process any trailer data) 
+ * note : locks must be released when this function is called */
+static A_STATUS HTCProcessRecvHeader(HTC_TARGET *target, HTC_PACKET *pPacket, A_UINT32 *pNextLookAhead)
+{
+    A_UINT8   temp;
+    A_UINT8   *pBuf;
+    A_STATUS  status = A_OK;
+    A_UINT16  payloadLen;
+    A_UINT32  lookAhead;
+    
+    pBuf = pPacket->pBuffer;        
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_RECV, ("+HTCProcessRecvHeader \n"));  
+        
+    if (AR_DEBUG_LVL_CHECK(ATH_DEBUG_RECV)) { 
+        AR_DEBUG_PRINTBUF(pBuf,pPacket->ActualLength,"HTC Recv PKT");
+    }    
+ 
+    do {
+        /* note, we cannot assume the alignment of pBuffer, so we use the safe macros to 
+         * retrieve 16 bit fields */        
+        payloadLen = A_GET_UINT16_FIELD(pBuf, HTC_FRAME_HDR, PayloadLen); 
+        
+        ((A_UINT8 *)&lookAhead)[0] = pBuf[0];
+        ((A_UINT8 *)&lookAhead)[1] = pBuf[1];
+        ((A_UINT8 *)&lookAhead)[2] = pBuf[2];
+        ((A_UINT8 *)&lookAhead)[3] = pBuf[3];
+        
+        if (lookAhead != pPacket->HTCReserved) {
+            /* somehow the lookahead that gave us the full read length did not
+             * reflect the actual header in the pending message */
+             AR_DEBUG_PRINTF(ATH_DEBUG_ERR, 
+                    ("HTCProcessRecvHeader, lookahead mismatch! \n")); 
+             DebugDumpBytes((A_UINT8 *)&pPacket->HTCReserved,4,"Expected Message LookAhead");
+             DebugDumpBytes(pBuf,sizeof(HTC_FRAME_HDR),"Current Frame Header");
+#ifdef HTC_CAPTURE_LAST_FRAME
+            DebugDumpBytes((A_UINT8 *)&target->LastFrameHdr,sizeof(HTC_FRAME_HDR),"Last Frame Header");   
+            if (target->LastTrailerLength != 0) {
+                DebugDumpBytes(target->LastTrailer,
+                               target->LastTrailerLength,
+                               "Last trailer");      
+            }
+#endif     
+            status = A_EPROTO;
+            break;            
+        }
+        
+            /* get flags */
+        temp = A_GET_UINT8_FIELD(pBuf, HTC_FRAME_HDR, Flags);
+        
+        if (temp & HTC_FLAGS_RECV_TRAILER) {          
+            /* this packet has a trailer */
+                   
+                /* extract the trailer length in control byte 0 */
+            temp = A_GET_UINT8_FIELD(pBuf, HTC_FRAME_HDR, ControlBytes[0]);
+            
+            if ((temp < sizeof(HTC_RECORD_HDR)) || (temp > payloadLen)) {
+                AR_DEBUG_PRINTF(ATH_DEBUG_ERR, 
+                    ("HTCProcessRecvHeader, invalid header (payloadlength should be :%d, CB[0] is:%d) \n",
+                        payloadLen, temp));
+                status = A_EPROTO;
+                break;    
+            }  
+           
+                /* process trailer data that follows HDR + application payload */
+            status = HTCProcessTrailer(target, 
+                                       (pBuf + HTC_HDR_LENGTH + payloadLen - temp), 
+                                       temp, 
+                                       pNextLookAhead,
+                                       pPacket->Endpoint);
+           
+            if (A_FAILED(status)) {
+                break;    
+            }
+            
+#ifdef HTC_CAPTURE_LAST_FRAME             
+            A_MEMCPY(target->LastTrailer, (pBuf + HTC_HDR_LENGTH + payloadLen - temp), temp);
+            target->LastTrailerLength = temp;
+#endif        
+                /* trim length by trailer bytes */
+            pPacket->ActualLength -= temp; 
+        }
+#ifdef HTC_CAPTURE_LAST_FRAME            
+         else { 
+            target->LastTrailerLength = 0;
+        }
+#endif 
+        
+            /* if we get to this point, the packet is good */
+            /* remove header and adjust length */
+        pPacket->pBuffer += HTC_HDR_LENGTH;
+        pPacket->ActualLength -= HTC_HDR_LENGTH;     
+    
+    } while (FALSE);
+    
+    if (A_FAILED(status)) {
+            /* dump the whole packet */
+        DebugDumpBytes(pBuf,pPacket->ActualLength,"BAD HTC Recv PKT");    
+    } else {
+#ifdef HTC_CAPTURE_LAST_FRAME            
+        A_MEMCPY(&target->LastFrameHdr,pBuf,sizeof(HTC_FRAME_HDR));
+#endif        
+        if (AR_DEBUG_LVL_CHECK(ATH_DEBUG_RECV)) { 
+            if (pPacket->ActualLength > 0) {
+                AR_DEBUG_PRINTBUF(pPacket->pBuffer,pPacket->ActualLength,"HTC - Application Msg");
+            }
+        }  
+    }
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_RECV, ("-HTCProcessRecvHeader \n"));
+    return status;             
+}
+
+/* asynchronous completion handler for recv packet fetching, when the device layer
+ * completes a read request, it will call this completion handler */
+void HTCRecvCompleteHandler(void *Context, HTC_PACKET *pPacket)
+{
+    HTC_TARGET      *target = (HTC_TARGET *)Context;     
+    HTC_ENDPOINT    *pEndpoint;
+    A_UINT32        nextLookAhead = 0;
+    A_STATUS        status;
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_RECV, ("+HTCRecvCompleteHandler (status:%d, ep:%d) \n", 
+                pPacket->Status, pPacket->Endpoint)); 
+     
+    AR_DEBUG_ASSERT(pPacket->Endpoint < ENDPOINT_MAX);
+    pEndpoint = &target->EndPoint[pPacket->Endpoint];
+    pPacket->Completion = NULL;
+    
+        /* get completion status */
+    status = pPacket->Status;
+               
+    do {         
+        if (A_FAILED(status)) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("HTCRecvCompleteHandler: request failed (status:%d, ep:%d) \n", 
+                pPacket->Status, pPacket->Endpoint)); 
+            break;
+        }
+            /* process the header for any trailer data */
+        status = HTCProcessRecvHeader(target,pPacket,&nextLookAhead);
+        
+        if (A_FAILED(status)) {
+            break;    
+        }
+            /* was there a lookahead for the next packet? */
+        if (nextLookAhead != 0) {
+            A_STATUS nextStatus;
+            AR_DEBUG_PRINTF(ATH_DEBUG_RECV, 
+                            ("HTCRecvCompleteHandler - next look ahead was non-zero : 0x%X \n", 
+                             nextLookAhead));
+                /* we have another packet, get the next packet fetch started (pipelined) before
+                 * we call into the endpoint's callback, this will start another async request */
+            nextStatus = HTCRecvMessagePendingHandler(target,nextLookAhead,NULL);  
+            if (A_EPROTO == nextStatus) {
+                AR_DEBUG_PRINTF(ATH_DEBUG_ERR, 
+                            ("Next look ahead from recv header was INVALID\n"));
+                DebugDumpBytes((A_UINT8 *)&nextLookAhead,
+                                4,
+                                "BAD lookahead from lookahead report");            
+            }  
+        } else {
+             AR_DEBUG_PRINTF(ATH_DEBUG_RECV, 
+            ("HTCRecvCompleteHandler - rechecking for more messages...\n"));
+            /* if we did not get anything on the look-ahead, 
+             * call device layer to asynchronously re-check for messages. If we can keep the async
+             * processing going we get better performance.  If there is a pending message we will keep processing
+             * messages asynchronously which should pipeline things nicely */
+            DevCheckPendingRecvMsgsAsync(&target->Device);
+        }
+        
+        HTC_RX_STAT_PROFILE(target,pEndpoint,nextLookAhead);
+        DO_RCV_COMPLETION(target,pPacket,pEndpoint);
+        
+    } while (FALSE);
+    
+    if (A_FAILED(status)) {
+         AR_DEBUG_PRINTF(ATH_DEBUG_ERR, 
+                         ("HTCRecvCompleteHandler , message fetch failed (status = %d) \n", 
+                         status));
+            /* recyle this packet */            
+         HTC_RECYCLE_RX_PKT(target, pPacket);         
+    }
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_RECV, ("-HTCRecvCompleteHandler\n"));
+}
+
+/* synchronously wait for a control message from the target, 
+ * This function is used at initialization time ONLY.  At init messages
+ * on ENDPOINT 0 are expected. */
+A_STATUS HTCWaitforControlMessage(HTC_TARGET *target, HTC_PACKET **ppControlPacket)
+{
+    A_STATUS        status;
+    A_UINT32        lookAhead;
+    HTC_PACKET      *pPacket = NULL;
+    HTC_FRAME_HDR   *pHdr;
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_RECV,("+HTCWaitforControlMessage \n"));
+                
+    do  { 
+        
+        *ppControlPacket = NULL; 
+        
+            /* call the polling function to see if we have a message */
+        status = DevPollMboxMsgRecv(&target->Device,
+                                    &lookAhead,
+                                    HTC_TARGET_RESPONSE_TIMEOUT);
+                                       
+        if (A_FAILED(status)) {
+            break;    
+        }
+        
+        AR_DEBUG_PRINTF(ATH_DEBUG_RECV, 
+                ("HTCWaitforControlMessage : lookAhead : 0x%X \n", lookAhead));
+        
+            /* check the lookahead */
+        pHdr = (HTC_FRAME_HDR *)&lookAhead;
+        
+        if (pHdr->EndpointID != ENDPOINT_0) {
+                /* unexpected endpoint number, should be zero */
+            AR_DEBUG_ASSERT(FALSE);
+            status = A_EPROTO;
+            break;    
+        }
+                
+        if (A_FAILED(status)) {
+                /* bad message */
+            AR_DEBUG_ASSERT(FALSE);
+            status = A_EPROTO;
+            break;    
+        }
+        
+        pPacket = HTC_ALLOC_CONTROL_RX(target);
+        
+        if (pPacket == NULL) {
+            AR_DEBUG_ASSERT(FALSE);
+            status = A_NO_MEMORY;
+            break;        
+        }
+        
+        pPacket->HTCReserved = lookAhead;
+        pPacket->ActualLength = pHdr->PayloadLen + HTC_HDR_LENGTH;
+        
+        if (pPacket->ActualLength > pPacket->BufferLength) {
+            AR_DEBUG_ASSERT(FALSE);
+            status = A_EPROTO;
+            break;    
+        }
+       
+            /* we want synchronous operation */
+        pPacket->Completion = NULL;
+        
+            /* get the message from the device, this will block */
+        status = HTCIssueRecv(target, pPacket);
+        
+        if (A_FAILED(status)) {
+            break;    
+        }
+               
+            /* process receive header */     
+        status = HTCProcessRecvHeader(target,pPacket,NULL);
+        
+        pPacket->Status = status;
+         
+        if (A_FAILED(status)) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, 
+                    ("HTCWaitforControlMessage, HTCProcessRecvHeader failed (status = %d) \n", 
+                     status));
+            break;
+        }
+        
+            /* give the caller this control message packet, they are responsible to free */
+        *ppControlPacket = pPacket;
+        
+    } while (FALSE);
+    
+    if (A_FAILED(status)) {
+        if (pPacket != NULL) {
+                /* cleanup buffer on error */
+            HTC_FREE_CONTROL_RX(target,pPacket);    
+        }    
+    }
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_RECV,("-HTCWaitforControlMessage \n"));
+    
+    return status;
+}
+
+/* callback when device layer or lookahead report parsing detects a pending message */
+A_STATUS HTCRecvMessagePendingHandler(void *Context, A_UINT32 LookAhead, A_BOOL *pAsyncProc)
+{
+    HTC_TARGET      *target = (HTC_TARGET *)Context;
+    A_STATUS         status = A_OK;
+    HTC_PACKET      *pPacket = NULL;
+    HTC_FRAME_HDR   *pHdr; 
+    HTC_ENDPOINT    *pEndpoint;
+    A_BOOL          asyncProc = FALSE;
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_RECV,("+HTCRecvMessagePendingHandler LookAhead:0x%X \n",LookAhead));
+    
+    if (IS_DEV_IRQ_PROCESSING_ASYNC_ALLOWED(&target->Device)) {
+            /* We use async mode to get the packets if the device layer supports it.
+             * The device layer interfaces with HIF in which HIF may have restrictions on
+             * how interrupts are processed */
+        asyncProc = TRUE;
+    }
+    
+    if (pAsyncProc != NULL) {
+            /* indicate to caller how we decided to process this */
+        *pAsyncProc = asyncProc;
+    }
+    
+    while (TRUE) {
+        
+        pHdr = (HTC_FRAME_HDR *)&LookAhead; 
+                
+        if (pHdr->EndpointID >= ENDPOINT_MAX) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR,("Invalid Endpoint in look-ahead: %d \n",pHdr->EndpointID));
+                /* invalid endpoint */
+            status = A_EPROTO;
+            break;    
+        }
+        
+        if (pHdr->PayloadLen > HTC_MAX_PAYLOAD_LENGTH) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR,("Payload length %d exceeds max HTC : %d !\n",
+                    pHdr->PayloadLen, HTC_MAX_PAYLOAD_LENGTH));
+            status = A_EPROTO;
+            break;    
+        }
+        
+        pEndpoint = &target->EndPoint[pHdr->EndpointID];
+        
+        if (0 == pEndpoint->ServiceID) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR,("Endpoint %d is not connected !\n",pHdr->EndpointID));
+                /* endpoint isn't even connected */
+            status = A_EPROTO;
+            break;    
+        }
+        
+            /* lock RX to get a buffer */
+        LOCK_HTC_RX(target);
+        
+            /* get a packet from the endpoint recv queue */
+        pPacket = HTC_PACKET_DEQUEUE(&pEndpoint->RxBuffers);
+        
+        if (NULL == pPacket) {
+                /* check for refill handler */
+            if (pEndpoint->EpCallBacks.EpRecvRefill != NULL) {                
+                UNLOCK_HTC_RX(target);
+                    /* call the re-fill handler */
+                pEndpoint->EpCallBacks.EpRecvRefill(pEndpoint->EpCallBacks.pContext,
+                                                    pHdr->EndpointID);                 
+                LOCK_HTC_RX(target);                
+                    /* check if we have more buffers */   
+                pPacket = HTC_PACKET_DEQUEUE(&pEndpoint->RxBuffers);   
+                    /* fall through */
+            }
+        }
+         
+        if (NULL == pPacket) {
+                /* this is not an error, we simply need to mark that we are waiting for buffers.*/
+            target->HTCStateFlags |= HTC_STATE_WAIT_BUFFERS; 
+            target->EpWaitingForBuffers = pHdr->EndpointID;
+            status = A_NO_MEMORY;    
+        }
+        
+        UNLOCK_HTC_RX(target);
+        
+        if (A_FAILED(status)) {
+                /* no buffers */
+            break;    
+        }
+        
+        AR_DEBUG_ASSERT(pPacket->Endpoint == pHdr->EndpointID);
+        
+            /* make sure this message can fit in the endpoint buffer */
+        if ((pHdr->PayloadLen + HTC_HDR_LENGTH) > pPacket->BufferLength) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR, 
+                    ("Payload Length Error : header reports payload of: %d, endpoint buffer size: %d \n",
+                    pHdr->PayloadLen, pPacket->BufferLength));                    
+            status = A_EPROTO;
+            break;    
+        }
+        
+        pPacket->HTCReserved = LookAhead; /* set expected look ahead */
+            /* set the amount of data to fetch */
+        pPacket->ActualLength = pHdr->PayloadLen + HTC_HDR_LENGTH;        
+        
+        if (asyncProc) {
+                /* we use async mode to get the packet if the device layer supports it
+                 * set our callback and context */
+            pPacket->Completion = HTCRecvCompleteHandler;
+            pPacket->pContext = target;
+        } else {
+                /* fully synchronous */
+            pPacket->Completion = NULL;       
+        }
+                  
+            /* go fetch the packet */
+        status = HTCIssueRecv(target, pPacket);
+
+        if (A_FAILED(status)) {
+            break;    
+        }
+        
+        if (asyncProc) {
+                /* we did this asynchronously so we can get out of the loop, the asynch processing
+                 * creates a chain of requests to continue processing pending messages in the
+                 * context of callbacks  */
+            break;    
+        } 
+        
+            /* in the sync case, we process the packet, check lookaheads and then repeat */
+        
+        LookAhead = 0;
+        status = HTCProcessRecvHeader(target,pPacket,&LookAhead);
+                 
+        if (A_FAILED(status)) {
+            break;    
+        }
+        
+        HTC_RX_STAT_PROFILE(target,pEndpoint,LookAhead);
+        DO_RCV_COMPLETION(target,pPacket,pEndpoint);
+        
+        pPacket = NULL;
+        
+        if (0 == LookAhead) {
+            break;    
+        }
+                
+    }
+    
+    if (A_NO_MEMORY == status) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR,
+                (" Endpoint :%d has no buffers, blocking receiver to prevent overrun.. \n",
+                pHdr->EndpointID));
+            /* try to stop receive at the device layer */
+        DevStopRecv(&target->Device, asyncProc ? DEV_STOP_RECV_ASYNC : DEV_STOP_RECV_SYNC);
+        status = A_OK;
+    } else if (A_FAILED(status)) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, 
+                        ("Failed to get pending message : LookAhead Value: 0x%X (status = %d) \n", 
+                        LookAhead, status));  
+        if (pPacket != NULL) {
+                /* clean up packet on error */
+            HTC_RECYCLE_RX_PKT(target, pPacket);    
+        }
+    }
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_RECV,("-HTCRecvMessagePendingHandler \n"));
+    
+    return status;
+}
+
+/* Makes a buffer available to the HTC module */
+A_STATUS HTCAddReceivePkt(HTC_HANDLE HTCHandle, HTC_PACKET *pPacket)
+{
+    HTC_TARGET *target = GET_HTC_TARGET_FROM_HANDLE(HTCHandle);
+    HTC_ENDPOINT *pEndpoint;
+    A_BOOL       unblockRecv = FALSE;
+    A_STATUS     status = A_OK;
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_SEND, 
+                    ("+- HTCAddReceivePkt: endPointId: %d, buffer: 0x%X, length: %d\n", 
+                    pPacket->Endpoint, (A_UINT32)pPacket->pBuffer, pPacket->BufferLength));
+    
+    do {            
+        
+        if (HTC_STOPPING(target)) {
+            status = A_ECANCELED;
+            break;    
+        }
+            
+        AR_DEBUG_ASSERT(pPacket->Endpoint < ENDPOINT_MAX);  
+        
+        pEndpoint = &target->EndPoint[pPacket->Endpoint];
+        
+        LOCK_HTC_RX(target);
+    
+            /* store receive packet */
+        HTC_PACKET_ENQUEUE(&pEndpoint->RxBuffers, pPacket);     
+        
+            /* check if we are blocked waiting for a new buffer */
+        if (target->HTCStateFlags & HTC_STATE_WAIT_BUFFERS) {
+            if (target->EpWaitingForBuffers == pPacket->Endpoint) {
+                AR_DEBUG_PRINTF(ATH_DEBUG_RECV,(" receiver was blocked on ep:%d, unblocking.. \n",
+                    target->EpWaitingForBuffers));
+                target->HTCStateFlags &= ~HTC_STATE_WAIT_BUFFERS;
+                target->EpWaitingForBuffers = ENDPOINT_MAX;        
+                unblockRecv = TRUE;
+            }
+        }
+        
+        UNLOCK_HTC_RX(target);
+        
+        if (unblockRecv && !HTC_STOPPING(target)) {
+                /* TODO : implement a buffer threshold count? */
+            DevEnableRecv(&target->Device,DEV_ENABLE_RECV_SYNC);  
+        }   
+        
+    } while (FALSE);
+     
+    return status;
+}
+
+static void HTCFlushEndpointRX(HTC_TARGET *target, HTC_ENDPOINT *pEndpoint)
+{
+    HTC_PACKET  *pPacket;
+ 
+    LOCK_HTC_RX(target);
+    
+    while (1) {
+        pPacket = HTC_PACKET_DEQUEUE(&pEndpoint->RxBuffers);   
+        if (NULL == pPacket) {
+            break;    
+        }
+        UNLOCK_HTC_RX(target);
+        pPacket->Status = A_ECANCELED;
+        pPacket->ActualLength = 0;
+        AR_DEBUG_PRINTF(ATH_DEBUG_RECV, ("  Flushing RX packet:0x%X, length:%d, ep:%d \n",
+                (A_UINT32)pPacket, pPacket->BufferLength, pPacket->Endpoint));
+            /* give the packet back */
+        pEndpoint->EpCallBacks.EpRecv(pEndpoint->EpCallBacks.pContext,
+                                      pPacket); 
+        LOCK_HTC_RX(target);
+    }   
+    
+    UNLOCK_HTC_RX(target);
+    
+    
+}
+
+void HTCFlushRecvBuffers(HTC_TARGET *target)
+{
+    HTC_ENDPOINT    *pEndpoint;    
+    int             i;
+
+        /* NOTE: no need to flush endpoint 0, these buffers were
+         * allocated as part of the HTC struct */
+    for (i = ENDPOINT_1; i < ENDPOINT_MAX; i++) {
+        pEndpoint = &target->EndPoint[i];
+        if (pEndpoint->ServiceID == 0) {
+                /* not in use.. */
+            continue;    
+        }
+        HTCFlushEndpointRX(target,pEndpoint);
+    }
+    
+    
+}
+
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_send.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_send.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_send.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,541 @@
+/*
+ * 
+ * Copyright (c) 2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+
+#include "htc_internal.h"
+
+#define DO_EP_TX_COMPLETION(ep,p)                                    \
+{                                                                    \
+    (p)->Completion = NULL;                                          \
+    (ep)->EpCallBacks.EpTxComplete((ep)->EpCallBacks.pContext,(p));  \
+}
+
+
+/* call the distribute credits callback with the distribution */
+#define DO_DISTRIBUTION(t,reason,description,pList) \
+{                                             \
+    AR_DEBUG_PRINTF(ATH_DEBUG_SEND,           \
+        ("  calling distribute function (%s) (dfn:0x%X, ctxt:0x%X, dist:0x%X) \n", \
+                (description),                                           \
+                (A_UINT32)(t)->DistributeCredits,                        \
+                (A_UINT32)(t)->pCredDistContext,                         \
+                (A_UINT32)pList));                                       \
+    (t)->DistributeCredits((t)->pCredDistContext,                        \
+                           (pList),                                      \
+                           (reason));                                    \
+}
+                              
+/* our internal send packet completion handler when packets are submited to the AR6K device
+ * layer */
+static void HTCSendPktCompletionHandler(void *Context, HTC_PACKET *pPacket)
+{
+    HTC_TARGET      *target = (HTC_TARGET *)Context;  
+    HTC_ENDPOINT    *pEndpoint = &target->EndPoint[pPacket->Endpoint];
+    
+    
+    if (A_FAILED(pPacket->Status)) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, 
+            ("HTCSendPktCompletionHandler: request failed (status:%d, ep:%d) \n", 
+                pPacket->Status, pPacket->Endpoint)); 
+    }
+        /* first, fixup the head room we allocated */
+    pPacket->pBuffer += HTC_HDR_LENGTH;
+        /* do completion */
+    DO_EP_TX_COMPLETION(pEndpoint,pPacket);
+}
+
+A_STATUS HTCIssueSend(HTC_TARGET *target, HTC_PACKET *pPacket, A_UINT8 SendFlags)
+{
+    A_STATUS status;
+    A_UINT8 *pHdrBuf;
+    A_BOOL   sync = FALSE;
+    
+        /* caller always provides headrooom */
+    pPacket->pBuffer -= HTC_HDR_LENGTH;
+    pHdrBuf = pPacket->pBuffer;
+        /* setup frame header */
+    A_SET_UINT16_FIELD(pHdrBuf,HTC_FRAME_HDR,PayloadLen,(A_UINT16)pPacket->ActualLength);
+    A_SET_UINT8_FIELD(pHdrBuf,HTC_FRAME_HDR,Flags,SendFlags);
+    A_SET_UINT8_FIELD(pHdrBuf,HTC_FRAME_HDR,EndpointID, (A_UINT8)pPacket->Endpoint);
+    
+    if (pPacket->Completion == NULL) {
+            /* mark that this request was synchronously issued */
+        sync = TRUE;
+    }
+     
+    AR_DEBUG_PRINTF(ATH_DEBUG_SEND, 
+                    ("+-HTCIssueSend: transmit length : %d (%s) \n",
+                    pPacket->ActualLength + HTC_HDR_LENGTH,
+                    sync ? "SYNC" : "ASYNC" )); 
+    
+        /* send message to device */
+    status = DevSendPacket(&target->Device, 
+                           pPacket, 
+                           pPacket->ActualLength + HTC_HDR_LENGTH);   
+    
+    if (sync) {
+            /* use local sync variable.  If this was issued asynchronously, pPacket is no longer
+             * safe to access. */            
+        pPacket->pBuffer += HTC_HDR_LENGTH;   
+    }
+    
+    /* if this request was asynchronous, the packet completion routine will be invoked by
+     * the device layer when the HIF layer completes the request */
+    
+    return status;
+}
+
+/* try to send the current packet or a packet at the head of the TX queue,
+ * if there are no credits, the packet remains in the queue.
+ * this function always succeeds and returns a flag if the TX queue for
+ * the endpoint has hit the set limit */
+static A_BOOL HTCTrySend(HTC_TARGET   *target, 
+                         HTC_ENDPOINT *pEndpoint, 
+                         HTC_PACKET   *pPacketToSend)
+{
+    HTC_PACKET  *pPacket;
+    int         creditsRequired;
+    int         remainder;
+    A_UINT8     sendFlags;
+    A_BOOL      epFull = FALSE;
+    
+    LOCK_HTC_TX(target);
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_SEND,("+HTCTrySend (pPkt:0x%X)\n",(A_UINT32)pPacketToSend));
+            
+    if (pPacketToSend != NULL) {
+        /* caller supplied us a packet to queue to the tail of the HTC TX queue before
+         * we check the tx queue */
+        HTC_PACKET_ENQUEUE(&pEndpoint->TxQueue,pPacketToSend);    
+        pEndpoint->CurrentTxQueueDepth++;
+    }
+    
+        /* now drain the TX queue for transmission as long as we have enough 
+         * credits */
+         
+    while (1) {
+        
+        if (HTC_QUEUE_EMPTY(&pEndpoint->TxQueue)) {
+                /* nothing in the queue */
+            break;    
+        } 
+          
+        sendFlags = 0;       
+        
+            /* get packet at head, but don't remove it */
+        pPacket = HTC_GET_PKT_AT_HEAD(&pEndpoint->TxQueue);
+        AR_DEBUG_PRINTF(ATH_DEBUG_SEND,(" Got head packet:0x%X , Queue Depth: %d\n", 
+                (A_UINT32)pPacket, pEndpoint->CurrentTxQueueDepth));           
+            
+            /* figure out how many credits this message requires */
+        creditsRequired = (pPacket->ActualLength + HTC_HDR_LENGTH) / target->TargetCreditSize;
+        remainder = (pPacket->ActualLength + HTC_HDR_LENGTH) % target->TargetCreditSize;
+                
+        if (remainder) {
+            creditsRequired++;    
+        }
+        
+        AR_DEBUG_PRINTF(ATH_DEBUG_SEND,(" Creds Required:%d   Got:%d\n", 
+                            creditsRequired, pEndpoint->CreditDist.TxCredits));   
+                                     
+        if (pEndpoint->CreditDist.TxCredits < creditsRequired) {
+            
+            /* not enough credits */
+                
+            if (pPacket->Endpoint == ENDPOINT_0) {
+                    /* leave it in the queue */
+                break;    
+            }
+                /* invoke the registered distribution function only if this is not
+                 * endpoint 0, we let the driver layer provide more credits if it can. 
+                 * We pass the credit distribution list starting at the endpoint in question
+                 * */
+            
+                /* set how many credits we need  */
+            pEndpoint->CreditDist.TxCreditsSeek = 
+                                    creditsRequired - pEndpoint->CreditDist.TxCredits;
+            DO_DISTRIBUTION(target,
+                            HTC_CREDIT_DIST_SEEK_CREDITS,
+                            "Seek Credits",
+                            &pEndpoint->CreditDist);
+            
+            pEndpoint->CreditDist.TxCreditsSeek = 0;
+                            
+            if (pEndpoint->CreditDist.TxCredits < creditsRequired) {
+                    /* still not enough credits to send, leave packet in the queue */
+                AR_DEBUG_PRINTF(ATH_DEBUG_SEND,
+                    (" Not enough credits for ep %d leaving packet in queue..\n",
+                    pPacket->Endpoint));   
+                break;    
+            }
+               
+        }
+        
+        pEndpoint->CreditDist.TxCredits -= creditsRequired;
+        INC_HTC_EP_STAT(pEndpoint, TxCreditsConsummed, creditsRequired);
+         
+            /* check if we need credits */
+        if (pEndpoint->CreditDist.TxCredits < pEndpoint->CreditDist.TxCreditsPerMaxMsg) {
+            sendFlags |= HTC_FLAGS_NEED_CREDIT_UPDATE;
+            INC_HTC_EP_STAT(pEndpoint, TxCreditLowIndications, 1);
+            AR_DEBUG_PRINTF(ATH_DEBUG_SEND,(" Host Needs Credits  \n"));
+        }
+                
+            /* now we can fully dequeue */
+        pPacket = HTC_PACKET_DEQUEUE(&pEndpoint->TxQueue);
+        pEndpoint->CurrentTxQueueDepth--;
+         
+        INC_HTC_EP_STAT(pEndpoint, TxIssued, 1);
+                
+        UNLOCK_HTC_TX(target);
+        
+        HTCIssueSend(target, pPacket, sendFlags);
+        
+        LOCK_HTC_TX(target);
+        
+        /* go back and check for more messages */          
+    }
+    
+    if (pEndpoint->CurrentTxQueueDepth >= pEndpoint->MaxTxQueueDepth) {
+            /* let caller know that this endpoint has reached the maximum depth */
+        epFull = TRUE;        
+    }
+    
+    UNLOCK_HTC_TX(target);
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_SEND,("-HTCTrySend:  \n"));
+    return epFull;
+}
+
+/* HTC API - HTCSendPkt */
+A_STATUS HTCSendPkt(HTC_HANDLE HTCHandle, HTC_PACKET *pPacket)
+{
+    HTC_TARGET      *target = GET_HTC_TARGET_FROM_HANDLE(HTCHandle);
+    HTC_ENDPOINT    *pEndpoint;
+    HTC_ENDPOINT_ID ep;
+    A_STATUS        status = A_OK;
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_SEND, 
+                    ("+HTCSendPkt: Enter endPointId: %d, buffer: 0x%X, length: %d \n", 
+                    pPacket->Endpoint, (A_UINT32)pPacket->pBuffer, pPacket->ActualLength));
+    
+    ep = pPacket->Endpoint;
+    AR_DEBUG_ASSERT(ep < ENDPOINT_MAX);
+    pEndpoint = &target->EndPoint[ep];
+           
+    do {
+        
+        if (HTC_STOPPING(target)) {
+            status = A_ECANCELED;
+            pPacket->Status = status;
+            DO_EP_TX_COMPLETION(pEndpoint,pPacket);
+            break;    
+        }
+            /* everything sent through this interface is asynchronous */    
+            /* fill in HTC completion routines */
+        pPacket->Completion = HTCSendPktCompletionHandler;
+        pPacket->pContext = target;  
+           
+        if (HTCTrySend(target, pEndpoint, pPacket)) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_SEND, (" Endpoint %d, TX queue is full, Depth:%d, Max:%d \n",
+                    ep, pEndpoint->CurrentTxQueueDepth, pEndpoint->MaxTxQueueDepth));
+                /* queue is now full, let caller know */    
+            if (pEndpoint->EpCallBacks.EpSendFull != NULL) {
+                AR_DEBUG_PRINTF(ATH_DEBUG_SEND, (" Calling driver's send full callback.... \n"));
+                pEndpoint->EpCallBacks.EpSendFull(pEndpoint->EpCallBacks.pContext,
+                                                  ep);   
+            }   
+        }
+        
+        AR_DEBUG_PRINTF(ATH_DEBUG_SEND, ("-HTCSendPkt \n"));
+    } while (FALSE);
+    
+    return status;
+}
+
+
+/* check TX queues to drain because of credit distribution update */
+static INLINE void HTCCheckEndpointTxQueues(HTC_TARGET *target)
+{
+    HTC_ENDPOINT                *pEndpoint;
+    HTC_ENDPOINT_CREDIT_DIST    *pDistItem;
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_SEND, ("+HTCCheckEndpointTxQueues \n"));
+    pDistItem = target->EpCreditDistributionListHead;
+   
+        /* run through the credit distribution list to see
+         * if there are packets queued
+         * NOTE: no locks need to be taken since the distribution list
+         * is not dynamic (cannot be re-ordered) and we are not modifying any state */
+    while (pDistItem != NULL) {
+        pEndpoint = (HTC_ENDPOINT *)pDistItem->pHTCReserved;
+        
+        if (pEndpoint->CurrentTxQueueDepth > 0) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_SEND, (" Ep %d has %d credits and %d Packets in TX Queue \n", 
+                    pDistItem->Endpoint, pEndpoint->CreditDist.TxCredits, pEndpoint->CurrentTxQueueDepth));
+                /* try to start the stalled queue, this list is ordered by priority. 
+                 * Highest priority queue get's processed first, if there are credits available the
+                 * highest priority queue will get a chance to reclaim credits from lower priority
+                 * ones */
+            HTCTrySend(target, pEndpoint, NULL);
+        }
+                
+        pDistItem = pDistItem->pNext;        
+    }
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_SEND, ("-HTCCheckEndpointTxQueues \n"));
+}
+
+/* process credit reports and call distribution function */
+void HTCProcessCreditRpt(HTC_TARGET *target, HTC_CREDIT_REPORT *pRpt, int NumEntries, HTC_ENDPOINT_ID FromEndpoint)
+{
+    int             i;
+    HTC_ENDPOINT    *pEndpoint;
+    int             totalCredits = 0; 
+    A_BOOL          doDist = FALSE;   
+   
+    AR_DEBUG_PRINTF(ATH_DEBUG_SEND, ("+HTCProcessCreditRpt, Credit Report Entries:%d \n", NumEntries));
+         
+        /* lock out TX while we update credits */
+    LOCK_HTC_TX(target);
+     
+    for (i = 0; i < NumEntries; i++, pRpt++) {
+        if (pRpt->EndpointID >= ENDPOINT_MAX) {
+            AR_DEBUG_ASSERT(FALSE);
+            break;   
+        }        
+        
+        pEndpoint = &target->EndPoint[pRpt->EndpointID];
+        
+        AR_DEBUG_PRINTF(ATH_DEBUG_SEND, ("  Endpoint %d got %d credits \n",
+                pRpt->EndpointID, pRpt->Credits));
+
+
+#ifdef HTC_EP_STAT_PROFILING  
+        
+        INC_HTC_EP_STAT(pEndpoint, TxCreditRpts, 1);
+        INC_HTC_EP_STAT(pEndpoint, TxCreditsReturned, pRpt->Credits);
+              
+        if (FromEndpoint == pRpt->EndpointID) {
+                /* this credit report arrived on the same endpoint indicating it arrived in an RX
+                 * packet */
+            INC_HTC_EP_STAT(pEndpoint, TxCreditsFromRx, pRpt->Credits);
+            INC_HTC_EP_STAT(pEndpoint, TxCreditRptsFromRx, 1);    
+        } else if (FromEndpoint == ENDPOINT_0) {            
+                /* this credit arrived on endpoint 0 as a NULL message */
+            INC_HTC_EP_STAT(pEndpoint, TxCreditsFromEp0, pRpt->Credits);
+            INC_HTC_EP_STAT(pEndpoint, TxCreditRptsFromEp0, 1);  
+        } else {
+                /* arrived on another endpoint */
+            INC_HTC_EP_STAT(pEndpoint, TxCreditsFromOther, pRpt->Credits); 
+            INC_HTC_EP_STAT(pEndpoint, TxCreditRptsFromOther, 1);    
+        }
+        
+#endif
+                
+        if (ENDPOINT_0 == pRpt->EndpointID) {
+                /* always give endpoint 0 credits back */
+            pEndpoint->CreditDist.TxCredits += pRpt->Credits;    
+        } else {
+                /* for all other endpoints, update credits to distribute, the distribution function
+                 * will handle giving out credits back to the endpoints */
+            pEndpoint->CreditDist.TxCreditsToDist += pRpt->Credits;
+                /* flag that we have to do the distribution */
+            doDist = TRUE;
+        }         
+        
+        totalCredits += pRpt->Credits;                              
+    }    
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_SEND, ("  Report indicated %d credits to distribute \n", totalCredits));
+                
+    if (doDist) {
+            /* this was a credit return based on a completed send operations
+             * note, this is done with the lock held */       
+        DO_DISTRIBUTION(target,
+                        HTC_CREDIT_DIST_SEND_COMPLETE,
+                        "Send Complete",
+                        target->EpCreditDistributionListHead->pNext);        
+    }
+    
+    UNLOCK_HTC_TX(target);
+    
+    if (totalCredits) {
+        HTCCheckEndpointTxQueues(target);    
+    }
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_SEND, ("-HTCProcessCreditRpt \n"));
+}
+
+/* flush endpoint TX queue */
+static void HTCFlushEndpointTX(HTC_TARGET *target, HTC_ENDPOINT *pEndpoint, HTC_TX_TAG Tag)
+{
+    HTC_PACKET          *pPacket;
+    HTC_PACKET_QUEUE    discardQueue;
+    
+        /* initialize the discard queue */
+    INIT_HTC_PACKET_QUEUE(&discardQueue);
+            
+    LOCK_HTC_TX(target);
+    
+        /* interate from the front of the TX queue and flush out packets */     
+    ITERATE_OVER_LIST_ALLOW_REMOVE(&pEndpoint->TxQueue, pPacket, HTC_PACKET, ListLink) {
+        
+            /* check for removal */
+        if ((HTC_TX_PACKET_TAG_ALL == Tag) || (Tag == pPacket->PktInfo.AsTx.Tag)) {
+                /* remove from queue */
+            HTC_PACKET_REMOVE(pPacket);
+                /* add it to the discard pile */
+            HTC_PACKET_ENQUEUE(&discardQueue, pPacket);
+            pEndpoint->CurrentTxQueueDepth--;
+        }
+        
+    } ITERATE_END;
+    
+    UNLOCK_HTC_TX(target);
+    
+        /* empty the discard queue */
+    while (1) {
+        pPacket = HTC_PACKET_DEQUEUE(&discardQueue);   
+        if (NULL == pPacket) {
+            break;    
+        }
+        pPacket->Status = A_ECANCELED;
+        AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("  Flushing TX packet:0x%X, length:%d, ep:%d tag:0x%X \n",
+                (A_UINT32)pPacket, pPacket->ActualLength, pPacket->Endpoint, pPacket->PktInfo.AsTx.Tag));
+        DO_EP_TX_COMPLETION(pEndpoint,pPacket);        
+    } 
+        
+}
+
+void DumpCreditDist(HTC_ENDPOINT_CREDIT_DIST *pEPDist)
+{
+    HTC_ENDPOINT *pEndpoint = (HTC_ENDPOINT *)pEPDist->pHTCReserved;
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_ANY, ("--- EP : %d  ServiceID: 0x%X    --------------\n", 
+                        pEPDist->Endpoint, pEPDist->ServiceID));
+    AR_DEBUG_PRINTF(ATH_DEBUG_ANY, (" this:0x%X next:0x%X prev:0x%X\n",
+                (A_UINT32)pEPDist, (A_UINT32)pEPDist->pNext, (A_UINT32)pEPDist->pPrev));                        
+    AR_DEBUG_PRINTF(ATH_DEBUG_ANY, (" DistFlags          : 0x%X \n", pEPDist->DistFlags));                     
+    AR_DEBUG_PRINTF(ATH_DEBUG_ANY, (" TxCreditsNorm      : %d \n", pEPDist->TxCreditsNorm));               
+    AR_DEBUG_PRINTF(ATH_DEBUG_ANY, (" TxCreditsMin       : %d \n", pEPDist->TxCreditsMin));
+    AR_DEBUG_PRINTF(ATH_DEBUG_ANY, (" TxCredits          : %d \n", pEPDist->TxCredits));
+    AR_DEBUG_PRINTF(ATH_DEBUG_ANY, (" TxCreditsAssigned  : %d \n", pEPDist->TxCreditsAssigned));
+    AR_DEBUG_PRINTF(ATH_DEBUG_ANY, (" TxCreditsSeek      : %d \n", pEPDist->TxCreditsSeek));
+    AR_DEBUG_PRINTF(ATH_DEBUG_ANY, (" TxCreditSize       : %d \n", pEPDist->TxCreditSize));
+    AR_DEBUG_PRINTF(ATH_DEBUG_ANY, (" TxCreditsPerMaxMsg : %d \n", pEPDist->TxCreditsPerMaxMsg));
+    AR_DEBUG_PRINTF(ATH_DEBUG_ANY, (" TxCreditsToDist    : %d \n", pEPDist->TxCreditsToDist));  
+    AR_DEBUG_PRINTF(ATH_DEBUG_ANY, (" TxQueueDepth       : %d \n", pEndpoint->CurrentTxQueueDepth));        
+    AR_DEBUG_PRINTF(ATH_DEBUG_ANY, ("----------------------------------------------------\n"));   
+}
+
+void DumpCreditDistStates(HTC_TARGET *target)
+{
+    HTC_ENDPOINT_CREDIT_DIST *pEPList = target->EpCreditDistributionListHead;
+    
+    while (pEPList != NULL) {
+        DumpCreditDist(pEPList);
+        pEPList = pEPList->pNext; 
+    }
+    
+    if (target->DistributeCredits != NULL) {
+        DO_DISTRIBUTION(target,
+                        HTC_DUMP_CREDIT_STATE,
+                        "Dump State",
+                        NULL);
+    }
+}
+
+/* flush all send packets from all endpoint queues */
+void HTCFlushSendPkts(HTC_TARGET *target)
+{
+    HTC_ENDPOINT    *pEndpoint;    
+    int             i;
+
+    DumpCreditDistStates(target);
+
+    for (i = ENDPOINT_0; i < ENDPOINT_MAX; i++) {
+        pEndpoint = &target->EndPoint[i];
+        if (pEndpoint->ServiceID == 0) {
+                /* not in use.. */
+            continue;    
+        }
+        HTCFlushEndpointTX(target,pEndpoint,HTC_TX_PACKET_TAG_ALL);
+    }
+    
+    
+}
+
+/* HTC API to flush an endpoint's TX queue*/
+void HTCFlushEndpoint(HTC_HANDLE HTCHandle, HTC_ENDPOINT_ID Endpoint, HTC_TX_TAG Tag)
+{
+    HTC_TARGET      *target = GET_HTC_TARGET_FROM_HANDLE(HTCHandle);
+    HTC_ENDPOINT    *pEndpoint = &target->EndPoint[Endpoint];
+    
+    if (pEndpoint->ServiceID == 0) {
+        AR_DEBUG_ASSERT(FALSE);
+        /* not in use.. */
+        return; 
+    }
+    
+    HTCFlushEndpointTX(target, pEndpoint, Tag);
+}
+
+/* HTC API to indicate activity to the credit distribution function */
+void HTCIndicateActivityChange(HTC_HANDLE      HTCHandle, 
+                               HTC_ENDPOINT_ID Endpoint,
+                               A_BOOL          Active)
+{
+    HTC_TARGET      *target = GET_HTC_TARGET_FROM_HANDLE(HTCHandle);
+    HTC_ENDPOINT    *pEndpoint = &target->EndPoint[Endpoint];
+    A_BOOL          doDist = FALSE;
+    
+    if (pEndpoint->ServiceID == 0) {
+        AR_DEBUG_ASSERT(FALSE);
+        /* not in use.. */
+        return; 
+    }    
+    
+    LOCK_HTC_TX(target);
+    
+    if (Active) {
+        if (!(pEndpoint->CreditDist.DistFlags & HTC_EP_ACTIVE)) {
+                /* mark active now */
+            pEndpoint->CreditDist.DistFlags |= HTC_EP_ACTIVE; 
+            doDist = TRUE;   
+        }
+    } else {
+        if (pEndpoint->CreditDist.DistFlags & HTC_EP_ACTIVE) {
+                /* mark inactive now */
+            pEndpoint->CreditDist.DistFlags &= ~HTC_EP_ACTIVE; 
+            doDist = TRUE;   
+        }    
+    }
+    
+    if (doDist) {
+        /* do distribution again based on activity change 
+         * note, this is done with the lock held */       
+        DO_DISTRIBUTION(target,
+                        HTC_CREDIT_DIST_ACTIVITY_CHANGE,
+                        "Activity Change",
+                        target->EpCreditDistributionListHead->pNext);
+    }
+           
+    UNLOCK_HTC_TX(target);
+     
+}

Added: trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_services.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_services.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/htc2/htc_services.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,403 @@
+/*
+ * 
+ * Copyright (c) 2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+
+#include "htc_internal.h"
+
+void HTCControlTxComplete(void *Context, HTC_PACKET *pPacket)
+{
+        /* not implemented 
+         * we do not send control TX frames during normal runtime, only during setup  */    
+    AR_DEBUG_ASSERT(FALSE);    
+}
+
+    /* callback when a control message arrives on this endpoint */
+void HTCControlRecv(void *Context, HTC_PACKET *pPacket)
+{
+    AR_DEBUG_ASSERT(pPacket->Endpoint == ENDPOINT_0);
+ 
+        /* the only control messages we are expecting are NULL messages (credit resports), which should
+         * never get here */   
+    AR_DEBUG_PRINTF(ATH_DEBUG_ERR, 
+                    ("HTCControlRecv, got message with length:%d \n",
+                    pPacket->ActualLength + HTC_HDR_LENGTH));
+    
+        /* dump header and message */
+    DebugDumpBytes(pPacket->pBuffer - HTC_HDR_LENGTH, 
+                   pPacket->ActualLength + HTC_HDR_LENGTH,
+                   "Unexpected ENDPOINT 0 Message");
+                   
+    HTC_RECYCLE_RX_PKT((HTC_TARGET*)Context,pPacket);
+}   
+
+A_STATUS HTCSendSetupComplete(HTC_TARGET *target)
+{
+    HTC_PACKET             *pSendPacket = NULL;
+    A_STATUS                status;
+    HTC_SETUP_COMPLETE_MSG *pSetupComplete;
+    
+    do {
+           /* allocate a packet to send to the target */            
+        pSendPacket = HTC_ALLOC_CONTROL_TX(target);
+                    
+        if (NULL == pSendPacket) {
+            status = A_NO_MEMORY;
+            break;    
+        }
+        
+            /* assemble setup complete message */
+        pSetupComplete = (HTC_SETUP_COMPLETE_MSG *)pSendPacket->pBuffer;   
+        A_MEMZERO(pSetupComplete,sizeof(HTC_SETUP_COMPLETE_MSG));         
+        pSetupComplete->MessageID = HTC_MSG_SETUP_COMPLETE_ID;
+                
+        SET_HTC_PACKET_INFO_TX(pSendPacket,
+                               NULL,
+                               (A_UINT8 *)pSetupComplete,
+                               sizeof(HTC_SETUP_COMPLETE_MSG),
+                               ENDPOINT_0,
+                               HTC_SERVICE_TX_PACKET_TAG);  
+                                                         
+            /* we want synchronous operation */                
+        pSendPacket->Completion = NULL;                  
+            /* send the message */
+        status = HTCIssueSend(target,pSendPacket,0);
+             
+    } while (FALSE);
+    
+    if (pSendPacket != NULL) {
+        HTC_FREE_CONTROL_TX(target,pSendPacket);    
+    }
+    
+    return status;
+}
+
+
+A_STATUS HTCConnectService(HTC_HANDLE               HTCHandle, 
+                           HTC_SERVICE_CONNECT_REQ  *pConnectReq,
+                           HTC_SERVICE_CONNECT_RESP *pConnectResp)
+{
+    HTC_TARGET *target = GET_HTC_TARGET_FROM_HANDLE(HTCHandle);
+    A_STATUS                            status = A_OK;
+    HTC_PACKET                          *pRecvPacket = NULL;
+    HTC_PACKET                          *pSendPacket = NULL;
+    HTC_CONNECT_SERVICE_RESPONSE_MSG    *pResponseMsg;
+    HTC_CONNECT_SERVICE_MSG             *pConnectMsg;
+    HTC_ENDPOINT_ID                     assignedEndpoint = ENDPOINT_MAX;
+    HTC_ENDPOINT                        *pEndpoint;
+    int                                 maxMsgSize = 0;
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("+HTCConnectService, target:0x%X SvcID:0x%X \n",
+               (A_UINT32)target, pConnectReq->ServiceID));
+      
+    do {
+        
+        AR_DEBUG_ASSERT(pConnectReq->ServiceID != 0);
+              
+        if (HTC_CTRL_RSVD_SVC == pConnectReq->ServiceID) {
+                /* special case for pseudo control service */
+            assignedEndpoint = ENDPOINT_0;
+            maxMsgSize = HTC_MAX_CONTROL_MESSAGE_LENGTH;
+        } else {
+                /* allocate a packet to send to the target */            
+            pSendPacket = HTC_ALLOC_CONTROL_TX(target);
+                        
+            if (NULL == pSendPacket) {
+                AR_DEBUG_ASSERT(FALSE);
+                status = A_NO_MEMORY;
+                break;    
+            }            
+                /* assemble connect service message */
+            pConnectMsg = (HTC_CONNECT_SERVICE_MSG *)pSendPacket->pBuffer;
+            AR_DEBUG_ASSERT(pConnectMsg != NULL);   
+            A_MEMZERO(pConnectMsg,sizeof(HTC_CONNECT_SERVICE_MSG));         
+            pConnectMsg->MessageID = HTC_MSG_CONNECT_SERVICE_ID;
+            pConnectMsg->ServiceID = pConnectReq->ServiceID;
+            pConnectMsg->ConnectionFlags = pConnectReq->ConnectionFlags;
+                /* check caller if it wants to transfer meta data */
+            if ((pConnectReq->pMetaData != NULL) &&
+                (pConnectReq->MetaDataLength <= HTC_SERVICE_META_DATA_MAX_LENGTH)) {
+                    /* copy meta data into message buffer (after header ) */
+                A_MEMCPY((A_UINT8 *)pConnectMsg + sizeof(HTC_CONNECT_SERVICE_MSG),
+                         pConnectReq->pMetaData,
+                         pConnectReq->MetaDataLength);                                       
+                pConnectMsg->ServiceMetaLength = pConnectReq->MetaDataLength;
+            }
+            
+            SET_HTC_PACKET_INFO_TX(pSendPacket,
+                                   NULL,
+                                   (A_UINT8 *)pConnectMsg,
+                                   sizeof(HTC_CONNECT_SERVICE_MSG) + pConnectMsg->ServiceMetaLength,
+                                   ENDPOINT_0,
+                                   HTC_SERVICE_TX_PACKET_TAG);  
+                                                             
+                /* we want synchronous operation */                
+            pSendPacket->Completion = NULL;                  
+            
+            status = HTCIssueSend(target,pSendPacket,0);
+                        
+            if (A_FAILED(status)) {
+                break;    
+            }
+            
+                /* wait for response */
+            status = HTCWaitforControlMessage(target, &pRecvPacket);    
+            
+            if (A_FAILED(status)) {
+                break;    
+            }            
+                /* we controlled the buffer creation so it has to be properly aligned */    
+            pResponseMsg = (HTC_CONNECT_SERVICE_RESPONSE_MSG *)pRecvPacket->pBuffer;
+            
+            if ((pResponseMsg->MessageID != HTC_MSG_CONNECT_SERVICE_RESPONSE_ID) ||
+                (pRecvPacket->ActualLength < sizeof(HTC_CONNECT_SERVICE_RESPONSE_MSG))) {
+                    /* this message is not valid */
+                AR_DEBUG_ASSERT(FALSE);
+                status = A_EPROTO;
+                break;    
+            }      
+                     
+            pConnectResp->ConnectRespCode = pResponseMsg->Status;  
+                /* check response status */           
+            if (pResponseMsg->Status != HTC_SERVICE_SUCCESS) {
+                AR_DEBUG_PRINTF(ATH_DEBUG_ERR,
+                    (" Target failed service 0x%X connect request (status:%d)\n",
+                                pResponseMsg->ServiceID, pResponseMsg->Status));
+                status = A_EPROTO;                
+                break;    
+            }
+                           
+            assignedEndpoint = pResponseMsg->EndpointID;
+            maxMsgSize = pResponseMsg->MaxMsgSize;
+            
+            if ((pConnectResp->pMetaData != NULL) && 
+                (pResponseMsg->ServiceMetaLength > 0) &&
+                (pResponseMsg->ServiceMetaLength <= HTC_SERVICE_META_DATA_MAX_LENGTH)) {
+                    /* caller supplied a buffer and the target responded with data */
+                int copyLength = min((int)pConnectResp->BufferLength, (int)pResponseMsg->ServiceMetaLength);
+                    /* copy the meta data */
+                A_MEMCPY(pConnectResp->pMetaData,
+                         ((A_UINT8 *)pResponseMsg) + sizeof(HTC_CONNECT_SERVICE_RESPONSE_MSG),
+                         copyLength);
+                pConnectResp->ActualLength = copyLength;
+            }
+            
+        }
+        
+            /* the rest of these are parameter checks so set the error status */
+        status = A_EPROTO;
+        
+        if (assignedEndpoint >= ENDPOINT_MAX) {
+            AR_DEBUG_ASSERT(FALSE);
+            break;        
+        }
+           
+        if (0 == maxMsgSize) {
+            AR_DEBUG_ASSERT(FALSE);
+            break;    
+        }    
+        
+        pEndpoint = &target->EndPoint[assignedEndpoint]; 
+        
+        if (pEndpoint->ServiceID != 0) {
+            /* endpoint already in use! */
+            AR_DEBUG_ASSERT(FALSE);            
+            break;           
+        }
+        
+            /* return assigned endpoint to caller */
+        pConnectResp->Endpoint = assignedEndpoint;   
+        pConnectResp->MaxMsgLength = maxMsgSize;
+        
+            /* setup the endpoint */   
+        pEndpoint->ServiceID = pConnectReq->ServiceID; /* this marks the endpoint in use */
+        pEndpoint->MaxTxQueueDepth = pConnectReq->MaxSendQueueDepth;
+        pEndpoint->MaxMsgLength = maxMsgSize;
+            /* copy all the callbacks */
+        pEndpoint->EpCallBacks = pConnectReq->EpCallbacks;
+        INIT_HTC_PACKET_QUEUE(&pEndpoint->RxBuffers);
+        INIT_HTC_PACKET_QUEUE(&pEndpoint->TxQueue);
+            /* set the credit distribution info for this endpoint, this information is
+             * passed back to the credit distribution callback function */
+        pEndpoint->CreditDist.ServiceID = pConnectReq->ServiceID;
+        pEndpoint->CreditDist.pHTCReserved = pEndpoint; 
+        pEndpoint->CreditDist.Endpoint = assignedEndpoint;
+        pEndpoint->CreditDist.TxCreditSize = target->TargetCreditSize;
+        pEndpoint->CreditDist.TxCreditsPerMaxMsg = maxMsgSize / target->TargetCreditSize;
+        
+        if (0 == pEndpoint->CreditDist.TxCreditsPerMaxMsg) {
+            pEndpoint->CreditDist.TxCreditsPerMaxMsg = 1;    
+        }
+        
+        status = A_OK;
+        
+    } while (FALSE);
+    
+    if (pSendPacket != NULL) {
+        HTC_FREE_CONTROL_TX(target,pSendPacket);    
+    }
+    
+    if (pRecvPacket != NULL) {
+        HTC_FREE_CONTROL_RX(target,pRecvPacket);        
+    } 
+    
+    AR_DEBUG_PRINTF(ATH_DEBUG_TRC, ("-HTCConnectService \n"));
+    
+    return status;    
+}
+
+static void AddToEndpointDistList(HTC_TARGET *target, HTC_ENDPOINT_CREDIT_DIST *pEpDist)
+{
+    HTC_ENDPOINT_CREDIT_DIST *pCurEntry,*pLastEntry;
+    
+    if (NULL == target->EpCreditDistributionListHead) {
+        target->EpCreditDistributionListHead = pEpDist;
+        pEpDist->pNext = NULL;
+        pEpDist->pPrev = NULL;    
+        return;
+    }
+    
+        /* queue to the end of the list, this does not have to be very
+         * fast since this list is built at startup time */
+    pCurEntry = target->EpCreditDistributionListHead;
+        
+    while (pCurEntry) {
+        pLastEntry = pCurEntry; 
+        pCurEntry = pCurEntry->pNext;    
+    }
+    
+    pLastEntry->pNext = pEpDist;
+    pEpDist->pPrev = pLastEntry;
+    pEpDist->pNext = NULL;
+}
+
+
+
+/* default credit init callback */
+static void HTCDefaultCreditInit(void                     *Context,
+                                 HTC_ENDPOINT_CREDIT_DIST *pEPList, 
+                                 int                      TotalCredits)
+{
+    HTC_ENDPOINT_CREDIT_DIST *pCurEpDist;
+    int                      totalEps = 0;
+    int                      creditsPerEndpoint;
+       
+    pCurEpDist = pEPList; 
+        /* first run through the list and figure out how many endpoints we are dealing with */
+    while (pCurEpDist != NULL) {
+        pCurEpDist = pCurEpDist->pNext;
+        totalEps++;    
+    }
+    
+        /* even distribution */
+    creditsPerEndpoint = TotalCredits/totalEps;
+    
+    pCurEpDist = pEPList;       
+        /* run through the list and set minimum and normal credits and
+         * provide the endpoint with some credits to start */
+    while (pCurEpDist != NULL) {
+        
+        if (creditsPerEndpoint < pCurEpDist->TxCreditsPerMaxMsg) {
+                /* too many endpoints and not enough credits */
+            AR_DEBUG_ASSERT(FALSE);
+            break;    
+        }
+            /* our minimum is set for at least 1 max message */
+        pCurEpDist->TxCreditsMin = pCurEpDist->TxCreditsPerMaxMsg;
+            /* this value is ignored by our credit alg, since we do 
+             * not dynamically adjust credits, this is the policy of
+             * the "default" credit distribution, something simple and easy */
+        pCurEpDist->TxCreditsNorm = 0xFFFF;
+            /* give the endpoint minimum credits */            
+        pCurEpDist->TxCredits = creditsPerEndpoint; 
+        pCurEpDist->TxCreditsAssigned = creditsPerEndpoint;
+        pCurEpDist = pCurEpDist->pNext;
+    }
+    
+}
+                                         
+/* default credit distribution callback, NOTE, this callback holds the TX lock */
+void HTCDefaultCreditDist(void                     *Context, 
+                          HTC_ENDPOINT_CREDIT_DIST *pEPDistList,
+                          HTC_CREDIT_DIST_REASON   Reason)
+{
+    HTC_ENDPOINT_CREDIT_DIST *pCurEpDist;
+    
+    if (Reason == HTC_CREDIT_DIST_SEND_COMPLETE) {
+        pCurEpDist = pEPDistList;   
+            /* simple distribution */   
+        while (pCurEpDist != NULL) {    
+            if (pCurEpDist->TxCreditsToDist > 0) {
+                    /* just give the endpoint back the credits */
+                pCurEpDist->TxCredits += pCurEpDist->TxCreditsToDist;
+                pCurEpDist->TxCreditsToDist = 0;
+            }
+            pCurEpDist = pCurEpDist->pNext;   
+        }
+    }
+    
+    /* note we do not need to handle the other reason codes as this is a very 
+     * simple distribution scheme, no need to seek for more credits or handle inactivity */
+}
+
+void HTCSetCreditDistribution(HTC_HANDLE               HTCHandle,
+                              void                     *pCreditDistContext,
+                              HTC_CREDIT_DIST_CALLBACK CreditDistFunc,
+                              HTC_CREDIT_INIT_CALLBACK CreditInitFunc,
+                              HTC_SERVICE_ID           ServicePriorityOrder[],
+                              int                      ListLength)
+{
+    HTC_TARGET *target = GET_HTC_TARGET_FROM_HANDLE(HTCHandle);
+    int i;
+    int ep;
+    
+    if (CreditInitFunc != NULL) {
+            /* caller has supplied their own distribution functions */
+        target->InitCredits = CreditInitFunc;
+        AR_DEBUG_ASSERT(CreditDistFunc != NULL);
+        target->DistributeCredits = CreditDistFunc;
+        target->pCredDistContext = pCreditDistContext;      
+    } else {
+        /* caller wants HTC to do distribution */
+        /* if caller wants service to handle distributions then
+         * it must set both of these to NULL! */
+        AR_DEBUG_ASSERT(CreditDistFunc == NULL);
+        target->InitCredits = HTCDefaultCreditInit;
+        target->DistributeCredits = HTCDefaultCreditDist;
+        target->pCredDistContext = target;           
+    }
+    
+        /* always add HTC control endpoint first, we only expose the list after the
+         * first one, this is added for TX queue checking */
+    AddToEndpointDistList(target, &target->EndPoint[ENDPOINT_0].CreditDist);
+    
+        /* build the list of credit distribution structures in priority order
+         * supplied by the caller, these will follow endpoint 0 */
+    for (i = 0; i < ListLength; i++) {
+            /* match services with endpoints and add the endpoints to the distribution list
+             * in FIFO order */
+        for (ep = ENDPOINT_1; ep < ENDPOINT_MAX; ep++) {            
+            if (target->EndPoint[ep].ServiceID == ServicePriorityOrder[i]) {
+                    /* queue this one to the list */
+                AddToEndpointDistList(target, &target->EndPoint[ep].CreditDist);        
+                break;
+            }   
+        }
+        AR_DEBUG_ASSERT(ep < ENDPOINT_MAX);
+    }
+    
+}

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/a_config.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/a_config.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/a_config.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,37 @@
+#ifndef _A_CONFIG_H_
+#define _A_CONFIG_H_
+/*
+ * Copyright (c) 2004-2005 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+/*
+ * This file contains software configuration options that enables
+ * specific software "features"
+ */
+#ifdef UNDER_CE
+#include "../os/wince/include/config_wince.h"
+#endif
+
+#if defined(__linux__) && !defined(LINUX_EMULATION)
+#include "../os/linux/include/config_linux.h"
+#endif
+
+#ifdef REXOS
+#include "../os/rexos/include/common/config_rexos.h"
+#endif
+
+#endif

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/a_debug.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/a_debug.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/a_debug.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,51 @@
+#ifndef _A_DEBUG_H_
+#define _A_DEBUG_H_
+/*
+ * Copyright (c) 2004-2006 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#include <a_types.h>
+#include <a_osapi.h>
+
+#define DBG_INFO		0x00000001
+#define DBG_ERROR		0x00000002
+#define DBG_WARNING		0x00000004
+#define DBG_SDIO		0x00000008
+#define DBG_HIF			0x00000010
+#define DBG_HTC			0x00000020
+#define DBG_WMI			0x00000040
+#define DBG_WMI2		0x00000080
+#define DBG_DRIVER		0x00000100
+
+#define DBG_DEFAULTS	(DBG_ERROR|DBG_WARNING)
+
+#ifdef UNDER_CE
+#include "../os/wince/include/debug_wince.h"
+#endif
+
+#if defined(__linux__) && !defined(LINUX_EMULATION)
+#include "../os/linux/include/debug_linux.h"
+#endif
+
+#ifdef REXOS
+#include "../os/rexos/include/common/debug_rexos.h"
+#endif
+
+#endif

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/a_drv.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/a_drv.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/a_drv.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,38 @@
+#ifndef _A_DRV_H_
+#define _A_DRV_H_
+/*
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/include/a_drv.h#1 $
+ *
+ * This file contains the definitions of the basic atheros data types.
+ * It is used to map the data types in atheros files to a platform specific
+ * type.
+ *
+ * Copyright 2003-2005 Atheros Communications, Inc.,  All Rights Reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#if defined(__linux__) && !defined(LINUX_EMULATION)
+#include "../os/linux/include/athdrv_linux.h"
+#endif
+
+#ifdef UNDER_CE
+#include "../os/wince/include/athdrv_wince.h"
+#endif
+
+#ifdef REXOS
+#include "../os/rexos/include/common/athdrv_rexos.h"
+#endif
+
+#endif /* _ADRV_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/a_drv_api.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/a_drv_api.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/a_drv_api.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,185 @@
+#ifndef _A_DRV_API_H_
+#define _A_DRV_API_H_
+/*
+ * Copyright (c) 2004-2006 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/****************************************************************************/
+/****************************************************************************/
+/**                                                                        **/
+/** WMI related hooks                                                      **/
+/**                                                                        **/
+/****************************************************************************/
+/****************************************************************************/
+
+#include <ar6000_api.h>
+
+#define A_WMI_CHANNELLIST_RX(devt, numChan, chanList)	\
+	ar6000_channelList_rx((devt), (numChan), (chanList))
+
+#define A_WMI_SET_NUMDATAENDPTS(devt, num)	\
+	ar6000_set_numdataendpts((devt), (num))
+
+#define A_WMI_CONTROL_TX(devt, osbuf, streamID)	\
+	ar6000_control_tx((devt), (osbuf), (streamID))
+
+#define A_WMI_TARGETSTATS_EVENT(devt, pStats)	\
+	ar6000_targetStats_event((devt), (pStats))
+
+#define A_WMI_SCANCOMPLETE_EVENT(devt, status)	\
+	ar6000_scanComplete_event((devt), (status))
+
+#ifdef CONFIG_HOST_DSET_SUPPORT
+
+#define A_WMI_DSET_DATA_REQ(devt, access_cookie, offset, length, targ_buf, targ_reply_fn, targ_reply_arg)	\
+	ar6000_dset_data_req((devt), (access_cookie), (offset), (length), (targ_buf), (targ_reply_fn), (targ_reply_arg))
+
+#define A_WMI_DSET_CLOSE(devt, access_cookie)	\
+	ar6000_dset_close((devt), (access_cookie))
+
+#endif
+
+#define A_WMI_DSET_OPEN_REQ(devt, id, targ_handle, targ_reply_fn, targ_reply_arg) \
+	ar6000_dset_open_req((devt), (id), (targ_handle), (targ_reply_fn), (targ_reply_arg))
+
+#define A_WMI_CONNECT_EVENT(devt, channel, bssid, listenInterval, beaconInterval, networkType, beaconIeLen, assocReqLen, assocRespLen, assocInfo) \
+	ar6000_connect_event((devt), (channel), (bssid), (listenInterval), (beaconInterval), (networkType), (beaconIeLen), (assocReqLen), (assocRespLen), (assocInfo))
+
+#define A_WMI_REGDOMAIN_EVENT(devt, regCode)	\
+	ar6000_regDomain_event((devt), (regCode))
+
+#define A_WMI_NEIGHBORREPORT_EVENT(devt, numAps, info)	\
+	ar6000_neighborReport_event((devt), (numAps), (info))
+
+#define A_WMI_DISCONNECT_EVENT(devt, reason, bssid, assocRespLen, assocInfo, protocolReasonStatus)	\
+	ar6000_disconnect_event((devt), (reason), (bssid), (assocRespLen), (assocInfo), (protocolReasonStatus))
+
+#define A_WMI_TKIP_MICERR_EVENT(devt, keyid, ismcast)	\
+	ar6000_tkip_micerr_event((devt), (keyid), (ismcast))
+
+#define A_WMI_BITRATE_RX(devt, rateKbps)	\
+	ar6000_bitrate_rx((devt), (rateKbps))
+
+#define A_WMI_TXPWR_RX(devt, txPwr)	\
+	ar6000_txPwr_rx((devt), (txPwr))
+
+#define A_WMI_READY_EVENT(devt, datap, phyCap)	\
+	ar6000_ready_event((devt), (datap), (phyCap))
+
+#define A_WMI_DBGLOG_INIT_DONE(ar) \
+        ar6000_dbglog_init_done(ar);
+
+#define A_WMI_RSSI_THRESHOLD_EVENT(devt, newThreshold, rssi)	\
+	ar6000_rssiThreshold_event((devt), (newThreshold), (rssi))
+
+#define A_WMI_REPORT_ERROR_EVENT(devt, errorVal)	\
+	ar6000_reportError_event((devt), (errorVal))
+
+#define A_WMI_ROAM_TABLE_EVENT(devt, pTbl) \
+	ar6000_roam_tbl_event((devt), (pTbl))
+
+#define A_WMI_ROAM_DATA_EVENT(devt, p) \
+	ar6000_roam_data_event((devt), (p))
+
+#define A_WMI_WOW_LIST_EVENT(devt, num_filters, wow_filters)	\
+	ar6000_wow_list_event((devt), (num_filters), (wow_filters))
+
+#define A_WMI_CAC_EVENT(devt, ac, cac_indication, statusCode, tspecSuggestion)  \
+	ar6000_cac_event((devt), (ac), (cac_indication), (statusCode), (tspecSuggestion))
+
+#define A_WMI_IPTOS_TO_USERPRIORITY(pkt)    \
+	ar6000_iptos_to_userPriority((pkt))
+
+#define A_WMI_PMKID_LIST_EVENT(devt, num_pmkid, pmkid_list)	\
+	ar6000_pmkid_list_event((devt), (num_pmkid), (pmkid_list))
+
+#ifdef CONFIG_HOST_GPIO_SUPPORT
+
+#define A_WMI_GPIO_INTR_RX(intr_mask, input_values) \
+	ar6000_gpio_intr_rx((intr_mask), (input_values))
+
+#define A_WMI_GPIO_DATA_RX(reg_id, value) \
+	ar6000_gpio_data_rx((reg_id), (value))
+
+#define A_WMI_GPIO_ACK_RX() \
+	ar6000_gpio_ack_rx()
+
+#endif
+
+#ifdef SEND_EVENT_TO_APP
+
+#define A_WMI_SEND_EVENT_TO_APP(ar, eventId, datap, len) \
+	ar6000_send_event_to_app((ar), (eventId), (datap), (len))
+
+#else
+
+#define A_WMI_SEND_EVENT_TO_APP(ar, eventId, datap, len)
+
+#endif
+
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+#define A_WMI_TCMD_RX_REPORT_EVENT(devt, results, len) \
+	ar6000_tcmd_rx_report_event((devt), (results), (len))
+#endif
+
+#define A_WMI_HBCHALLENGERESP_EVENT(devt, cookie, source)    \
+    ar6000_hbChallengeResp_event((devt), (cookie), (source))
+
+#define A_WMI_TX_RETRY_ERR_EVENT(devt) \
+	ar6000_tx_retry_err_event((devt))
+
+#define A_WMI_SNR_THRESHOLD_EVENT_RX(devt, newThreshold, snr) \
+	ar6000_snrThresholdEvent_rx((devt), (newThreshold), (snr))
+
+#define A_WMI_LQ_THRESHOLD_EVENT_RX(devt, range, lqVal) \
+	ar6000_lqThresholdEvent_rx((devt), (range), (lqVal))
+
+#define A_WMI_RATEMASK_RX(devt, ratemask) \
+	ar6000_ratemask_rx((devt), (ratemask))
+
+#define A_WMI_KEEPALIVE_RX(devt, configured)    \
+        ar6000_keepalive_rx((devt), (configured))
+
+#define A_WMI_BSSINFO_EVENT_RX(ar, datp, len)   \
+        ar6000_bssInfo_event_rx((ar), (datap), (len))
+
+#define A_WMI_DBGLOG_EVENT(ar, dropped, buffer, length) \
+        ar6000_dbglog_event((ar), (dropped), (buffer), (length));
+
+#define A_WMI_STREAM_TX_ACTIVE(devt,trafficClass) \
+    ar6000_indicate_tx_activity((devt),(trafficClass), TRUE)
+
+#define A_WMI_STREAM_TX_INACTIVE(devt,trafficClass) \
+    ar6000_indicate_tx_activity((devt),(trafficClass), FALSE)
+       
+/****************************************************************************/
+/****************************************************************************/
+/**                                                                        **/
+/** HTC related hooks                                                      **/
+/**                                                                        **/
+/****************************************************************************/
+/****************************************************************************/
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/a_osapi.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/a_osapi.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/a_osapi.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,43 @@
+#ifndef _A_OSAPI_H_
+#define _A_OSAPI_H_
+/*
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/include/a_osapi.h#1 $
+ *
+ * This file contains the definitions of the basic atheros data types.
+ * It is used to map the data types in atheros files to a platform specific
+ * type.
+ *
+ * Copyright 2003-2005 Atheros Communications, Inc.,  All Rights Reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#ifdef __linux__
+#include "../os/linux/include/osapi_linux.h"
+#endif
+
+#ifdef UNDER_CE
+#include "../os/wince/include/osapi_wince.h"
+#include "../os/wince/ndis/netbuf.h"
+#if defined __cplusplus || defined __STDC__
+extern "C"
+#endif
+A_UINT32 a_copy_from_user(void *to, const void *from, A_UINT32 n);
+#endif
+
+#ifdef REXOS
+#include "../os/rexos/include/common/osapi_rexos.h"
+#endif
+
+#endif /* _OSAPI_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/a_types.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/a_types.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/a_types.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,38 @@
+#ifndef _A_TYPES_H_
+#define _A_TYPES_H_
+/*
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/include/a_types.h#1 $
+ *
+ * This file contains the definitions of the basic atheros data types.
+ * It is used to map the data types in atheros files to a platform specific
+ * type.
+ *
+ * Copyright 2003-2005 Atheros Communications, Inc.,  All Rights Reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#if defined(__linux__) && !defined(LINUX_EMULATION)
+#include "../os/linux/include/athtypes_linux.h"
+#endif
+
+#ifdef UNDER_CE
+#include "../os/wince/include/athtypes_wince.h"
+#endif
+
+#ifdef REXOS
+#include "../os/rexos/include/common/athtypes_rexos.h"
+#endif
+
+#endif /* _ATHTYPES_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/ar6000_api.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/ar6000_api.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/ar6000_api.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,39 @@
+#ifndef _AR6000_API_H_
+#define _AR6000_API_H_
+/*
+ * Copyright (c) 2004-2005 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * This file contains the API to access the OS dependent atheros host driver
+ * by the WMI or WLAN generic modules.
+ *
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/include/ar6000_api.h#1 $
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#if defined(__linux__) && !defined(LINUX_EMULATION)
+#include "../os/linux/include/ar6xapi_linux.h"
+#endif
+
+#ifdef UNDER_CE
+#include "../os/wince/include/ar6xapi_wince.h"
+#endif
+
+#ifdef REXOS
+#include "../os/rexos/include/common/ar6xapi_rexos.h"
+#endif
+
+#endif /* _AR6000_API_H */
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/ar6000_diag.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/ar6000_diag.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/ar6000_diag.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,38 @@
+/*
+ * 
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+
+#ifndef AR6000_DIAG_H_
+#define AR6000_DIAG_H_
+
+
+A_STATUS
+ar6000_ReadRegDiag(HIF_DEVICE *hifDevice, A_UINT32 *address, A_UINT32 *data);
+
+A_STATUS
+ar6000_WriteRegDiag(HIF_DEVICE *hifDevice, A_UINT32 *address, A_UINT32 *data);
+
+A_STATUS
+ar6000_ReadDataDiag(HIF_DEVICE *hifDevice, A_UINT32 address, 
+                    A_UCHAR *data, A_UINT32 length);
+                    
+A_STATUS
+ar6000_WriteDataDiag(HIF_DEVICE *hifDevice, A_UINT32 address,
+                     A_UCHAR *data, A_UINT32 length);
+                    
+#endif /*AR6000_DIAG_H_*/

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/athdrv.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/athdrv.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/athdrv.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,32 @@
+/*
+ * Copyright (c) 2004-2006 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+
+#ifndef _ATHDRV_H_
+#define _ATHDRV_H_
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _ATHDRV_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/athendpack.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/athendpack.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/athendpack.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,41 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ * @file: athendpack.h
+ *
+ * @abstract: end compiler-specific structure packing
+ *
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+#ifdef VXWORKS
+#endif /* VXWORKS */
+
+#ifdef LINUX
+#endif /* LINUX */
+
+#ifdef QNX
+#endif /* QNX */
+
+#ifdef INTEGRITY
+#include "integrity/athendpack_integrity.h"
+#endif /* INTEGRITY */
+
+#ifdef NUCLEUS
+#endif /* NUCLEUS */
+
+#ifdef UNDER_CE
+#include "../os/wince/include/athendpack_wince.h"
+#endif /* WINCE */
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/athstartpack.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/athstartpack.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/athstartpack.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,42 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ * @file: athstartpack.h
+ *
+ * @abstract: start compiler-specific structure packing
+ *
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#ifdef VXWORKS
+#endif /* VXWORKS */
+
+#ifdef LINUX
+#endif /* LINUX */
+
+#ifdef QNX
+#endif /* QNX */
+
+#ifdef INTEGRITY
+#include "integrity/athstartpack_integrity.h"
+#endif /* INTEGRITY */
+
+#ifdef NUCLEUS
+#endif /* NUCLEUS */
+
+#ifdef UNDER_CE
+#include "../os/wince/include/athstartpack_wince.h"
+#endif /* WINCE */
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/bmi.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/bmi.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/bmi.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,100 @@
+#ifndef _BMI_H_
+#define _BMI_H_
+/*
+ * Copyright (c) 2004-2005 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ * BMI declarations and prototypes
+ */
+
+#ifdef __cplusplus
+extern "C" {
+#endif /* __cplusplus */
+
+/* Header files */
+#include "a_config.h"
+#include "athdefs.h"
+#include "a_types.h"
+#include "hif.h"
+#include "a_osapi.h"
+#include "bmi_msg.h"
+
+void
+BMIInit(void);
+
+A_STATUS 
+BMIDone(HIF_DEVICE *device);
+
+A_STATUS 
+BMIGetTargetInfo(HIF_DEVICE *device, struct bmi_target_info *targ_info);
+
+A_STATUS 
+BMIReadMemory(HIF_DEVICE *device, 
+              A_UINT32 address, 
+              A_UCHAR *buffer, 
+              A_UINT32 length);
+
+A_STATUS 
+BMIWriteMemory(HIF_DEVICE *device, 
+               A_UINT32 address, 
+               A_UCHAR *buffer, 
+               A_UINT32 length);
+
+A_STATUS 
+BMIExecute(HIF_DEVICE *device, 
+           A_UINT32 address, 
+           A_UINT32 *param);
+
+A_STATUS 
+BMISetAppStart(HIF_DEVICE *device, 
+               A_UINT32 address);
+
+A_STATUS 
+BMIReadSOCRegister(HIF_DEVICE *device, 
+                   A_UINT32 address, 
+                   A_UINT32 *param);
+
+A_STATUS 
+BMIWriteSOCRegister(HIF_DEVICE *device, 
+                    A_UINT32 address, 
+                    A_UINT32 param);
+
+A_STATUS 
+BMIrompatchInstall(HIF_DEVICE *device, 
+                   A_UINT32 ROM_addr, 
+                   A_UINT32 RAM_addr,
+                   A_UINT32 nbytes,
+                   A_UINT32 do_activate,
+                   A_UINT32 *patch_id);
+
+A_STATUS 
+BMIrompatchUninstall(HIF_DEVICE *device,
+                     A_UINT32 rompatch_id);
+
+A_STATUS 
+BMIrompatchActivate(HIF_DEVICE *device, 
+                    A_UINT32 rompatch_count,
+                    A_UINT32 *rompatch_list);
+
+A_STATUS 
+BMIrompatchDeactivate(HIF_DEVICE *device, 
+                      A_UINT32 rompatch_count,
+                      A_UINT32 *rompatch_list);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _BMI_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/bmi_msg.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/bmi_msg.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/bmi_msg.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,199 @@
+#ifndef __BMI_MSG_H__
+#define __BMI_MSG_H__
+/*
+ *
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+/*
+ * Bootloader Messaging Interface (BMI)
+ *
+ * BMI is a very simple messaging interface used during initialization
+ * to read memory, write memory, execute code, and to define an
+ * application entry PC.
+ *
+ * It is used to download an application to AR6K, to provide
+ * patches to code that is already resident on AR6K, and generally
+ * to examine and modify state.  The Host has an opportunity to use
+ * BMI only once during bootup.  Once the Host issues a BMI_DONE
+ * command, this opportunity ends.
+ *
+ * The Host writes BMI requests to mailbox0, and reads BMI responses
+ * from mailbox0.   BMI requests all begin with a command
+ * (see below for specific commands), and are followed by
+ * command-specific data.
+ *
+ * Flow control:
+ * The Host can only issue a command once the Target gives it a
+ * "BMI Command Credit", using AR6K Counter #4.  As soon as the
+ * Target has completed a command, it issues another BMI Command
+ * Credit (so the Host can issue the next command).
+ *
+ * BMI handles all required Target-side cache flushing.
+ */
+
+
+/* Maximum data size used for BMI transfers */
+#define BMI_DATASZ_MAX                     32
+
+/* BMI Commands */
+
+#define BMI_NO_COMMAND                      0
+
+#define BMI_DONE                            1
+        /*
+         * Semantics: Host is done using BMI
+         * Request format:
+         *    A_UINT32      command (BMI_DONE)
+         * Response format: none
+         */
+
+#define BMI_READ_MEMORY                     2
+        /*
+         * Semantics: Host reads AR6K memory
+         * Request format:
+         *    A_UINT32      command (BMI_READ_MEMORY)
+         *    A_UINT32      address
+         *    A_UINT32      length, at most BMI_DATASZ_MAX
+         * Response format:
+         *    A_UINT8       data[length]
+         */
+
+#define BMI_WRITE_MEMORY                    3
+        /*
+         * Semantics: Host writes AR6K memory
+         * Request format:
+         *    A_UINT32       command (BMI_WRITE_MEMORY)
+         *    A_UINT32      address
+         *    A_UINT32      length, at most BMI_DATASZ_MAX
+         *    A_UINT8       data[length]
+         * Response format: none
+         */
+
+#define BMI_EXECUTE                         4
+        /*
+         * Semantics: Causes AR6K to execute code
+         * Request format:
+         *    A_UINT32      command (BMI_EXECUTE)
+         *    A_UINT32      address
+         *    A_UINT32      parameter
+         * Response format:
+         *    A_UINT32      return value
+         */
+
+#define BMI_SET_APP_START                   5
+        /*
+         * Semantics: Set Target application starting address
+         * Request format:
+         *    A_UINT32      command (BMI_SET_APP_START)
+         *    A_UINT32      address
+         * Response format: none
+         */
+
+#define BMI_READ_SOC_REGISTER               6
+        /*
+         * Semantics: Read a 32-bit Target SOC register.
+         * Request format:
+         *    A_UINT32      command (BMI_READ_REGISTER)
+         *    A_UINT32      address
+         * Response format: 
+         *    A_UINT32      value
+         */
+
+#define BMI_WRITE_SOC_REGISTER              7
+        /*
+         * Semantics: Write a 32-bit Target SOC register.
+         * Request format:
+         *    A_UINT32      command (BMI_WRITE_REGISTER)
+         *    A_UINT32      address
+         *    A_UINT32      value
+         *
+         * Response format: none
+         */
+
+#define BMI_GET_TARGET_ID                  8
+#define BMI_GET_TARGET_INFO                8
+        /*
+         * Semantics: Fetch the 4-byte Target information
+         * Request format:
+         *    A_UINT32      command (BMI_GET_TARGET_ID/INFO)
+         * Response format1 (old firmware):
+         *    A_UINT32      TargetVersionID
+         * Response format2 (newer firmware):
+         *    A_UINT32      TARGET_VERSION_SENTINAL
+         *    struct bmi_target_info;
+         */
+
+struct bmi_target_info {
+    A_UINT32 target_info_byte_count; /* size of this structure */
+    A_UINT32 target_ver;             /* Target Version ID */
+    A_UINT32 target_type;            /* Target type */
+};
+#define TARGET_VERSION_SENTINAL 0xffffffff
+#define TARGET_TYPE_AR6001 1
+#define TARGET_TYPE_AR6002 2
+
+
+#define BMI_ROMPATCH_INSTALL               9
+        /*
+         * Semantics: Install a ROM Patch.
+         * Request format:
+         *    A_UINT32      command (BMI_ROMPATCH_INSTALL)
+         *    A_UINT32      Target ROM Address
+         *    A_UINT32      Target RAM Address
+         *    A_UINT32      Size, in bytes
+         *    A_UINT32      Activate? 1-->activate;
+         *                            0-->install but do not activate
+         * Response format:
+         *    A_UINT32      PatchID
+         */
+
+#define BMI_ROMPATCH_UNINSTALL             10
+        /*
+         * Semantics: Uninstall a previously-installed ROM Patch,
+         * automatically deactivating, if necessary.
+         * Request format:
+         *    A_UINT32      command (BMI_ROMPATCH_UNINSTALL)
+         *    A_UINT32      PatchID
+         *
+         * Response format: none
+         */
+
+#define BMI_ROMPATCH_ACTIVATE              11
+        /*
+         * Semantics: Activate a list of previously-installed ROM Patches.
+         * Request format:
+         *    A_UINT32      command (BMI_ROMPATCH_ACTIVATE)
+         *    A_UINT32      rompatch_count
+         *    A_UINT32      PatchID[rompatch_count]
+         *
+         * Response format: none
+         */
+
+#define BMI_ROMPATCH_DEACTIVATE            12
+        /*
+         * Semantics: Deactivate a list of active ROM Patches.
+         * Request format:
+         *    A_UINT32      command (BMI_ROMPATCH_DEACTIVATE)
+         *    A_UINT32      rompatch_count
+         *    A_UINT32      PatchID[rompatch_count]
+         *
+         * Response format: none
+         */
+
+
+#endif /* __BMI_MSG_H__ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/common_drv.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/common_drv.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/common_drv.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,61 @@
+/*
+ *
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+
+#ifndef COMMON_DRV_H_
+#define COMMON_DRV_H_
+
+#include "hif.h"
+#include "htc_packet.h"
+
+
+
+/* structure that is the state information for the default credit distribution callback
+ * drivers should instantiate (zero-init as well) this structure in their driver instance
+ * and pass it as a context to the HTC credit distribution functions */
+typedef struct _COMMON_CREDIT_STATE_INFO {
+    int TotalAvailableCredits;      /* total credits in the system at startup */
+    int CurrentFreeCredits;         /* credits available in the pool that have not been
+                                       given out to endpoints */
+    HTC_ENDPOINT_CREDIT_DIST *pLowestPriEpDist;  /* pointer to the lowest priority endpoint dist struct */
+} COMMON_CREDIT_STATE_INFO;
+
+
+/* HTC TX packet tagging definitions */
+#define AR6K_CONTROL_PKT_TAG    HTC_TX_PACKET_TAG_USER_DEFINED
+#define AR6K_DATA_PKT_TAG       (AR6K_CONTROL_PKT_TAG + 1)
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/* OS-independent APIs */
+A_STATUS ar6000_setup_credit_dist(HTC_HANDLE HTCHandle, COMMON_CREDIT_STATE_INFO *pCredInfo);
+A_STATUS ar6000_ReadRegDiag(HIF_DEVICE *hifDevice, A_UINT32 *address, A_UINT32 *data);
+A_STATUS ar6000_WriteRegDiag(HIF_DEVICE *hifDevice, A_UINT32 *address, A_UINT32 *data);
+A_STATUS ar6000_ReadDataDiag(HIF_DEVICE *hifDevice, A_UINT32 address,  A_UCHAR *data, A_UINT32 length);
+A_STATUS ar6000_reset_device(HIF_DEVICE *hifDevice, A_UINT32 TargetType);
+void ar6000_dump_target_assert_info(HIF_DEVICE *hifDevice, A_UINT32 TargetType);
+A_STATUS ar6000_reset_device_skipflash(HIF_DEVICE *hifDevice);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /*COMMON_DRV_H_*/

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/dbglog_api.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/dbglog_api.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/dbglog_api.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,46 @@
+#ifndef _DBGLOG_API_H_
+#define _DBGLOG_API_H_
+/*
+ * Copyright (c) 2004-2006 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ * This file contains host side debug primitives.
+ */
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+#include "dbglog.h"
+
+#define DBGLOG_HOST_LOG_BUFFER_SIZE            DBGLOG_LOG_BUFFER_SIZE
+
+#define DBGLOG_GET_DBGID(arg) \
+    ((arg & DBGLOG_DBGID_MASK) >> DBGLOG_DBGID_OFFSET)
+
+#define DBGLOG_GET_MODULEID(arg) \
+    ((arg & DBGLOG_MODULEID_MASK) >> DBGLOG_MODULEID_OFFSET)
+
+#define DBGLOG_GET_NUMARGS(arg) \
+    ((arg & DBGLOG_NUM_ARGS_MASK) >> DBGLOG_NUM_ARGS_OFFSET)
+
+#define DBGLOG_GET_TIMESTAMP(arg) \
+    ((arg & DBGLOG_TIMESTAMP_MASK) >> DBGLOG_TIMESTAMP_OFFSET)
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _DBGLOG_API_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/dl_list.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/dl_list.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/dl_list.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,114 @@
+/*
+ * 
+ * Double-link list definitions (adapted from Atheros SDIO stack)
+ * 
+ * Copyright (c) 2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+#ifndef __DL_LIST_H___
+#define __DL_LIST_H___
+
+#define A_CONTAINING_STRUCT(address, struct_type, field_name)\
+            ((struct_type *)((A_UINT32)(address) - (A_UINT32)(&((struct_type *)0)->field_name)))
+
+/* list functions */
+/* pointers for the list */
+typedef struct _DL_LIST {
+    struct _DL_LIST *pPrev;
+    struct _DL_LIST *pNext;
+}DL_LIST, *PDL_LIST;
+/*
+ * DL_LIST_INIT , initialize doubly linked list
+*/
+#define DL_LIST_INIT(pList)\
+    {(pList)->pPrev = pList; (pList)->pNext = pList;}
+
+#define DL_LIST_IS_EMPTY(pList) (((pList)->pPrev == (pList)) && ((pList)->pNext == (pList)))
+#define DL_LIST_GET_ITEM_AT_HEAD(pList) (pList)->pNext   
+#define DL_LIST_GET_ITEM_AT_TAIL(pList) (pList)->pPrev 
+/*
+ * ITERATE_OVER_LIST pStart is the list, pTemp is a temp list member
+ * NOT: do not use this function if the items in the list are deleted inside the
+ * iteration loop
+*/
+#define ITERATE_OVER_LIST(pStart, pTemp) \
+    for((pTemp) =(pStart)->pNext; pTemp != (pStart); (pTemp) = (pTemp)->pNext)
+    
+
+/* safe iterate macro that allows the item to be removed from the list
+ * the iteration continues to the next item in the list
+ */
+#define ITERATE_OVER_LIST_ALLOW_REMOVE(pStart,pItem,st,offset)  \
+{                                                       \
+    PDL_LIST  pTemp;                                     \
+    pTemp = (pStart)->pNext;                            \
+    while (pTemp != (pStart)) {                         \
+        (pItem) = A_CONTAINING_STRUCT(pTemp,st,offset);   \
+         pTemp = pTemp->pNext;                          \
+         
+#define ITERATE_END }}
+ 
+/*
+ * DL_ListInsertTail - insert pAdd to the end of the list
+*/
+static INLINE PDL_LIST DL_ListInsertTail(PDL_LIST pList, PDL_LIST pAdd) {
+        /* insert at tail */ 
+    pAdd->pPrev = pList->pPrev;
+    pAdd->pNext = pList;
+    pList->pPrev->pNext = pAdd;
+    pList->pPrev = pAdd;
+    return pAdd;
+}
+    
+/*
+ * DL_ListInsertHead - insert pAdd into the head of the list
+*/
+static INLINE PDL_LIST DL_ListInsertHead(PDL_LIST pList, PDL_LIST pAdd) {
+        /* insert at head */ 
+    pAdd->pPrev = pList;
+    pAdd->pNext = pList->pNext;
+    pList->pNext->pPrev = pAdd;
+    pList->pNext = pAdd;
+    return pAdd;
+}
+
+#define DL_ListAdd(pList,pItem) DL_ListInsertHead((pList),(pItem))
+/*
+ * DL_ListRemove - remove pDel from list
+*/
+static INLINE PDL_LIST DL_ListRemove(PDL_LIST pDel) {
+    pDel->pNext->pPrev = pDel->pPrev;
+    pDel->pPrev->pNext = pDel->pNext;
+        /* point back to itself just to be safe, incase remove is called again */
+    pDel->pNext = pDel;
+    pDel->pPrev = pDel;
+    return pDel;
+}
+
+/*
+ * DL_ListRemoveItemFromHead - get a list item from the head
+*/
+static INLINE PDL_LIST DL_ListRemoveItemFromHead(PDL_LIST pList) {
+    PDL_LIST pItem = NULL;
+    if (pList->pNext != pList) {
+        pItem = pList->pNext;
+            /* remove the first item from head */
+        DL_ListRemove(pItem);    
+    }   
+    return pItem; 
+}
+
+#endif /* __DL_LIST_H___ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/dset_api.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/dset_api.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/dset_api.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,63 @@
+/* 
+ * Copyright (c) 2004-2006 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/include/dset_api.h#1 $
+ *
+ * Host-side DataSet API.
+ *
+ */
+
+#ifndef _DSET_API_H_
+#define _DSET_API_H_
+
+#ifdef __cplusplus
+extern "C" {
+#endif /* __cplusplus */
+
+/*
+ * Host-side DataSet support is optional, and is not
+ * currently required for correct operation.  To disable
+ * Host-side DataSet support, set this to 0.
+ */
+#ifndef CONFIG_HOST_DSET_SUPPORT
+#define CONFIG_HOST_DSET_SUPPORT 1
+#endif
+
+/* Called to send a DataSet Open Reply back to the Target. */
+A_STATUS wmi_dset_open_reply(struct wmi_t *wmip,
+                             A_UINT32 status,
+                             A_UINT32 access_cookie,
+                             A_UINT32 size,
+                             A_UINT32 version,
+                             A_UINT32 targ_handle,
+                             A_UINT32 targ_reply_fn,
+                             A_UINT32 targ_reply_arg);
+
+/* Called to send a DataSet Data Reply back to the Target. */
+A_STATUS wmi_dset_data_reply(struct wmi_t *wmip,
+                             A_UINT32 status,
+                             A_UINT8 *host_buf,
+                             A_UINT32 length,
+                             A_UINT32 targ_buf,
+                             A_UINT32 targ_reply_fn,
+                             A_UINT32 targ_reply_arg);
+
+#ifdef __cplusplus
+}
+#endif /* __cplusplus */
+
+
+#endif /* _DSET_API_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/gpio_api.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/gpio_api.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/gpio_api.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,57 @@
+#ifndef _GPIO_API_H_
+#define _GPIO_API_H_
+/*
+ * Copyright 2005 Atheros Communications, Inc.,  All Rights Reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+/*
+ * Host-side General Purpose I/O API.
+ *
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/include/gpio_api.h#1 $
+ */
+
+/*
+ * Send a command to the Target in order to change output on GPIO pins.
+ */
+A_STATUS wmi_gpio_output_set(struct wmi_t *wmip,
+                             A_UINT32 set_mask,
+                             A_UINT32 clear_mask,
+                             A_UINT32 enable_mask,
+                             A_UINT32 disable_mask);
+
+/*
+ * Send a command to the Target requesting input state of GPIO pins.
+ */
+A_STATUS wmi_gpio_input_get(struct wmi_t *wmip);
+
+/* 
+ * Send a command to the Target to change the value of a GPIO register.
+ */
+A_STATUS wmi_gpio_register_set(struct wmi_t *wmip,
+                               A_UINT32 gpioreg_id,
+                               A_UINT32 value);
+
+/*
+ * Send a command to the Target to fetch the value of a GPIO register.
+ */
+A_STATUS wmi_gpio_register_get(struct wmi_t *wmip, A_UINT32 gpioreg_id);
+
+/* 
+ * Send a command to the Target, acknowledging some GPIO interrupts.
+ */
+A_STATUS wmi_gpio_intr_ack(struct wmi_t *wmip, A_UINT32 ack_mask);
+
+#endif /* _GPIO_API_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/hif.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/hif.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/hif.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,291 @@
+/*
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ * 
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ * HIF specific declarations and prototypes
+ */
+
+#ifndef _HIF_H_
+#define _HIF_H_
+
+#ifdef __cplusplus
+extern "C" {
+#endif /* __cplusplus */
+
+/* Header files */
+#include "a_config.h"
+#include "athdefs.h"
+#include "a_types.h"
+#include "a_osapi.h"
+
+typedef struct htc_callbacks HTC_CALLBACKS;
+typedef struct hif_device HIF_DEVICE;
+
+/*
+ * direction - Direction of transfer (HIF_READ/HIF_WRITE).
+ */
+#define HIF_READ                    0x00000001
+#define HIF_WRITE                   0x00000002
+#define HIF_DIR_MASK                (HIF_READ | HIF_WRITE)
+
+/*
+ *     type - An interface may support different kind of read/write commands. 
+ *            The command type is divided into a basic and an extended command 
+ *            and can be specified using HIF_BASIC_IO/HIF_EXTENDED_IO.
+ */
+#define HIF_BASIC_IO                0x00000004
+#define HIF_EXTENDED_IO             0x00000008
+#define HIF_TYPE_MASK               (HIF_BASIC_IO | HIF_EXTENDED_IO)
+
+/*
+ *     emode - This indicates the whether the command is to be executed in a 
+ *             blocking or non-blocking fashion (HIF_SYNCHRONOUS/
+ *             HIF_ASYNCHRONOUS). The read/write data paths in HTC have been 
+ *             implemented using the asynchronous mode allowing the the bus 
+ *             driver to indicate the completion of operation through the 
+ *             registered callback routine. The requirement primarily comes 
+ *             from the contexts these operations get called from (a driver's 
+ *             transmit context or the ISR context in case of receive). 
+ *             Support for both of these modes is essential.
+ */
+#define HIF_SYNCHRONOUS             0x00000010
+#define HIF_ASYNCHRONOUS            0x00000020
+#define HIF_EMODE_MASK              (HIF_SYNCHRONOUS | HIF_ASYNCHRONOUS)
+
+/*
+ *     dmode - An interface may support different kinds of commands based on 
+ *             the tradeoff between the amount of data it can carry and the 
+ *             setup time. Byte and Block modes are supported (HIF_BYTE_BASIS/
+ *             HIF_BLOCK_BASIS). In case of latter, the data is rounded off 
+ *             to the nearest block size by padding. The size of the block is 
+ *             configurable at compile time using the HIF_BLOCK_SIZE and is 
+ *             negotiated with the target during initialization after the 
+ *             dragon interrupts are enabled.
+ */
+#define HIF_BYTE_BASIS              0x00000040
+#define HIF_BLOCK_BASIS             0x00000080
+#define HIF_DMODE_MASK              (HIF_BYTE_BASIS | HIF_BLOCK_BASIS)
+
+/*
+ *     amode - This indicates if the address has to be incremented on dragon 
+ *             after every read/write operation (HIF?FIXED_ADDRESS/
+ *             HIF_INCREMENTAL_ADDRESS).
+ */
+#define HIF_FIXED_ADDRESS           0x00000100
+#define HIF_INCREMENTAL_ADDRESS     0x00000200
+#define HIF_AMODE_MASK              (HIF_FIXED_ADDRESS | HIF_INCREMENTAL_ADDRESS)
+
+#define HIF_WR_ASYNC_BYTE_FIX   \
+    (HIF_WRITE | HIF_ASYNCHRONOUS | HIF_EXTENDED_IO | HIF_BYTE_BASIS | HIF_FIXED_ADDRESS)
+#define HIF_WR_ASYNC_BYTE_INC   \
+    (HIF_WRITE | HIF_ASYNCHRONOUS | HIF_EXTENDED_IO | HIF_BYTE_BASIS | HIF_INCREMENTAL_ADDRESS)
+#define HIF_WR_ASYNC_BLOCK_INC  \
+    (HIF_WRITE | HIF_ASYNCHRONOUS | HIF_EXTENDED_IO | HIF_BLOCK_BASIS | HIF_INCREMENTAL_ADDRESS)
+#define HIF_WR_SYNC_BYTE_FIX    \
+    (HIF_WRITE | HIF_SYNCHRONOUS | HIF_EXTENDED_IO | HIF_BYTE_BASIS | HIF_FIXED_ADDRESS)
+#define HIF_WR_SYNC_BYTE_INC    \
+    (HIF_WRITE | HIF_SYNCHRONOUS | HIF_EXTENDED_IO | HIF_BYTE_BASIS | HIF_INCREMENTAL_ADDRESS)
+#define HIF_WR_SYNC_BLOCK_INC  \
+    (HIF_WRITE | HIF_SYNCHRONOUS | HIF_EXTENDED_IO | HIF_BLOCK_BASIS | HIF_INCREMENTAL_ADDRESS)
+#define HIF_RD_SYNC_BYTE_INC    \
+    (HIF_READ | HIF_SYNCHRONOUS | HIF_EXTENDED_IO | HIF_BYTE_BASIS | HIF_INCREMENTAL_ADDRESS)
+#define HIF_RD_SYNC_BYTE_FIX    \
+    (HIF_READ | HIF_SYNCHRONOUS | HIF_EXTENDED_IO | HIF_BYTE_BASIS | HIF_FIXED_ADDRESS)
+#define HIF_RD_ASYNC_BYTE_FIX   \
+    (HIF_READ | HIF_ASYNCHRONOUS | HIF_EXTENDED_IO | HIF_BYTE_BASIS | HIF_FIXED_ADDRESS)
+#define HIF_RD_ASYNC_BLOCK_FIX  \
+    (HIF_READ | HIF_ASYNCHRONOUS | HIF_EXTENDED_IO | HIF_BLOCK_BASIS | HIF_FIXED_ADDRESS)
+#define HIF_RD_ASYNC_BYTE_INC   \
+    (HIF_READ | HIF_ASYNCHRONOUS | HIF_EXTENDED_IO | HIF_BYTE_BASIS | HIF_INCREMENTAL_ADDRESS)
+#define HIF_RD_ASYNC_BLOCK_INC  \
+    (HIF_READ | HIF_ASYNCHRONOUS | HIF_EXTENDED_IO | HIF_BLOCK_BASIS | HIF_INCREMENTAL_ADDRESS)
+#define HIF_RD_SYNC_BLOCK_INC  \
+    (HIF_READ | HIF_SYNCHRONOUS | HIF_EXTENDED_IO | HIF_BLOCK_BASIS | HIF_INCREMENTAL_ADDRESS)
+
+
+typedef enum {
+    HIF_DEVICE_POWER_STATE = 0,
+    HIF_DEVICE_GET_MBOX_BLOCK_SIZE,
+    HIF_DEVICE_GET_MBOX_ADDR,
+    HIF_DEVICE_GET_PENDING_EVENTS_FUNC,
+    HIF_DEVICE_GET_IRQ_PROC_MODE,
+    HIF_DEVICE_GET_RECV_EVENT_MASK_UNMASK_FUNC,
+} HIF_DEVICE_CONFIG_OPCODE;
+
+/*
+ * HIF CONFIGURE definitions:
+ * 
+ *   HIF_DEVICE_GET_MBOX_BLOCK_SIZE
+ *   input : none
+ *   output : array of 4 A_UINT32s
+ *   notes: block size is returned for each mailbox (4)
+ * 
+ *   HIF_DEVICE_GET_MBOX_ADDR
+ *   input : none
+ *   output : array of 4 A_UINT32
+ *   notes: address is returned for each mailbox (4) in the array
+ * 
+ *   HIF_DEVICE_GET_PENDING_EVENTS_FUNC
+ *   input : none
+ *   output: HIF_PENDING_EVENTS_FUNC function pointer
+ *   notes: this is optional for the HIF layer, if the request is
+ *          not handled then it indicates that the upper layer can use
+ *          the standard device methods to get pending events (IRQs, mailbox messages etc..)
+ *          otherwise it can call the function pointer to check pending events.
+ * 
+ *   HIF_DEVICE_GET_IRQ_PROC_MODE
+ *   input : none
+ *   output : HIF_DEVICE_IRQ_PROCESSING_MODE (interrupt processing mode)
+ *   note: the hif layer interfaces with the underlying OS-specific bus driver. The HIF
+ *         layer can report whether IRQ processing is requires synchronous behavior or
+ *         can be processed using asynchronous bus requests (typically faster).
+ * 
+ *   HIF_DEVICE_GET_RECV_EVENT_MASK_UNMASK_FUNC
+ *   input : 
+ *   output : HIF_MASK_UNMASK_RECV_EVENT function pointer
+ *   notes: this is optional for the HIF layer.  The HIF layer may require a special mechanism
+ *          to mask receive message events.  The upper layer can call this pointer when it needs
+ *          to mask/unmask receive events (in case it runs out of buffers).
+ * 
+ *  
+ */ 
+
+typedef enum {
+    HIF_DEVICE_IRQ_SYNC_ONLY,   /* for HIF implementations that require the DSR to process all
+                                   interrupts before returning */
+    HIF_DEVICE_IRQ_ASYNC_SYNC,  /* for HIF implementations that allow DSR to process interrupts
+                                   using ASYNC I/O (that is HIFAckInterrupt can be called at a 
+                                   later time */
+} HIF_DEVICE_IRQ_PROCESSING_MODE;
+
+#define HIF_MAX_DEVICES                 1
+
+struct htc_callbacks {
+    A_UCHAR *name;
+    A_UINT32 id;
+    A_STATUS (* deviceInsertedHandler)(void *hif_handle);
+    A_STATUS (* deviceRemovedHandler)(void *htc_handle, A_STATUS status);
+    A_STATUS (* deviceSuspendHandler)(void *htc_handle);
+    A_STATUS (* deviceResumeHandler)(void *htc_handle);
+    A_STATUS (* deviceWakeupHandler)(void *htc_handle);
+    A_STATUS (* rwCompletionHandler)(void *context, A_STATUS status);
+    A_STATUS (* dsrHandler)(void *htc_handle);
+};
+
+
+#define HIF_OTHER_EVENTS     (1 << 0)   /* other interrupts (non-Recv) are pending, host
+                                           needs to read the register table to figure out what */      
+#define HIF_RECV_MSG_AVAIL   (1 << 1)   /* pending recv packet */
+
+typedef struct _HIF_PENDING_EVENTS_INFO {
+    A_UINT32 Events;
+    A_UINT32 LookAhead;  
+} HIF_PENDING_EVENTS_INFO;
+
+    /* function to get pending events , some HIF modules use special mechanisms
+     * to detect packet available and other interrupts */
+typedef A_STATUS ( *HIF_PENDING_EVENTS_FUNC)(HIF_DEVICE              *device, 
+                                             HIF_PENDING_EVENTS_INFO *pEvents,
+                                             void                    *AsyncContext);
+
+#define HIF_MASK_RECV    TRUE
+#define HIF_UNMASK_RECV  FALSE
+    /* function to mask recv events */
+typedef A_STATUS ( *HIF_MASK_UNMASK_RECV_EVENT)(HIF_DEVICE  *device,
+                                                A_BOOL      Mask,
+                                                void        *AsyncContext);
+                                          
+                                                                                                                                 
+/* 
+ * This API is used by the HTC layer to initialize the HIF layer and to
+ * register different callback routines. Support for following events has
+ * been captured - DSR, Read/Write completion, Device insertion/removal,
+ * Device suspension/resumption/wakeup. In addition to this, the API is
+ * also used to register the name and the revision of the chip. The latter
+ * can be used to verify the revision of the chip read from the device
+ * before reporting it to HTC.
+ */
+int HIFInit(HTC_CALLBACKS *callbacks);
+
+/*
+ * This API is used to provide the read/write interface over the specific bus
+ * interface.
+ * address - Starting address in the dragon's address space. For mailbox
+ *           writes, it refers to the start of the mbox boundary. It should
+ *           be ensured that the last byte falls on the mailbox's EOM. For 
+ *           mailbox reads, it refers to the end of the mbox boundary.
+ * buffer - Pointer to the buffer containg the data to be transmitted or
+ *          received.
+ * length - Amount of data to be transmitted or received.
+ * request - Characterizes the attributes of the command.
+ */
+A_STATUS 
+HIFReadWrite(HIF_DEVICE    *device, 
+             A_UINT32       address, 
+             A_UCHAR       *buffer, 
+             A_UINT32       length, 
+             A_UINT32       request, 
+             void          *context);
+
+/* 
+ * This can be initiated from the unload driver context ie when the HTCShutdown
+ * routine is called.
+ */
+void HIFShutDownDevice(HIF_DEVICE *device);
+
+/*
+ * This should translate to an acknowledgment to the bus driver indicating that
+ * the previous interrupt request has been serviced and the all the relevant
+ * sources have been cleared. HTC is ready to process more interrupts.
+ * This should prevent the bus driver from raising an interrupt unless the
+ * previous one has been serviced and acknowledged using the previous API.
+ */
+void HIFAckInterrupt(HIF_DEVICE *device);
+
+void HIFMaskInterrupt(HIF_DEVICE *device);
+
+void HIFUnMaskInterrupt(HIF_DEVICE *device);
+
+/*
+ * This set of functions are to be used by the bus driver to notify
+ * the HIF module about various events.
+ * These are not implemented if the bus driver provides an alternative
+ * way for this notification though callbacks for instance.
+ */
+int HIFInsertEventNotify(void);
+
+int HIFRemoveEventNotify(void);
+
+int HIFIRQEventNotify(void);
+
+int HIFRWCompleteEventNotify(void);
+
+/*
+ * This function associates a opaque handle with the HIF layer
+ * to be used in communication with upper layer i.e. HTC.
+ * This would normaly be a pointer to htc_target data structure.
+ */
+void HIFSetHandle(void *hif_handle, void *handle);
+
+A_STATUS
+HIFConfigureDevice(HIF_DEVICE *device, HIF_DEVICE_CONFIG_OPCODE opcode, 
+                   void *config, A_UINT32 configLen);
+                   
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _HIF_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/host_version.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/host_version.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/host_version.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,49 @@
+#ifndef _HOST_VERSION_H_
+#define _HOST_VERSION_H_
+/*
+ * Copyright (c) 2004-2005 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * This file contains version information for the sample host driver for the
+ * AR6000 chip
+ *
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/include/host_version.h#2 $
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#ifdef __cplusplus
+extern "C" {
+#endif   
+
+#include <AR6001/AR6K_version.h>
+
+/*
+ * The version number is made up of major, minor, patch and build
+ * numbers. These are 16 bit numbers.  The build and release script will
+ * set the build number using a Perforce counter.  Here the build number is
+ * set to 9999 so that builds done without the build-release script are easily
+ * identifiable.
+ */
+
+#define ATH_SW_VER_MAJOR      __VER_MAJOR_
+#define ATH_SW_VER_MINOR      __VER_MINOR_
+#define ATH_SW_VER_PATCH      __VER_PATCH_
+#define ATH_SW_VER_BUILD 9999
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _HOST_VERSION_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/htc_api.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/htc_api.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/htc_api.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,436 @@
+/*
+ * 
+ * Copyright (c) 2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+
+#ifndef _HTC_API_H_
+#define _HTC_API_H_
+
+#include <htc.h>
+#include <htc_services.h>
+#include "htc_packet.h"
+
+#ifdef __cplusplus
+extern "C" {
+#endif /* __cplusplus */
+
+/* TODO.. for BMI */
+#define ENDPOINT1 0
+// TODO -remove me, but we have to fix BMI first
+#define HTC_MAILBOX_NUM_MAX    4
+
+
+/* ------ Endpoint IDS ------ */
+typedef enum
+{
+    ENDPOINT_UNUSED = -1,
+    ENDPOINT_0 = 0,
+    ENDPOINT_1 = 1,
+    ENDPOINT_2 = 2,
+    ENDPOINT_3,
+    ENDPOINT_4,
+    ENDPOINT_5,
+    ENDPOINT_6,
+    ENDPOINT_7,
+    ENDPOINT_8,
+    ENDPOINT_MAX,
+} HTC_ENDPOINT_ID;
+
+/* this is the amount of header room required by users of HTC */
+#define HTC_HEADER_LEN         HTC_HDR_LENGTH
+
+typedef void *HTC_HANDLE;
+
+typedef A_UINT16 HTC_SERVICE_ID;
+
+typedef struct _HTC_INIT_INFO {
+    void   (*AddInstance)(HTC_HANDLE);
+    void   (*DeleteInstance)(void *Instance);
+    void   (*TargetFailure)(void *Instance, A_STATUS Status);
+} HTC_INIT_INFO;
+
+/* per service connection send completion */
+typedef void   (*HTC_EP_SEND_PKT_COMPLETE)(void *,HTC_PACKET *);
+/* per service connection pkt received */
+typedef void   (*HTC_EP_RECV_PKT)(void *,HTC_PACKET *);
+
+/* Optional per service connection receive buffer re-fill callback, 
+ * On some OSes (like Linux) packets are allocated from a global pool and indicated up
+ * to the network stack.  The driver never gets the packets back from the OS.  For these OSes
+ * a refill callback can be used to allocate and re-queue buffers into HTC.
+ * 
+ * On other OSes, the network stack can call into the driver's OS-specifc "return_packet" handler and
+ * the driver can re-queue these buffers into HTC. In this regard a refill callback is 
+ * unnecessary */
+typedef void   (*HTC_EP_RECV_REFILL)(void *, HTC_ENDPOINT_ID Endpoint);
+
+/* Optional per service connection callback when a send queue is full. This can occur if the
+ * host continues queueing up TX packets faster than credits can arrive
+ * To prevent the host (on some Oses like Linux) from continuously queueing packets
+ * and consuming resources, this callback is provided so that that the host
+ * can disable TX in the subsystem (i.e. network stack) 
+ * Other OSes require a "per-packet" indication_RAW_STREAM_NUM_MAX for each completed TX packet, this
+ * closed loop mechanism will prevent the network stack from overunning the NIC */
+typedef void (*HTC_EP_SEND_QUEUE_FULL)(void *, HTC_ENDPOINT_ID Endpoint);
+
+typedef struct _HTC_EP_CALLBACKS {
+    void                     *pContext;     /* context for each callback */
+    HTC_EP_SEND_PKT_COMPLETE EpTxComplete;  /* tx completion callback for connected endpoint */
+    HTC_EP_RECV_PKT          EpRecv;        /* receive callback for connected endpoint */
+    HTC_EP_RECV_REFILL       EpRecvRefill;  /* OPTIONAL receive re-fill callback for connected endpoint */  
+    HTC_EP_SEND_QUEUE_FULL   EpSendFull;    /* OPTIONAL send full callback */   
+} HTC_EP_CALLBACKS;
+ 
+/* service connection information */
+typedef struct _HTC_SERVICE_CONNECT_REQ {
+    HTC_SERVICE_ID   ServiceID;                 /* service ID to connect to */
+    A_UINT16         ConnectionFlags;           /* connection flags, see htc protocol definition */
+    A_UINT8         *pMetaData;                 /* ptr to optional service-specific meta-data */
+    A_UINT8          MetaDataLength;            /* optional meta data length */
+    HTC_EP_CALLBACKS EpCallbacks;               /* endpoint callbacks */
+    int              MaxSendQueueDepth;         /* maximum depth of any send queue */ 
+} HTC_SERVICE_CONNECT_REQ;
+
+/* service connection response information */
+typedef struct _HTC_SERVICE_CONNECT_RESP {
+    A_UINT8     *pMetaData;             /* caller supplied buffer to optional meta-data */
+    A_UINT8     BufferLength;           /* length of caller supplied buffer */
+    A_UINT8     ActualLength;           /* actual length of meta data */
+    HTC_ENDPOINT_ID Endpoint;           /* endpoint to communicate over */
+    int         MaxMsgLength;           /* max length of all messages over this endpoint */
+    A_UINT8     ConnectRespCode;        /* connect response code from target */
+} HTC_SERVICE_CONNECT_RESP;
+
+/* endpoint distribution structure */
+typedef struct _HTC_ENDPOINT_CREDIT_DIST {
+    struct _HTC_ENDPOINT_CREDIT_DIST *pNext;
+    struct _HTC_ENDPOINT_CREDIT_DIST *pPrev;
+    HTC_SERVICE_ID      ServiceID;          /* Service ID (set by HTC) */
+    HTC_ENDPOINT_ID     Endpoint;           /* endpoint for this distribution struct (set by HTC) */
+    A_UINT32            DistFlags;          /* distribution flags, distribution function can
+                                               set default activity using SET_EP_ACTIVE() macro */
+    int                 TxCreditsNorm;      /* credits for normal operation, anything above this
+                                               indicates the endpoint is over-subscribed, this field
+                                               is only relevant to the credit distribution function */
+    int                 TxCreditsMin;       /* floor for credit distribution, this field is
+                                               only relevant to the credit distribution function */
+    int                 TxCreditsAssigned;  /* number of credits assigned to this EP, this field 
+                                               is only relevant to the credit dist function */
+    int                 TxCredits;          /* current credits available, this field is used by
+                                               HTC to determine whether a message can be sent or
+                                               must be queued */
+    int                 TxCreditsToDist;    /* pending credits to distribute on this endpoint, this
+                                               is set by HTC when credit reports arrive.
+                                               The credit distribution functions sets this to zero
+                                               when it distributes the credits */  
+    int                 TxCreditsSeek;      /* this is the number of credits that the current pending TX
+                                               packet needs to transmit.  This is set by HTC when
+                                               and endpoint needs credits in order to transmit */  
+    int                 TxCreditSize;       /* size in bytes of each credit (set by HTC) */
+    int                 TxCreditsPerMaxMsg; /* credits required for a maximum sized messages (set by HTC) */ 
+    void                *pHTCReserved;      /* reserved for HTC use */
+} HTC_ENDPOINT_CREDIT_DIST;
+
+#define HTC_EP_ACTIVE                            (1 << 31)
+
+/* macro to check if an endpoint has gone active, useful for credit
+ * distributions */
+#define IS_EP_ACTIVE(epDist)  ((epDist)->DistFlags & HTC_EP_ACTIVE)
+#define SET_EP_ACTIVE(epDist) (epDist)->DistFlags |= HTC_EP_ACTIVE
+
+    /* credit distibution code that is passed into the distrbution function,
+     * there are mandatory and optional codes that must be handled */
+typedef enum _HTC_CREDIT_DIST_REASON {
+    HTC_CREDIT_DIST_SEND_COMPLETE = 0,     /* credits available as a result of completed 
+                                              send operations (MANDATORY) resulting in credit reports */
+    HTC_CREDIT_DIST_ACTIVITY_CHANGE = 1,   /* a change in endpoint activity occured (OPTIONAL) */
+    HTC_CREDIT_DIST_SEEK_CREDITS,          /* an endpoint needs to "seek" credits (OPTIONAL) */ 
+    HTC_DUMP_CREDIT_STATE                  /* for debugging, dump any state information that is kept by
+                                              the distribution function */
+} HTC_CREDIT_DIST_REASON;
+
+typedef void (*HTC_CREDIT_DIST_CALLBACK)(void                     *Context, 
+                                         HTC_ENDPOINT_CREDIT_DIST *pEPList,
+                                         HTC_CREDIT_DIST_REASON   Reason);
+                                         
+typedef void (*HTC_CREDIT_INIT_CALLBACK)(void *Context,
+                                         HTC_ENDPOINT_CREDIT_DIST *pEPList, 
+                                         int                      TotalCredits);
+
+    /* endpoint statistics action */
+typedef enum _HTC_ENDPOINT_STAT_ACTION {
+    HTC_EP_STAT_SAMPLE = 0,                /* only read statistics */
+    HTC_EP_STAT_SAMPLE_AND_CLEAR = 1,      /* sample and immediately clear statistics */
+    HTC_EP_STAT_CLEAR                      /* clear only */
+} HTC_ENDPOINT_STAT_ACTION;
+ 
+    /* endpoint statistics */
+typedef struct _HTC_ENDPOINT_STATS {
+    A_UINT32  TxCreditLowIndications;  /* number of times the host set the credit-low flag in a send message on 
+                                        this endpoint */
+    A_UINT32  TxIssued;               /* running count of TX packets issued */
+    A_UINT32  TxCreditRpts;           /* running count of total credit reports received for this endpoint */
+    A_UINT32  TxCreditRptsFromRx;
+    A_UINT32  TxCreditRptsFromOther;
+    A_UINT32  TxCreditRptsFromEp0;
+    A_UINT32  TxCreditsFromRx;        /* count of credits received via Rx packets on this endpoint */
+    A_UINT32  TxCreditsFromOther;     /* count of credits received via another endpoint */
+    A_UINT32  TxCreditsFromEp0;       /* count of credits received via another endpoint */
+    A_UINT32  TxCreditsConsummed;     /* count of consummed credits */
+    A_UINT32  TxCreditsReturned;      /* count of credits returned */
+    A_UINT32  RxReceived;             /* count of RX packets received */
+    A_UINT32  RxLookAheads;           /* count of lookahead records
+                                         found in messages received on this endpoint */ 
+} HTC_ENDPOINT_STATS;
+
+/* ------ Function Prototypes ------ */
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @desc: Initialize HTC
+  @function name: HTCInit
+  @input:  pInfo - initialization information
+  @output: 
+  @return: A_OK on success
+  @notes: The caller initializes global HTC state and registers various instance
+          notification callbacks (see HTC_INIT_INFO).
+          
+  @example:                     
+  @see also: HTCShutdown
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+A_STATUS    HTCInit(HTC_INIT_INFO *pInfo);
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @desc: Get the underlying HIF device handle
+  @function name: HTCGetHifDevice
+  @input:  HTCHandle - handle passed into the AddInstance callback
+  @output: 
+  @return: opaque HIF device handle usable in HIF API calls.
+  @notes:           
+  @example:                     
+  @see also:
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+void       *HTCGetHifDevice(HTC_HANDLE HTCHandle);
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @desc: Set the associated instance for the HTC handle
+  @function name: HTCSetInstance
+  @input:  HTCHandle - handle passed into the AddInstance callback
+           Instance - caller supplied instance object
+  @output: 
+  @return: 
+  @notes:  Caller must set the instance information for the HTC handle in order to receive 
+           notifications for instance deletion (DeleteInstance callback is called) and for target
+           failure notification.       
+  @example:                     
+  @see also:
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+void        HTCSetInstance(HTC_HANDLE HTCHandle, void *Instance);
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @desc: Set credit distribution parameters
+  @function name: HTCSetCreditDistribution
+  @input:  HTCHandle - HTC handle
+           pCreditDistCont - caller supplied context to pass into distribution functions
+           CreditDistFunc - Distribution function callback
+           CreditDistInit - Credit Distribution initialization callback
+           ServicePriorityOrder - Array containing list of service IDs, lowest index is highest 
+                                  priority
+           ListLength - number of elements in ServicePriorityOrder
+  @output: 
+  @return: 
+  @notes:  The user can set a custom credit distribution function to handle special requirements
+           for each endpoint.  A default credit distribution routine can be used by setting
+           CreditInitFunc to NULL.  The default credit distribution is only provided for simple
+           "fair" credit distribution without regard to any prioritization.
+           
+  @example:                     
+  @see also:
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+void        HTCSetCreditDistribution(HTC_HANDLE               HTCHandle,
+                                     void                     *pCreditDistContext,
+                                     HTC_CREDIT_DIST_CALLBACK CreditDistFunc,
+                                     HTC_CREDIT_INIT_CALLBACK CreditInitFunc,
+                                     HTC_SERVICE_ID           ServicePriorityOrder[],
+                                     int                      ListLength);
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @desc: Wait for the target to indicate the HTC layer is ready
+  @function name: HTCWaitTarget
+  @input:  HTCHandle - HTC handle
+  @output: 
+  @return: 
+  @notes:  This API blocks until the target responds with an HTC ready message.
+           The caller should not connect services until the target has indicated it is 
+           ready.  
+  @example:                     
+  @see also: HTCConnectService
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+A_STATUS    HTCWaitTarget(HTC_HANDLE HTCHandle);      
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @desc: Start target service communications
+  @function name: HTCStart
+  @input:  HTCHandle - HTC handle
+  @output: 
+  @return: 
+  @notes: This API indicates to the target that the service connection phase is complete
+          and the target can freely start all connected services.  This API should only be
+          called AFTER all service connections have been made.  TCStart will issue a
+          SETUP_COMPLETE message to the target to indicate that all service connections 
+          have been made and the target can start communicating over the endpoints.
+  @example:                     
+  @see also: HTCConnectService
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/                                                                     
+A_STATUS    HTCStart(HTC_HANDLE HTCHandle);
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @desc: Add receive packet to HTC
+  @function name: HTCAddReceivePkt
+  @input:  HTCHandle - HTC handle
+           pPacket - HTC receive packet to add
+  @output: 
+  @return: A_OK on success
+  @notes:  user must supply HTC packets for capturing incomming HTC frames.  The caller
+           must initialize each HTC packet using the SET_HTC_PACKET_INFO_RX_REFILL()
+           macro.
+  @example:                     
+  @see also: 
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/  
+A_STATUS    HTCAddReceivePkt(HTC_HANDLE HTCHandle, HTC_PACKET *pPacket);
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @desc: Connect to an HTC service
+  @function name: HTCConnectService
+  @input:  HTCHandle - HTC handle
+           pReq - connection details
+  @output: pResp - connection response
+  @return: 
+  @notes:  Service connections must be performed before HTCStart.  User provides callback handlers
+           for various endpoint events.
+  @example:                     
+  @see also: HTCStart
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/  
+A_STATUS    HTCConnectService(HTC_HANDLE HTCHandle, 
+                              HTC_SERVICE_CONNECT_REQ  *pReq,
+                              HTC_SERVICE_CONNECT_RESP *pResp);                            
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @desc: Send an HTC packet
+  @function name: HTCSendPkt
+  @input:  HTCHandle - HTC handle
+           pPacket - packet to send
+  @output: 
+  @return: A_OK
+  @notes:  Caller must initialize packet using SET_HTC_PACKET_INFO_TX() macro.
+           This interface is fully asynchronous.  On error, HTC SendPkt will 
+           call the registered Endpoint callback to cleanup the packet.
+  @example:                     
+  @see also: HTCFlushEndpoint
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/                               
+A_STATUS    HTCSendPkt(HTC_HANDLE HTCHandle, HTC_PACKET *pPacket);
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @desc: Stop HTC service communications
+  @function name: HTCStop
+  @input:  HTCHandle - HTC handle
+  @output: 
+  @return: 
+  @notes: HTC communications is halted.  All receive and pending TX packets will
+          be flushed.
+  @example:                     
+  @see also:
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+void        HTCStop(HTC_HANDLE HTCHandle);
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @desc: Shutdown HTC
+  @function name: HTCShutdown
+  @input: 
+  @output: 
+  @return: 
+  @notes:  This cleans up all resources allocated by HTCInit().
+  @example:                     
+  @see also: HTCInit
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+void        HTCShutDown(void);
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @desc: Flush pending TX packets 
+  @function name: HTCFlushEndpoint
+  @input:  HTCHandle - HTC handle
+           Endpoint - Endpoint to flush
+           Tag - flush tag
+  @output: 
+  @return: 
+  @notes:  The Tag parameter is used to selectively flush packets with matching tags.
+           The value of 0 forces all packets to be flush regardless of tag.
+  @example:                     
+  @see also: HTCSendPkt
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+void        HTCFlushEndpoint(HTC_HANDLE HTCHandle, HTC_ENDPOINT_ID Endpoint, HTC_TX_TAG Tag);
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @desc: Dump credit distribution state
+  @function name: HTCDumpCreditStates
+  @input:  HTCHandle - HTC handle
+  @output: 
+  @return: 
+  @notes:  This dumps all credit distribution information to the debugger
+  @example:                     
+  @see also:
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+void        HTCDumpCreditStates(HTC_HANDLE HTCHandle);
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @desc: Indicate a traffic activity change on an endpoint
+  @function name: HTCIndicateActivityChange
+  @input:  HTCHandle - HTC handle
+           Endpoint - endpoint in which activity has changed
+           Active - TRUE if active, FALSE if it has become inactive
+  @output: 
+  @return: 
+  @notes:  This triggers the registered credit distribution function to 
+           re-adjust credits for active/inactive endpoints.
+  @example:                     
+  @see also:
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+void        HTCIndicateActivityChange(HTC_HANDLE      HTCHandle, 
+                                      HTC_ENDPOINT_ID Endpoint,
+                                      A_BOOL          Active);
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @desc: Get endpoint statistics
+  @function name: HTCGetEndpointStatistics
+  @input:  HTCHandle - HTC handle
+           Endpoint - Endpoint identifier
+           Action - action to take with statistics
+  @output: 
+           pStats - statistics that were sampled (can be NULL if Action is HTC_EP_STAT_CLEAR)
+           
+  @return: TRUE if statistics profiling is enabled, otherwise FALSE.
+  
+  @notes:  Statistics is a compile-time option and this function may return FALSE
+           if HTC is not compiled with profiling.
+           
+           The caller can specify the statistic "action" to take when sampling
+           the statistics.  This includes: 
+           
+           HTC_EP_STAT_SAMPLE: The pStats structure is filled with the current values.
+           HTC_EP_STAT_SAMPLE_AND_CLEAR: The structure is filled and the current statistics
+                             are cleared.
+           HTC_EP_STAT_CLEA : the statistics are cleared, the called can pass a NULL value for
+                   pStats
+           
+  @example:                     
+  @see also:
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+A_BOOL       HTCGetEndpointStatistics(HTC_HANDLE               HTCHandle, 
+                                      HTC_ENDPOINT_ID          Endpoint,
+                                      HTC_ENDPOINT_STAT_ACTION Action,
+                                      HTC_ENDPOINT_STATS       *pStats);
+                                         
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _HTC_API_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/htc_packet.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/htc_packet.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/htc_packet.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,138 @@
+/*
+ *
+ * Copyright (c) 2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#ifndef HTC_PACKET_H_
+#define HTC_PACKET_H_
+
+
+#include "dl_list.h"
+
+struct _HTC_PACKET;
+
+typedef void (* HTC_PACKET_COMPLETION)(void *,struct _HTC_PACKET *);
+
+typedef A_UINT16 HTC_TX_TAG;
+
+typedef struct _HTC_TX_PACKET_INFO {
+    HTC_TX_TAG    Tag;            /* tag used to selective flush packets */
+} HTC_TX_PACKET_INFO;
+
+#define HTC_TX_PACKET_TAG_ALL          0    /* a tag of zero is reserved and used to flush ALL packets */
+#define HTC_TX_PACKET_TAG_INTERNAL     1                                /* internal tags start here */
+#define HTC_TX_PACKET_TAG_USER_DEFINED (HTC_TX_PACKET_TAG_INTERNAL + 9) /* user-defined tags start here */
+
+typedef struct _HTC_RX_PACKET_INFO {
+    A_UINT32    Unused;          /* for future use and to make compilers happy */
+} HTC_RX_PACKET_INFO;
+
+/* wrapper around endpoint-specific packets */
+typedef struct _HTC_PACKET {
+    DL_LIST         ListLink;       /* double link */
+    void            *pPktContext;   /* caller's per packet specific context */
+
+    A_UINT8         *pBufferStart;  /* the true buffer start , the caller can
+                                       store the real buffer start here.  In
+                                       receive callbacks, the HTC layer sets pBuffer
+                                       to the start of the payload past the header. This
+                                       field allows the caller to reset pBuffer when it
+                                       recycles receive packets back to HTC */
+    /*
+     * Pointer to the start of the buffer. In the transmit
+     * direction this points to the start of the payload. In the
+     * receive direction, however, the buffer when queued up
+     * points to the start of the HTC header but when returned
+     * to the caller points to the start of the payload
+     */
+    A_UINT8         *pBuffer;       /* payload start (RX/TX) */
+    A_UINT32        BufferLength;   /* length of buffer */
+    A_UINT32        ActualLength;   /* actual length of payload */
+    int             Endpoint;       /* endpoint that this packet was sent/recv'd from */
+    A_STATUS        Status;         /* completion status */
+    union {
+        HTC_TX_PACKET_INFO  AsTx;   /* Tx Packet specific info */       
+        HTC_RX_PACKET_INFO  AsRx;   /* Rx Packet specific info */
+    } PktInfo;
+
+    /* the following fields are for internal HTC use */
+    HTC_PACKET_COMPLETION Completion;   /* completion */
+    void                  *pContext;    /* HTC private completion context */
+    A_UINT32              HTCReserved;  /* reserved */
+} HTC_PACKET;
+
+
+
+#define COMPLETE_HTC_PACKET(p,status)        \
+{                                            \
+    (p)->Status = (status);                  \
+    (p)->Completion((p)->pContext,(p));      \
+}
+
+#define INIT_HTC_PACKET_INFO(p,b,len)             \
+{                                                 \
+    (p)->pBufferStart = (b);                      \
+    (p)->BufferLength = (len);                    \
+}
+
+/* macro to set an initial RX packet for refilling HTC */
+#define SET_HTC_PACKET_INFO_RX_REFILL(p,c,b,len,ep) \
+{                                                 \
+    (p)->pPktContext = (c);                       \
+    (p)->pBuffer = (b);                           \
+    (p)->pBufferStart = (b);                      \
+    (p)->BufferLength = (len);                    \
+    (p)->Endpoint = (ep);                         \
+}
+
+/* fast macro to recycle an RX packet that will be re-queued to HTC */
+#define HTC_PACKET_RESET_RX(p)              \
+    (p)->pBuffer = (p)->pBufferStart
+
+/* macro to set packet parameters for TX */
+#define SET_HTC_PACKET_INFO_TX(p,c,b,len,ep,tag)  \
+{                                                 \
+    (p)->pPktContext = (c);                       \
+    (p)->pBuffer = (b);                           \
+    (p)->ActualLength = (len);                    \
+    (p)->Endpoint = (ep);                         \
+    (p)->PktInfo.AsTx.Tag = (tag);                \
+}
+
+/* HTC Packet Queueing Macros */
+typedef DL_LIST HTC_PACKET_QUEUE;
+/* initialize queue */
+#define INIT_HTC_PACKET_QUEUE(pQ) DL_LIST_INIT((pQ))
+/* enqueue HTC packet to the tail of the queue */
+#define HTC_PACKET_ENQUEUE(pQ,p)  DL_ListInsertTail((pQ),&(p)->ListLink)
+/* test if a queue is empty */
+#define HTC_QUEUE_EMPTY(pQ)       DL_LIST_IS_EMPTY((pQ))
+/* get packet at head without removing it */
+#define HTC_GET_PKT_AT_HEAD(pQ)   A_CONTAINING_STRUCT((DL_LIST_GET_ITEM_AT_HEAD(pQ)),HTC_PACKET,ListLink);
+/* remove a packet from the current list it is linked to */
+#define HTC_PACKET_REMOVE(p)      DL_ListRemove(&(p)->ListLink)
+  
+/* dequeue an HTC packet from the head of the queue */
+static INLINE HTC_PACKET *HTC_PACKET_DEQUEUE(HTC_PACKET_QUEUE *queue) {
+    DL_LIST    *pItem = DL_ListRemoveItemFromHead(queue);
+    if (pItem != NULL) {
+        return A_CONTAINING_STRUCT(pItem, HTC_PACKET, ListLink);
+    }
+    return NULL;
+}
+
+#endif /*HTC_PACKET_H_*/

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/wlan_api.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/wlan_api.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/wlan_api.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,101 @@
+#ifndef _HOST_WLAN_API_H_
+#define _HOST_WLAN_API_H_
+/*
+ * Copyright (c) 2004-2005 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * This file contains the API for the host wlan module
+ *
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/include/wlan_api.h#1 $
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+struct ieee80211_node_table;
+struct ieee80211_frame;
+
+struct ieee80211_common_ie {
+    A_UINT16    ie_chan;
+    A_UINT8     *ie_tstamp;
+    A_UINT8     *ie_ssid;
+    A_UINT8     *ie_rates;
+    A_UINT8     *ie_xrates;
+    A_UINT8     *ie_country;
+    A_UINT8     *ie_wpa;
+    A_UINT8     *ie_rsn;
+    A_UINT8     *ie_wmm;
+    A_UINT8     *ie_ath;
+    A_UINT16    ie_capInfo;
+    A_UINT16    ie_beaconInt;
+    A_UINT8     *ie_tim;
+    A_UINT8     *ie_chswitch;
+    A_UINT8     ie_erp;
+    A_UINT8     *ie_wsc;
+};
+
+typedef struct bss {
+    A_UINT8                      ni_macaddr[6];
+    A_UINT8                      ni_snr;
+    A_INT16                      ni_rssi;
+    struct bss                   *ni_list_next;
+    struct bss                   *ni_list_prev;
+    struct bss                   *ni_hash_next;
+    struct bss                   *ni_hash_prev;
+    struct ieee80211_common_ie   ni_cie;
+    A_UINT8                     *ni_buf;
+    struct ieee80211_node_table *ni_table;
+    A_UINT32                     ni_refcnt;
+    int                          ni_scangen;
+    A_UINT32                     ni_tstamp;
+} bss_t;
+
+typedef void wlan_node_iter_func(void *arg, bss_t *);
+
+bss_t *wlan_node_alloc(struct ieee80211_node_table *nt, int wh_size);
+void wlan_node_free(bss_t *ni);
+void wlan_setup_node(struct ieee80211_node_table *nt, bss_t *ni,
+                const A_UINT8 *macaddr);
+bss_t *wlan_find_node(struct ieee80211_node_table *nt, const A_UINT8 *macaddr);
+void wlan_node_reclaim(struct ieee80211_node_table *nt, bss_t *ni);
+void wlan_free_allnodes(struct ieee80211_node_table *nt);
+void wlan_iterate_nodes(struct ieee80211_node_table *nt, wlan_node_iter_func *f,
+                        void *arg);
+
+void wlan_node_table_init(void *wmip, struct ieee80211_node_table *nt);
+void wlan_node_table_reset(struct ieee80211_node_table *nt);
+void wlan_node_table_cleanup(struct ieee80211_node_table *nt);
+
+A_STATUS wlan_parse_beacon(A_UINT8 *buf, int framelen,
+                           struct ieee80211_common_ie *cie);
+
+A_UINT16 wlan_ieee2freq(int chan);
+A_UINT32 wlan_freq2ieee(A_UINT16 freq);
+
+
+bss_t *
+wlan_find_Ssidnode (struct ieee80211_node_table *nt, A_UCHAR *pSsid,
+					A_UINT32 ssidLength, A_BOOL bIsWPA2);
+
+void
+wlan_node_return (struct ieee80211_node_table *nt, bss_t *ni);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _HOST_WLAN_API_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/include/wmi_api.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/include/wmi_api.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/include/wmi_api.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,259 @@
+#ifndef _WMI_API_H_
+#define _WMI_API_H_
+/*
+ * Copyright (c) 2004-2006 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * This file contains the definitions for the Wireless Module Interface (WMI).
+ *
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/include/wmi_api.h#2 $
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/*
+ * IP QoS Field definitions according to 802.1p
+ */
+#define BEST_EFFORT_PRI         0
+#define BACKGROUND_PRI          1
+#define EXCELLENT_EFFORT_PRI    3
+#define CONTROLLED_LOAD_PRI     4
+#define VIDEO_PRI               5
+#define VOICE_PRI               6
+#define NETWORK_CONTROL_PRI     7
+#define MAX_NUM_PRI             8
+
+#define UNDEFINED_PRI           (0xff)
+
+/* simple mapping of IP TOS field to a WMI priority stream
+ * this mapping was taken from the original linux driver implementation
+ * The operation maps the following
+ *
+ *  */
+#define IP_TOS_TO_WMI_PRI(tos)  \
+    ((WMI_PRI_STREAM_ID)(((tos) >> 1) & 0x03))
+
+#define WMI_IMPLICIT_PSTREAM_INACTIVITY_INT 5000 /* 5 seconds */
+
+
+struct wmi_t;
+
+void *wmi_init(void *devt);
+
+void wmi_qos_state_init(struct wmi_t *wmip);
+void wmi_shutdown(struct wmi_t *wmip);
+A_UINT16  wmi_get_mapped_qos_queue(struct wmi_t *, A_UINT8);
+A_STATUS wmi_dix_2_dot3(struct wmi_t *wmip, void *osbuf);
+A_STATUS wmi_data_hdr_add(struct wmi_t *wmip, void *osbuf, A_UINT8 msgType);
+A_STATUS wmi_dot3_2_dix(struct wmi_t *wmip, void *osbuf);
+A_STATUS wmi_data_hdr_remove(struct wmi_t *wmip, void *osbuf);
+A_STATUS wmi_syncpoint(struct wmi_t *wmip);
+A_STATUS wmi_syncpoint_reset(struct wmi_t *wmip);
+WMI_PRI_STREAM_ID wmi_get_stream_id(struct wmi_t *wmip, A_UINT8 trafficClass);
+A_UINT8 wmi_implicit_create_pstream(struct wmi_t *wmip, void *osbuf, A_UINT8 dir, A_UINT8 up);
+
+A_STATUS wmi_control_rx(struct wmi_t *wmip, void *osbuf);
+void wmi_iterate_nodes(struct wmi_t *wmip, wlan_node_iter_func *f, void *arg);
+void wmi_free_allnodes(struct wmi_t *wmip);
+bss_t *wmi_find_node(struct wmi_t *wmip, const A_UINT8 *macaddr);
+
+
+typedef enum {
+    NO_SYNC_WMIFLAG = 0,
+    SYNC_BEFORE_WMIFLAG,            /* transmit all queued data before cmd */
+    SYNC_AFTER_WMIFLAG,             /* any new data waits until cmd execs */
+    SYNC_BOTH_WMIFLAG,
+    END_WMIFLAG                     /* end marker */
+} WMI_SYNC_FLAG;
+
+A_STATUS wmi_cmd_send(struct wmi_t *wmip, void *osbuf, WMI_COMMAND_ID cmdId,
+                      WMI_SYNC_FLAG flag);
+A_STATUS wmi_connect_cmd(struct wmi_t *wmip,
+                         NETWORK_TYPE netType,
+                         DOT11_AUTH_MODE dot11AuthMode,
+                         AUTH_MODE authMode,
+                         CRYPTO_TYPE pairwiseCrypto,
+                         A_UINT8 pairwiseCryptoLen,
+                         CRYPTO_TYPE groupCrypto,
+                         A_UINT8 groupCryptoLen,
+                         int ssidLength,
+                         A_UCHAR *ssid,
+                         A_UINT8 *bssid,
+                         A_UINT16 channel,
+                         A_UINT32 ctrl_flags);
+A_STATUS wmi_reconnect_cmd(struct wmi_t *wmip,
+                           A_UINT8 *bssid,
+                           A_UINT16 channel);
+A_STATUS wmi_disconnect_cmd(struct wmi_t *wmip);
+A_STATUS wmi_getrev_cmd(struct wmi_t *wmip);
+A_STATUS wmi_startscan_cmd(struct wmi_t *wmip, WMI_SCAN_TYPE scanType,
+                           A_BOOL forceFgScan, A_BOOL isLegacy,
+                           A_UINT32 homeDwellTime, A_UINT32 forceScanInterval);
+A_STATUS wmi_scanparams_cmd(struct wmi_t *wmip, A_UINT16 fg_start_sec,
+                            A_UINT16 fg_end_sec, A_UINT16 bg_sec,
+                            A_UINT16 minact_chdw_msec,
+                            A_UINT16 maxact_chdw_msec, A_UINT16 pas_chdw_msec,
+                            A_UINT8 shScanRatio, A_UINT8 scanCtrlFlags, 
+                            A_UINT32 max_dfsch_act_time);
+A_STATUS wmi_bssfilter_cmd(struct wmi_t *wmip, A_UINT8 filter, A_UINT32 ieMask);
+A_STATUS wmi_probedSsid_cmd(struct wmi_t *wmip, A_UINT8 index, A_UINT8 flag,
+                            A_UINT8 ssidLength, A_UCHAR *ssid);
+A_STATUS wmi_listeninterval_cmd(struct wmi_t *wmip, A_UINT16 listenInterval, A_UINT16 listenBeacons);
+A_STATUS wmi_bmisstime_cmd(struct wmi_t *wmip, A_UINT16 bmisstime, A_UINT16 bmissbeacons);
+A_STATUS wmi_associnfo_cmd(struct wmi_t *wmip, A_UINT8 ieType,
+                           A_UINT8 ieLen, A_UINT8 *ieInfo);
+A_STATUS wmi_powermode_cmd(struct wmi_t *wmip, A_UINT8 powerMode);
+A_STATUS wmi_ibsspmcaps_cmd(struct wmi_t *wmip, A_UINT8 pmEnable, A_UINT8 ttl,
+                            A_UINT16 atim_windows, A_UINT16 timeout_value);
+A_STATUS wmi_pmparams_cmd(struct wmi_t *wmip, A_UINT16 idlePeriod,
+                           A_UINT16 psPollNum, A_UINT16 dtimPolicy);
+A_STATUS wmi_disctimeout_cmd(struct wmi_t *wmip, A_UINT8 timeout);
+A_STATUS wmi_sync_cmd(struct wmi_t *wmip, A_UINT8 syncNumber);
+A_STATUS wmi_create_pstream_cmd(struct wmi_t *wmip, WMI_CREATE_PSTREAM_CMD *pstream);
+A_STATUS wmi_delete_pstream_cmd(struct wmi_t *wmip, A_UINT8 trafficClass, A_UINT8 streamID);
+A_STATUS wmi_set_bitrate_cmd(struct wmi_t *wmip, A_INT32 rate);
+A_STATUS wmi_get_bitrate_cmd(struct wmi_t *wmip);
+A_INT8   wmi_validate_bitrate(struct wmi_t *wmip, A_INT32 rate);
+A_STATUS wmi_get_regDomain_cmd(struct wmi_t *wmip);
+A_STATUS wmi_get_channelList_cmd(struct wmi_t *wmip);
+A_STATUS wmi_set_channelParams_cmd(struct wmi_t *wmip, A_UINT8 scanParam,
+                                   WMI_PHY_MODE mode, A_INT8 numChan,
+                                   A_UINT16 *channelList);
+
+A_STATUS wmi_set_snr_threshold_params(struct wmi_t *wmip,
+                                       WMI_SNR_THRESHOLD_PARAMS_CMD *snrCmd);
+A_STATUS wmi_set_rssi_threshold_params(struct wmi_t *wmip,
+                                        WMI_RSSI_THRESHOLD_PARAMS_CMD *rssiCmd);
+A_STATUS wmi_clr_rssi_snr(struct wmi_t *wmip);
+A_STATUS wmi_set_lq_threshold_params(struct wmi_t *wmip,
+                                      WMI_LQ_THRESHOLD_PARAMS_CMD *lqCmd);
+A_STATUS wmi_set_rts_cmd(struct wmi_t *wmip, A_UINT16 threshold);
+A_STATUS wmi_set_lpreamble_cmd(struct wmi_t *wmip, A_UINT8 status);
+
+A_STATUS wmi_set_error_report_bitmask(struct wmi_t *wmip, A_UINT32 bitmask);
+
+A_STATUS wmi_get_challenge_resp_cmd(struct wmi_t *wmip, A_UINT32 cookie,
+                                    A_UINT32 source);
+A_STATUS wmi_config_debug_module_cmd(struct wmi_t *wmip, A_UINT16 mmask,
+                                     A_UINT16 tsr, A_BOOL rep, A_UINT16 size,
+                                     A_UINT32 valid);
+A_STATUS wmi_get_stats_cmd(struct wmi_t *wmip);
+A_STATUS wmi_addKey_cmd(struct wmi_t *wmip, A_UINT8 keyIndex,
+                        CRYPTO_TYPE keyType, A_UINT8 keyUsage,
+                        A_UINT8 keyLength,A_UINT8 *keyRSC,
+                        A_UINT8 *keyMaterial, A_UINT8 key_op_ctrl,
+                        WMI_SYNC_FLAG sync_flag);
+A_STATUS wmi_add_krk_cmd(struct wmi_t *wmip, A_UINT8 *krk);
+A_STATUS wmi_delete_krk_cmd(struct wmi_t *wmip);
+A_STATUS wmi_deleteKey_cmd(struct wmi_t *wmip, A_UINT8 keyIndex);
+A_STATUS wmi_set_akmp_params_cmd(struct wmi_t *wmip, 
+                                 WMI_SET_AKMP_PARAMS_CMD *akmpParams);
+A_STATUS wmi_get_pmkid_list_cmd(struct wmi_t *wmip);
+A_STATUS wmi_set_pmkid_list_cmd(struct wmi_t *wmip, 
+                                WMI_SET_PMKID_LIST_CMD *pmkInfo);
+A_STATUS wmi_set_txPwr_cmd(struct wmi_t *wmip, A_UINT8 dbM);
+A_STATUS wmi_get_txPwr_cmd(struct wmi_t *wmip);
+A_STATUS wmi_addBadAp_cmd(struct wmi_t *wmip, A_UINT8 apIndex, A_UINT8 *bssid);
+A_STATUS wmi_deleteBadAp_cmd(struct wmi_t *wmip, A_UINT8 apIndex);
+A_STATUS wmi_set_tkip_countermeasures_cmd(struct wmi_t *wmip, A_BOOL en);
+A_STATUS wmi_setPmkid_cmd(struct wmi_t *wmip, A_UINT8 *bssid, A_UINT8 *pmkId,
+                          A_BOOL set);
+A_STATUS wmi_set_access_params_cmd(struct wmi_t *wmip, A_UINT16 txop,
+                                   A_UINT8 eCWmin, A_UINT8 eCWmax,
+                                   A_UINT8 aifsn);
+A_STATUS wmi_set_retry_limits_cmd(struct wmi_t *wmip, A_UINT8 frameType,
+                                  A_UINT8 trafficClass, A_UINT8 maxRetries,
+                                  A_UINT8 enableNotify);
+
+void wmi_get_current_bssid(struct wmi_t *wmip, A_UINT8 *bssid);
+
+A_STATUS wmi_get_roam_tbl_cmd(struct wmi_t *wmip);
+A_STATUS wmi_get_roam_data_cmd(struct wmi_t *wmip, A_UINT8 roamDataType);
+A_STATUS wmi_set_roam_ctrl_cmd(struct wmi_t *wmip, WMI_SET_ROAM_CTRL_CMD *p,
+                               A_UINT8 size);
+A_STATUS wmi_set_powersave_timers_cmd(struct wmi_t *wmip,
+                            WMI_POWERSAVE_TIMERS_POLICY_CMD *pCmd,
+                            A_UINT8 size);
+
+A_STATUS wmi_set_opt_mode_cmd(struct wmi_t *wmip, A_UINT8 optMode);
+A_STATUS wmi_opt_tx_frame_cmd(struct wmi_t *wmip,
+                              A_UINT8 frmType,
+                              A_UINT8 *dstMacAddr,
+                              A_UINT8 *bssid,
+                              A_UINT16 optIEDataLen,
+                              A_UINT8 *optIEData);
+
+A_STATUS wmi_set_adhoc_bconIntvl_cmd(struct wmi_t *wmip, A_UINT16 intvl);
+A_STATUS wmi_set_voice_pkt_size_cmd(struct wmi_t *wmip, A_UINT16 voicePktSize);
+A_STATUS wmi_set_max_sp_len_cmd(struct wmi_t *wmip, A_UINT8 maxSpLen);
+A_UINT8  convert_userPriority_to_trafficClass(A_UINT8 userPriority);
+A_UINT8 wmi_get_power_mode_cmd(struct wmi_t *wmip);
+A_STATUS wmi_verify_tspec_params(WMI_CREATE_PSTREAM_CMD *pCmd, A_BOOL tspecCompliance);
+
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+A_STATUS wmi_test_cmd(struct wmi_t *wmip, A_UINT8 *buf, A_UINT32  len);
+#endif
+
+A_STATUS wmi_set_bt_status_cmd(struct wmi_t *wmip, A_UINT8 streamType, A_UINT8 status);
+A_STATUS wmi_set_bt_params_cmd(struct wmi_t *wmip, WMI_SET_BT_PARAMS_CMD* cmd);
+
+
+/*
+ *  This function is used to configure the fix rates mask to the target.
+ */
+A_STATUS wmi_set_fixrates_cmd(struct wmi_t *wmip, A_INT16 fixRatesMask);
+A_STATUS wmi_get_ratemask_cmd(struct wmi_t *wmip);
+
+A_STATUS wmi_set_authmode_cmd(struct wmi_t *wmip, A_UINT8 mode);
+
+A_STATUS wmi_set_reassocmode_cmd(struct wmi_t *wmip, A_UINT8 mode);
+
+A_STATUS wmi_set_wmm_cmd(struct wmi_t *wmip, WMI_WMM_STATUS status);
+A_STATUS wmi_set_wmm_txop(struct wmi_t *wmip, WMI_TXOP_CFG txEnable);
+
+A_STATUS wmi_get_keepalive_configured(struct wmi_t *wmip);
+A_UINT8 wmi_get_keepalive_cmd(struct wmi_t *wmip);
+A_STATUS wmi_set_keepalive_cmd(struct wmi_t *wmip, A_UINT8 keepaliveInterval);
+
+A_STATUS wmi_set_appie_cmd(struct wmi_t *wmip, A_UINT8 mgmtFrmType,
+                           A_UINT8 ieLen,A_UINT8 *ieInfo);
+
+A_STATUS wmi_set_halparam_cmd(struct wmi_t *wmip, A_UINT8 *cmd, A_UINT16 dataLen);
+A_INT32 wmi_get_rate(A_INT8 rateindex);
+
+/*Wake on Wireless WMI commands*/
+A_STATUS wmi_set_host_sleep_mode_cmd(struct wmi_t *wmip, WMI_SET_HOST_SLEEP_MODE_CMD *cmd);
+A_STATUS wmi_set_wow_mode_cmd(struct wmi_t *wmip, WMI_SET_WOW_MODE_CMD *cmd);
+A_STATUS wmi_get_wow_list_cmd(struct wmi_t *wmip, WMI_GET_WOW_LIST_CMD *cmd);
+A_STATUS wmi_add_wow_pattern_cmd(struct wmi_t *wmip,
+                                 WMI_ADD_WOW_PATTERN_CMD *cmd, A_UINT8* pattern, A_UINT8* mask, A_UINT8 pattern_size);
+A_STATUS wmi_del_wow_pattern_cmd(struct wmi_t *wmip,
+                                 WMI_DEL_WOW_PATTERN_CMD *cmd);
+A_STATUS wmi_set_wsc_status_cmd(struct wmi_t *wmip, A_UINT32 status);
+
+bss_t *
+wmi_find_Ssidnode (struct wmi_t *wmip, A_UCHAR *pSsid,
+				   A_UINT32 ssidLength, A_BOOL bIsWPA2);
+
+void
+wmi_node_return (struct wmi_t *wmip, bss_t *bss);
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _WMI_API_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/localmake.linux.inc
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/localmake.linux.inc	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/localmake.linux.inc	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,33 @@
+#
+#  Local Makefile includes for tool and kernel source paths
+#  ***** This is only a sample, modify the paths for your specific build environment *****
+# 
+#  Copyright 2004-2006 Atheros Communications, Inc.
+#
+# When creating a new build type, use the following template:
+#  	ifeq ($(ATH_BUILD_TYPE),<platform name>) 
+#       ATH_ARCH_CPU_TYPE :=  < cpu architecture >
+#       ATH_CROSS_COMPILE_TYPE := < cross compiler path >
+#       ATH_LINUXPATH := < kernel source path >
+#	endif 
+#
+# For a complete list of supported platforms, please refer to the documentation
+# packaged in the release
+#
+
+
+#ATH_BUILD_TYPE := <Platform (Eg: LOCAL_i686)>
+#ATH_BUS_TYPE := <Interconnect type (Eg: SDIO, SPI)>
+#ATH_LINUXPATH := <Pointer to kernel source (Eg: /<path>/fc3-i686-2.6.9)>
+#ATH_ARCH_CPU_TYPE := <Type of architecture (Eg: arm)>
+#ATH_CROSS_COMPILE_TYPE := <Path to the compiler toolchain - Eg: (/<path>/arm_v4t_le-)
+#ATH_OS_SUB_TYPE := <Kernel version - (Eg: linux_2_4, linux_2_6)>
+#ATH_HC_DRIVERS := <sdio stack host controller drivers (optional)>
+
+# Example: Compiling locally (i686) for an SDIO interconnect using Atheros SDIO stack
+#ATH_BUILD_TYPE=LOCAL_i686
+# set linux kernel source path here (or set environment variable):
+#ATH_LINUXPATH :=$(KERNEL_SRC)
+#ATH_BUS_TYPE :=SDIO
+#ATH_HC_DRIVERS :='pci_ellen/ pci_std/'
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/miscdrv/common_drv.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/miscdrv/common_drv.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/miscdrv/common_drv.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,467 @@
+
+/*
+ *
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#include "a_config.h"
+#include "athdefs.h"
+#include "a_types.h"
+#include "AR6Khwreg.h"
+#include "targaddrs.h"
+#include "a_osapi.h"
+#include "hif.h"
+#include "htc_api.h"
+#include "bmi.h"
+#include "bmi_msg.h"
+#include "common_drv.h"
+#include "a_debug.h"
+#include "targaddrs.h"
+
+#define HOST_INTEREST_ITEM_ADDRESS(target, item)    \
+(((TargetType) == TARGET_TYPE_AR6001) ?     \
+   AR6001_HOST_INTEREST_ITEM_ADDRESS(item) :    \
+   AR6002_HOST_INTEREST_ITEM_ADDRESS(item))
+   
+
+/* Compile the 4BYTE version of the window register setup routine,
+ * This mitigates host interconnect issues with non-4byte aligned bus requests, some 
+ * interconnects use bus adapters that impose strict limitations. 
+ * Since diag window access is not intended for performance critical operations, the 4byte mode should
+ * be satisfactory even though it generates 4X the bus activity. */
+
+#ifdef USE_4BYTE_REGISTER_ACCESS
+    
+    /* set the window address register (using 4-byte register access ). */
+A_STATUS ar6000_SetAddressWindowRegister(HIF_DEVICE *hifDevice, A_UINT32 RegisterAddr, A_UINT32 Address)
+{
+    A_STATUS status;
+    A_UINT8 addrValue[4];
+    int i;
+    
+        /* write bytes 1,2,3 of the register to set the upper address bytes, the LSB is written 
+         * last to initiate the access cycle */
+    
+    for (i = 1; i <= 3; i++) {
+            /* fill the buffer with the address byte value we want to hit 4 times*/
+        addrValue[0] = ((A_UINT8 *)&Address)[i];
+        addrValue[1] = addrValue[0];
+        addrValue[2] = addrValue[0];
+        addrValue[3] = addrValue[0];
+        
+            /* hit each byte of the register address with a 4-byte write operation to the same address,
+             * this is a harmless operation */   
+        status = HIFReadWrite(hifDevice,
+                              RegisterAddr+i,  
+                              addrValue,
+                              4,
+                              HIF_WR_SYNC_BYTE_FIX,
+                              NULL);    
+        if (status != A_OK) {
+            break;    
+        }
+    }
+
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_LOG_ERR, ("Cannot write initial bytes of 0x%x to window reg: 0x%X \n",
+             RegisterAddr, Address));
+        return status;
+    }
+    
+        /* write the address register again, this time write the whole 4-byte value.
+         * The effect here is that the LSB write causes the cycle to start, the extra
+         * 3 byte write to bytes 1,2,3 has no effect since we are writing the same values again */
+    status = HIFReadWrite(hifDevice,
+                          RegisterAddr,
+                          (A_UCHAR *)(&Address),
+                          4,
+                          HIF_WR_SYNC_BYTE_INC,
+                          NULL);
+
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_LOG_ERR, ("Cannot write 0x%x to window reg: 0x%X \n", 
+            RegisterAddr, Address));
+        return status;
+    }
+    
+    return A_OK;
+    
+    
+    
+}
+
+
+#else
+
+    /* set the window address register */
+A_STATUS ar6000_SetAddressWindowRegister(HIF_DEVICE *hifDevice, A_UINT32 RegisterAddr, A_UINT32 Address)
+{
+    A_STATUS status;
+    
+        /* write bytes 1,2,3 of the register to set the upper address bytes, the LSB is written 
+         * last to initiate the access cycle */
+    status = HIFReadWrite(hifDevice,
+                          RegisterAddr+1,  /* write upper 3 bytes */
+                          ((A_UCHAR *)(&Address))+1,
+                          sizeof(A_UINT32)-1,
+                          HIF_WR_SYNC_BYTE_INC,
+                          NULL);
+
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_LOG_ERR, ("Cannot write initial bytes of 0x%x to window reg: 0x%X \n",
+             RegisterAddr, Address));
+        return status;
+    }
+    
+        /* write the LSB of the register, this initiates the operation */
+    status = HIFReadWrite(hifDevice,
+                          RegisterAddr,
+                          (A_UCHAR *)(&Address),
+                          sizeof(A_UINT8),
+                          HIF_WR_SYNC_BYTE_INC,
+                          NULL);
+
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_LOG_ERR, ("Cannot write 0x%x to window reg: 0x%X \n", 
+            RegisterAddr, Address));
+        return status;
+    }
+    
+    return A_OK;
+}
+
+#endif
+
+/*
+ * Read from the AR6000 through its diagnostic window.
+ * No cooperation from the Target is required for this.
+ */
+A_STATUS
+ar6000_ReadRegDiag(HIF_DEVICE *hifDevice, A_UINT32 *address, A_UINT32 *data)
+{
+    A_STATUS status;
+
+        /* set window register to start read cycle */
+    status = ar6000_SetAddressWindowRegister(hifDevice,
+                                             WINDOW_READ_ADDR_ADDRESS,
+                                             *address);
+
+    if (status != A_OK) {
+        return status;
+    }
+
+        /* read the data */
+    status = HIFReadWrite(hifDevice,
+                          WINDOW_DATA_ADDRESS,
+                          (A_UCHAR *)data,
+                          sizeof(A_UINT32),
+                          HIF_RD_SYNC_BYTE_INC,
+                          NULL);
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_LOG_ERR, ("Cannot read from WINDOW_DATA_ADDRESS\n"));
+        return status;
+    }
+
+    return status;
+}
+
+
+/*
+ * Write to the AR6000 through its diagnostic window.
+ * No cooperation from the Target is required for this.
+ */
+A_STATUS
+ar6000_WriteRegDiag(HIF_DEVICE *hifDevice, A_UINT32 *address, A_UINT32 *data)
+{
+    A_STATUS status;
+    
+        /* set write data */
+    status = HIFReadWrite(hifDevice,
+                          WINDOW_DATA_ADDRESS,
+                          (A_UCHAR *)data,
+                          sizeof(A_UINT32),
+                          HIF_WR_SYNC_BYTE_INC,
+                          NULL);
+    if (status != A_OK) {
+        AR_DEBUG_PRINTF(ATH_LOG_ERR, ("Cannot write 0x%x to WINDOW_DATA_ADDRESS\n", *data));
+        return status;
+    }
+
+        /* set window register, which starts the write cycle */
+    return ar6000_SetAddressWindowRegister(hifDevice,
+                                           WINDOW_WRITE_ADDR_ADDRESS,
+                                           *address);
+}
+
+A_STATUS
+ar6000_ReadDataDiag(HIF_DEVICE *hifDevice, A_UINT32 address,
+                    A_UCHAR *data, A_UINT32 length)
+{
+    A_UINT32 count;
+    A_STATUS status = A_OK;
+
+    for (count = 0; count < length; count += 4, address += 4) {
+        if ((status = ar6000_ReadRegDiag(hifDevice, &address,
+                                         (A_UINT32 *)&data[count])) != A_OK)
+        {
+            break;
+        }
+    }
+
+    return status;
+}
+
+A_STATUS
+ar6000_WriteDataDiag(HIF_DEVICE *hifDevice, A_UINT32 address,
+                     A_UCHAR *data, A_UINT32 length)
+{
+    A_UINT32 count;
+    A_STATUS status = A_OK;
+
+    for (count = 0; count < length; count += 4, address += 4) {
+        if ((status = ar6000_WriteRegDiag(hifDevice, &address,
+                                          (A_UINT32 *)&data[count])) != A_OK)
+        {
+            break;
+        }
+    }
+
+    return status;
+}
+
+A_STATUS
+ar6000_reset_device_skipflash(HIF_DEVICE *hifDevice)
+{
+    int i;
+    struct forceROM_s {
+        A_UINT32 addr;
+        A_UINT32 data;
+    };
+    struct forceROM_s *ForceROM;
+    int szForceROM;
+    A_UINT32 instruction;
+
+    static struct forceROM_s ForceROM_REV2[] = {
+        /* NB: This works for old REV2 ROM (old). */
+        {0x00001ff0, 0x175b0027}, /* jump instruction at 0xa0001ff0 */
+        {0x00001ff4, 0x00000000}, /* nop instruction at 0xa0001ff4 */
+    
+        {MC_REMAP_TARGET_ADDRESS, 0x00001ff0}, /* remap to 0xa0001ff0 */
+        {MC_REMAP_COMPARE_ADDRESS, 0x01000040},/* ...from 0xbfc00040 */
+        {MC_REMAP_SIZE_ADDRESS, 0x00000000},   /* ...1 cache line */
+        {MC_REMAP_VALID_ADDRESS, 0x00000001},  /* ...remap is valid */
+    
+        {LOCAL_COUNT_ADDRESS+0x10, 0}, /* clear BMI credit counter */
+    
+        {RESET_CONTROL_ADDRESS, RESET_CONTROL_WARM_RST_MASK},
+    };
+
+    static struct forceROM_s ForceROM_NEW[] = {
+        /* NB: This works for AR6000 ROM REV3 and beyond.  */
+        {LOCAL_SCRATCH_ADDRESS, AR6K_OPTION_IGNORE_FLASH},
+        {LOCAL_COUNT_ADDRESS+0x10, 0}, /* clear BMI credit counter */
+        {RESET_CONTROL_ADDRESS, RESET_CONTROL_WARM_RST_MASK},
+    };
+
+    /*
+     * Examine a semi-arbitrary instruction that's different
+     * in REV2 and other revisions.
+     * NB: If a Host port does not require simultaneous support
+     * for multiple revisions of Target ROM, this code can be elided.
+     */
+    (void)ar6000_ReadDataDiag(hifDevice, 0x01000040,
+                              (A_UCHAR *)&instruction, 4);
+
+    AR_DEBUG_PRINTF(ATH_LOG_ERR, ("instruction=0x%x\n", instruction));
+    
+    if (instruction == 0x3c1aa200) {
+        /* It's an old ROM */
+        ForceROM = ForceROM_REV2;
+        szForceROM = sizeof(ForceROM_REV2)/sizeof(*ForceROM);
+        AR_DEBUG_PRINTF(ATH_LOG_ERR, ("Using OLD method\n"));
+    } else {
+        ForceROM = ForceROM_NEW;
+        szForceROM = sizeof(ForceROM_NEW)/sizeof(*ForceROM);
+        AR_DEBUG_PRINTF(ATH_LOG_ERR, ("Using NEW method\n"));
+    }
+                    
+    AR_DEBUG_PRINTF(ATH_LOG_ERR, ("Force Target to execute from ROM....\n"));
+    for (i = 0; i < szForceROM; i++) 
+    {
+        if (ar6000_WriteRegDiag(hifDevice,
+                                &ForceROM[i].addr,
+                                &ForceROM[i].data) != A_OK)
+        {
+            AR_DEBUG_PRINTF(ATH_LOG_ERR, ("Cannot force Target to execute ROM!\n"));
+            return A_ERROR;
+        }
+    }
+
+    A_MDELAY(50); /* delay to allow dragon to come to BMI phase  */
+    return A_OK;
+}
+
+/* reset device */
+A_STATUS ar6000_reset_device(HIF_DEVICE *hifDevice, A_UINT32 TargetType)
+{
+
+#if !defined(DWSIM)
+    A_STATUS status = A_OK;
+    A_UINT32 address;
+    A_UINT32 data;
+
+    do {
+
+        // address = RESET_CONTROL_ADDRESS;
+        data = RESET_CONTROL_COLD_RST_MASK;
+
+          /* Hardcode the address of RESET_CONTROL_ADDRESS based on the target type */
+        if (TargetType == TARGET_TYPE_AR6001) {
+            address = 0x0C000000;
+        } else {
+            if (TargetType == TARGET_TYPE_AR6002) {
+                address = 0x00004000;
+            } else {
+                A_ASSERT(0);
+            }
+        }
+
+        status = ar6000_WriteRegDiag(hifDevice, &address, &data);
+
+        if (A_FAILED(status)) {
+            break;
+        }
+
+        /*
+         * Read back the RESET CAUSE register to ensure that the cold reset
+         * went through.
+         */
+        A_MDELAY(2000); /* 2 second delay to allow things to settle down */
+
+
+        // address = RESET_CAUSE_ADDRESS;
+        /* Hardcode the address of RESET_CAUSE_ADDRESS based on the target type */
+        if (TargetType == TARGET_TYPE_AR6001) {
+            address = 0x0C0000CC;
+        } else {
+            if (TargetType == TARGET_TYPE_AR6002) {
+                address = 0x000040C0;
+            } else {
+                A_ASSERT(0);
+            }
+        }
+
+        data = 0;
+        status = ar6000_ReadRegDiag(hifDevice, &address, &data);
+
+        if (A_FAILED(status)) {
+            break;
+        }
+
+        AR_DEBUG_PRINTF(ATH_LOG_ERR, ("Reset Cause readback: 0x%X \n",data));
+        data &= RESET_CAUSE_LAST_MASK;
+        if (data != 2) {
+            AR_DEBUG_PRINTF(ATH_LOG_ERR, ("Unable to cold reset the target \n"));
+        }
+
+    } while (FALSE);
+
+    if (A_FAILED(status)) {
+        AR_DEBUG_PRINTF(ATH_LOG_ERR, ("Failed to reset target \n"));
+    }
+#endif
+    return A_OK;
+}
+
+#define REG_DUMP_COUNT_AR6001   38  /* WORDs, derived from AR6001_regdump.h */  
+#define REG_DUMP_COUNT_AR6002   32  /* WORDs, derived from AR6002_regdump.h */
+
+
+#if REG_DUMP_COUNT_AR6001 <= REG_DUMP_COUNT_AR6002
+#define REGISTER_DUMP_LEN_MAX  REG_DUMP_COUNT_AR6002
+#else
+#define REGISTER_DUMP_LEN_MAX  REG_DUMP_COUNT_AR6001
+#endif
+
+void ar6000_dump_target_assert_info(HIF_DEVICE *hifDevice, A_UINT32 TargetType)
+{
+    A_UINT32 address;
+    A_UINT32 regDumpArea = 0;
+    A_STATUS status;
+    A_UINT32 regDumpValues[REGISTER_DUMP_LEN_MAX];
+    A_UINT32 regDumpCount = 0;
+    A_UINT32 i;
+        
+    do {
+        
+            /* the reg dump pointer is copied to the host interest area */
+        address = HOST_INTEREST_ITEM_ADDRESS(TargetType, hi_failure_state);
+            
+        if (TargetType == TARGET_TYPE_AR6001) {
+                /* for AR6001, this is a fixed location because the ptr is actually stuck in cache,
+                 * this may be fixed in later firmware versions */
+            address = 0x18a0;          
+            regDumpCount = REG_DUMP_COUNT_AR6001;  
+        
+        } else  if (TargetType == TARGET_TYPE_AR6002) {
+        
+            regDumpCount = REG_DUMP_COUNT_AR6002;  
+        
+        } else {
+            A_ASSERT(0);
+        }
+                
+            /* read RAM location through diagnostic window */            
+        status = ar6000_ReadRegDiag(hifDevice, &address, &regDumpArea);
+    
+        if (A_FAILED(status)) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR,("AR6K: Failed to get ptr to register dump area \n"));
+            break;  
+        }
+        
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR,("AR6K: Location of register dump data: 0x%X \n",regDumpArea));    
+            
+        if (regDumpArea == 0) {
+                /* no reg dump */
+            break;    
+        }
+        
+        if (TargetType == TARGET_TYPE_AR6001) {
+            regDumpArea &= 0x0FFFFFFF;  /* convert to physical address in target memory */
+        }
+        
+            /* fetch register dump data */
+        status = ar6000_ReadDataDiag(hifDevice, 
+                                     regDumpArea,
+                                     (A_UCHAR *)&regDumpValues[0],
+                                     regDumpCount * (sizeof(A_UINT32)));
+        
+        if (A_FAILED(status)) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR,("AR6K: Failed to get register dump \n"));
+            break;   
+        }
+        
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR,("AR6K: Register Dump: \n"));
+        
+        for (i = 0; i < regDumpCount; i++) {
+            AR_DEBUG_PRINTF(ATH_DEBUG_ERR,(" %d :  0x%8.8X \n",i, regDumpValues[i]));        
+        }
+        
+    } while (FALSE);
+    
+}
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/miscdrv/credit_dist.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/miscdrv/credit_dist.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/miscdrv/credit_dist.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,346 @@
+
+/*
+ *
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#include "a_config.h"
+#include "athdefs.h"
+#include "a_types.h"
+#include "a_osapi.h"
+#include "a_debug.h"
+#include "htc_api.h"
+#include "common_drv.h"
+
+/********* CREDIT DISTRIBUTION FUNCTIONS ******************************************/
+
+#define NO_VO_SERVICE 1 /* currently WMI only uses 3 data streams, so we leave VO service inactive */
+
+#ifdef NO_VO_SERVICE
+#define DATA_SVCS_USED 3
+#else
+#define DATA_SVCS_USED 4
+#endif
+
+static void RedistributeCredits(COMMON_CREDIT_STATE_INFO *pCredInfo,
+                                HTC_ENDPOINT_CREDIT_DIST *pEPDistList);
+
+static void SeekCredits(COMMON_CREDIT_STATE_INFO *pCredInfo,
+                        HTC_ENDPOINT_CREDIT_DIST *pEPDistList);
+
+/* reduce an ep's credits back to a set limit */
+static INLINE void ReduceCredits(COMMON_CREDIT_STATE_INFO *pCredInfo,
+                                HTC_ENDPOINT_CREDIT_DIST  *pEpDist,
+                                int                       Limit)
+{
+    int credits;
+
+        /* set the new limit */
+    pEpDist->TxCreditsAssigned = Limit;
+
+    if (pEpDist->TxCredits <= Limit) {
+        return;
+    }
+
+        /* figure out how much to take away */
+    credits = pEpDist->TxCredits - Limit;
+        /* take them away */
+    pEpDist->TxCredits -= credits;
+    pCredInfo->CurrentFreeCredits += credits;
+}
+
+/* give an endpoint some credits from the free credit pool */
+#define GiveCredits(pCredInfo,pEpDist,credits)      \
+{                                                   \
+    (pEpDist)->TxCredits += (credits);              \
+    (pEpDist)->TxCreditsAssigned += (credits);      \
+    (pCredInfo)->CurrentFreeCredits -= (credits);   \
+}
+
+
+/* default credit init callback.
+ * This function is called in the context of HTCStart() to setup initial (application-specific)
+ * credit distributions */
+static void ar6000_credit_init(void                     *Context,
+                               HTC_ENDPOINT_CREDIT_DIST *pEPList,
+                               int                      TotalCredits)
+{
+    HTC_ENDPOINT_CREDIT_DIST *pCurEpDist;
+    int                      count;
+    COMMON_CREDIT_STATE_INFO *pCredInfo = (COMMON_CREDIT_STATE_INFO *)Context;
+
+    pCredInfo->CurrentFreeCredits = TotalCredits;
+    pCredInfo->TotalAvailableCredits = TotalCredits;
+
+    pCurEpDist = pEPList;
+
+        /* run through the list and initialize */
+    while (pCurEpDist != NULL) {
+
+            /* set minimums for each endpoint */
+        pCurEpDist->TxCreditsMin = pCurEpDist->TxCreditsPerMaxMsg;
+
+        if (pCurEpDist->ServiceID == WMI_CONTROL_SVC) {
+                /* give control service some credits */
+            GiveCredits(pCredInfo,pCurEpDist,pCurEpDist->TxCreditsMin);
+                /* control service is always marked active, it never goes inactive EVER */
+            SET_EP_ACTIVE(pCurEpDist);
+        } else if (pCurEpDist->ServiceID == WMI_DATA_BK_SVC) {
+                /* this is the lowest priority data endpoint, save this off for easy access */
+            pCredInfo->pLowestPriEpDist = pCurEpDist;
+        }
+
+        /* Streams have to be created (explicit | implicit)for all kinds
+         * of traffic. BE endpoints are also inactive in the beginning. 
+         * When BE traffic starts it creates implicit streams that 
+         * redistributes credits.
+         */
+
+        /* note, all other endpoints have minimums set but are initially given NO credits.
+         * Credits will be distributed as traffic activity demands */
+        pCurEpDist = pCurEpDist->pNext;
+    }
+
+    if (pCredInfo->CurrentFreeCredits <= 0) {
+        AR_DEBUG_PRINTF(ATH_LOG_INF, ("Not enough credits (%d) to do credit distributions \n", TotalCredits));
+        A_ASSERT(FALSE);
+        return;
+    }
+
+        /* reset list */
+    pCurEpDist = pEPList;
+        /* now run through the list and set max operating credit limits for everyone */
+    while (pCurEpDist != NULL) {
+        if (pCurEpDist->ServiceID == WMI_CONTROL_SVC) {
+                /* control service max is just 1 max message */
+            pCurEpDist->TxCreditsNorm = pCurEpDist->TxCreditsPerMaxMsg;
+        } else {
+                /* for the remaining data endpoints, we assume that each TxCreditsPerMaxMsg are
+                 * the same.
+                 * We use a simple calculation here, we take the remaining credits and
+                 * determine how many max messages this can cover and then set each endpoint's
+                 * normal value equal to half this amount.
+                 * */
+            count = (pCredInfo->CurrentFreeCredits/pCurEpDist->TxCreditsPerMaxMsg) * pCurEpDist->TxCreditsPerMaxMsg;
+            count = count >> 1;
+            count = max(count,pCurEpDist->TxCreditsPerMaxMsg);
+                /* set normal */
+            pCurEpDist->TxCreditsNorm = count;
+
+        }
+        pCurEpDist = pCurEpDist->pNext;
+    }
+
+}
+
+
+/* default credit distribution callback
+ * This callback is invoked whenever endpoints require credit distributions.
+ * A lock is held while this function is invoked, this function shall NOT block.
+ * The pEPDistList is a list of distribution structures in prioritized order as
+ * defined by the call to the HTCSetCreditDistribution() api.
+ *
+ */
+static void ar6000_credit_distribute(void                     *Context,
+                                     HTC_ENDPOINT_CREDIT_DIST *pEPDistList,
+                                     HTC_CREDIT_DIST_REASON   Reason)
+{
+    HTC_ENDPOINT_CREDIT_DIST *pCurEpDist;
+    COMMON_CREDIT_STATE_INFO *pCredInfo = (COMMON_CREDIT_STATE_INFO *)Context;
+
+    switch (Reason) {
+        case HTC_CREDIT_DIST_SEND_COMPLETE :
+            pCurEpDist = pEPDistList;
+                /* we are given the start of the endpoint distribution list.
+                 * There may be one or more endpoints to service.
+                 * Run through the list and distribute credits */
+            while (pCurEpDist != NULL) {
+
+                if (pCurEpDist->TxCreditsToDist > 0) {
+                        /* return the credits back to the endpoint */
+                    pCurEpDist->TxCredits += pCurEpDist->TxCreditsToDist;
+                        /* always zero out when we are done */
+                    pCurEpDist->TxCreditsToDist = 0;
+
+                    if (pCurEpDist->TxCredits > pCurEpDist->TxCreditsAssigned) {
+                            /* reduce to the assigned limit, previous credit reductions
+                             * could have caused the limit to change */
+                        ReduceCredits(pCredInfo, pCurEpDist, pCurEpDist->TxCreditsAssigned);
+                    }
+
+                    if (pCurEpDist->TxCredits > pCurEpDist->TxCreditsNorm) {
+                            /* oversubscribed endpoints need to reduce back to normal */
+                        ReduceCredits(pCredInfo, pCurEpDist, pCurEpDist->TxCreditsNorm);
+                    }
+                }
+
+                pCurEpDist = pCurEpDist->pNext;
+            }
+
+            A_ASSERT(pCredInfo->CurrentFreeCredits <= pCredInfo->TotalAvailableCredits);
+
+            break;
+
+        case HTC_CREDIT_DIST_ACTIVITY_CHANGE :
+            RedistributeCredits(pCredInfo,pEPDistList);
+            break;
+        case HTC_CREDIT_DIST_SEEK_CREDITS :
+            SeekCredits(pCredInfo,pEPDistList);
+            break;
+        case HTC_DUMP_CREDIT_STATE :
+            AR_DEBUG_PRINTF(ATH_LOG_INF, ("Credit Distribution, total : %d, free : %d\n",
+            								pCredInfo->TotalAvailableCredits, pCredInfo->CurrentFreeCredits));
+            break;
+        default:
+            break;
+
+    }
+
+}
+
+/* redistribute credits based on activity change */
+static void RedistributeCredits(COMMON_CREDIT_STATE_INFO *pCredInfo,
+                                HTC_ENDPOINT_CREDIT_DIST *pEPDistList)
+{
+    HTC_ENDPOINT_CREDIT_DIST *pCurEpDist = pEPDistList;
+
+        /* walk through the list and remove credits from inactive endpoints */
+    while (pCurEpDist != NULL) {
+
+        if (pCurEpDist->ServiceID != WMI_CONTROL_SVC) {
+            if (!IS_EP_ACTIVE(pCurEpDist)) {
+                    /* EP is inactive, reduce credits back to zero */
+                ReduceCredits(pCredInfo, pCurEpDist, 0);
+            }
+        }
+
+        /* NOTE in the active case, we do not need to do anything further,
+         * when an EP goes active and needs credits, HTC will call into
+         * our distribution function using a reason code of HTC_CREDIT_DIST_SEEK_CREDITS  */
+
+        pCurEpDist = pCurEpDist->pNext;
+    }
+
+    A_ASSERT(pCredInfo->CurrentFreeCredits <= pCredInfo->TotalAvailableCredits);
+
+}
+
+/* HTC has an endpoint that needs credits, pEPDist is the endpoint in question */
+static void SeekCredits(COMMON_CREDIT_STATE_INFO *pCredInfo,
+                        HTC_ENDPOINT_CREDIT_DIST *pEPDist)
+{
+    HTC_ENDPOINT_CREDIT_DIST *pCurEpDist;
+    int                      credits = 0;
+    int                      need;
+
+    do {
+
+        if (pEPDist->ServiceID == WMI_CONTROL_SVC) {
+                /* we never oversubscribe on the control service, this is not
+                 * a high performance path and the target never holds onto control
+                 * credits for too long */
+            break;
+        }
+
+        /* for all other services, we follow a simple algorithm of
+         * 1. checking the free pool for credits
+         * 2. checking lower priority endpoints for credits to take */
+
+        if (pCredInfo->CurrentFreeCredits >= 2 * pEPDist->TxCreditsSeek) {
+                /* try to give more credits than it needs */
+            credits = 2 * pEPDist->TxCreditsSeek;
+        } else {
+                /* give what we can */
+            credits = min(pCredInfo->CurrentFreeCredits,pEPDist->TxCreditsSeek);
+        }
+
+        if (credits >= pEPDist->TxCreditsSeek) {
+                /* we found some to fullfill the seek request */
+            break;
+        }
+
+        /* we don't have enough in the free pool, try taking away from lower priority services
+         *
+         * The rule for taking away credits:
+         *   1. Only take from lower priority endpoints
+         *   2. Only take what is allocated above the minimum (never starve an endpoint completely)
+         *   3. Only take what you need.
+         *
+         * */
+
+            /* starting at the lowest priority */
+        pCurEpDist = pCredInfo->pLowestPriEpDist;
+
+            /* work backwards until we hit the endpoint again */
+        while (pCurEpDist != pEPDist) {
+                /* calculate how many we need so far */
+            need = pEPDist->TxCreditsSeek - pCredInfo->CurrentFreeCredits;
+
+            if ((pCurEpDist->TxCreditsAssigned - need) > pCurEpDist->TxCreditsMin) {
+                    /* the current one has been allocated more than it's minimum and it
+                     * has enough credits assigned above it's minimum to fullfill our need
+                     * try to take away just enough to fullfill our need */
+                ReduceCredits(pCredInfo,
+                              pCurEpDist,
+                              pCurEpDist->TxCreditsAssigned - need);
+
+                if (pCredInfo->CurrentFreeCredits >= pEPDist->TxCreditsSeek) {
+                        /* we have enough */
+                    break;
+                }
+            }
+
+            pCurEpDist = pCurEpDist->pPrev;
+        }
+
+            /* return what we can get */
+        credits = min(pCredInfo->CurrentFreeCredits,pEPDist->TxCreditsSeek);
+
+    } while (FALSE);
+
+        /* did we find some credits? */
+    if (credits) {
+            /* give what we can */
+        GiveCredits(pCredInfo, pEPDist, credits);
+    }
+
+}
+
+/* initialize and setup credit distribution */
+A_STATUS ar6000_setup_credit_dist(HTC_HANDLE HTCHandle, COMMON_CREDIT_STATE_INFO *pCredInfo)
+{
+    HTC_SERVICE_ID servicepriority[5];
+
+    A_MEMZERO(pCredInfo,sizeof(COMMON_CREDIT_STATE_INFO));
+
+    servicepriority[0] = WMI_CONTROL_SVC;  /* highest */
+    servicepriority[1] = WMI_DATA_VO_SVC;
+    servicepriority[2] = WMI_DATA_VI_SVC;
+    servicepriority[3] = WMI_DATA_BE_SVC;
+    servicepriority[4] = WMI_DATA_BK_SVC; /* lowest */
+
+        /* set callbacks and priority list */
+    HTCSetCreditDistribution(HTCHandle,
+                             pCredInfo,
+                             ar6000_credit_distribute,
+                             ar6000_credit_init,
+                             servicepriority,
+                             5);
+
+    return A_OK;
+}
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/miscdrv/makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/miscdrv/makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/miscdrv/makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,4 @@
+# Copyright (c) 2004-2006 Atheros Communications Inc.
+# All rights reserved.
+!INCLUDE $(_MAKEENVROOT)\makefile.def
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/Makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/Makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/Makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,103 @@
+#######################################################################################
+#  AR6K Kernel Module makefile.
+#
+#    This makefile is invoked by the master makefile in the linux kernel, the linux kernel
+#    source must be initially compiled.  The top level make will invoke the main linux kernel
+#    makefile which will subsequently pick up this makefile.
+#
+#######################################################################################
+
+
+REV ?= 2
+
+EXTRA_CFLAGS += -I$(ATH_SRC_BASE)/include
+EXTRA_CFLAGS += -I$(ATH_SRC_BASE)/../include
+# TBDXXX....handle include/AR6002
+EXTRA_CFLAGS += -I$(ATH_SRC_BASE)/../include/AR6001
+EXTRA_CFLAGS += -I$(ATH_SRC_BASE)/wlan/include
+EXTRA_CFLAGS += -I$(ATH_SRC_BASE)/os/linux/include
+EXTRA_CFLAGS += -I$(ATH_SRC_BASE)/os/
+EXTRA_CFLAGS += -I$(ATH_SRC_BASE)/bmi/include
+
+EXTRA_CFLAGS += -DLINUX -DDEBUG -D__KERNEL__ -DHTC_RAW_INTERFACE\
+                -DTCMD -DSEND_EVENT_TO_APP -DUSER_KEYS \
+                -DNO_SYNC_FLUSH #\
+                -DMULTIPLE_FRAMES_PER_INTERRUPT -DAR6000REV$(REV) \
+                -DBLOCK_TX_PATH_FLAG \
+
+ifneq ($(ATH_OS_SUB_TYPE),linux_2_4)
+# linux 2.6 and higher kernel module build settings
+EXTRA_CFLAGS += -DKERNEL_2_6
+obj-m += ar6000.o
+-include $(ATH_SRC_BASE)/hif/$(ATH_HIF_TYPE)/Makefile
+ar6000-objs += ../../htc2/AR6000/ar6k.o        \
+			   ../../htc2/AR6000/ar6k_events.o \
+               ../../htc2/htc_send.o       \
+               ../../htc2/htc_recv.o       \
+               ../../htc2/htc_services.o   \
+               ../../htc2/htc.o     		  \
+               ../../bmi/src/bmi.o            \
+               ar6000_drv.o           			\
+               ar6000_raw_if.o					\
+               netbuf.o							\
+               wireless_ext.o					\
+               ioctl.o							\
+               ../../miscdrv/common_drv.o		\
+               ../../miscdrv/credit_dist.o					\
+               ../../wmi/wmi.o                       \
+               ../../wlan/src/wlan_node.o            \
+               ../../wlan/src/wlan_recv_beacon.o     \
+               ../../wlan/src/wlan_utils.o			 
+
+endif
+
+ifeq ($(ATH_OS_SUB_TYPE),linux_2_4)
+# linux 2.4 kernel module build settings
+EXTRA_CFLAGS += -DKERNEL_2_4
+
+O_TARGET := ar6000.o
+# need export line for module export
+export-objs := ar6000_drv.o
+-include $(ATH_SRC_BASE)/hif/$(ATH_HIF_TYPE)/Makefile
+obj-y += $(ATH_SRC_BASE)/htc2/htc.o \
+         $(ATH_SRC_BASE)/htc2/htc_send.o \
+         $(ATH_SRC_BASE)/htc2/htc_recv.o  \
+         $(ATH_SRC_BASE)/htc2/htc_services.o \
+         $(ATH_SRC_BASE)/htc2/AR6000/ar6k.o  \
+         $(ATH_SRC_BASE)/htc2/AR6000/ar6k_events.o  \
+         $(ATH_SRC_BASE)/bmi/src/bmi.o \
+         $(ATH_SRC_BASE)/wmi/wmi.o \
+         $(ATH_SRC_BASE)/wlan/src/wlan_node.o \
+         $(ATH_SRC_BASE)/wlan/src/wlan_recv_beacon.o \
+         $(ATH_SRC_BASE)/wlan/src/wlan_utils.o \
+         $(ATH_SRC_BASE)/os/linux/ar6000_drv.o \
+         $(ATH_SRC_BASE)/os/linux/ar6000_raw_if.o \
+         $(ATH_SRC_BASE)/os/linux/wireless_ext.o \
+         $(ATH_SRC_BASE)/os/linux/ioctl.o 		\
+         $(ATH_SRC_BASE)/os/linux/netbuf.o     \
+         $(ATH_SRC_BASE)/miscdrv/common_drv.o   \
+         $(ATH_SRC_BASE)/miscdrv/credit_dist.o
+
+obj-m += htc.o \
+         htc_send.o \
+         htc_recv.o \
+         htc_services.o  \
+         ar6k_events.o \
+         ar6k.o \
+         hif.o  \
+         bmi.o  \
+         wmi.o  \
+         wlan_node.o \
+         wlan_recv_beacon.o \
+         wlan_utils.o \
+         ar6000_drv.o \
+         ar6000_raw_if.o \
+         common_drv.o \
+         credit_dist.o \
+         netbuf.o     \
+         wireless_ext.o \
+         ioctl.o        \
+         ar6000.o
+              
+include $(ATH_LINUXPATH)/Rules.make
+endif

Added: trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/ar6000_drv.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/ar6000_drv.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/ar6000_drv.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,3069 @@
+/*
+ *
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+/*
+ * This driver is a pseudo ethernet driver to access the Atheros AR6000
+ * WLAN Device
+ */
+static const char athId[] __attribute__ ((unused)) = "$Id: //depot/sw/releases/olca2.0-GPL/host/os/linux/ar6000_drv.c#2 $";
+
+#include "ar6000_drv.h"
+#include "htc.h"
+
+MODULE_LICENSE("GPL and additional rights");
+
+#ifndef REORG_APTC_HEURISTICS
+#undef ADAPTIVE_POWER_THROUGHPUT_CONTROL
+#endif /* REORG_APTC_HEURISTICS */
+
+#ifdef ADAPTIVE_POWER_THROUGHPUT_CONTROL
+#define APTC_TRAFFIC_SAMPLING_INTERVAL     100  /* msec */
+#define APTC_UPPER_THROUGHPUT_THRESHOLD    3000 /* Kbps */
+#define APTC_LOWER_THROUGHPUT_THRESHOLD    2000 /* Kbps */
+
+typedef struct aptc_traffic_record {
+    A_BOOL timerScheduled;
+    struct timeval samplingTS;
+    unsigned long bytesReceived;
+    unsigned long bytesTransmitted;
+} APTC_TRAFFIC_RECORD;
+
+A_TIMER aptcTimer;
+APTC_TRAFFIC_RECORD aptcTR;
+#endif /* ADAPTIVE_POWER_THROUGHPUT_CONTROL */
+
+int bmienable = 0;
+unsigned int bypasswmi = 0;
+unsigned int debuglevel = 0;
+int tspecCompliance = 1;
+unsigned int busspeedlow = 0;
+unsigned int onebitmode = 0;
+unsigned int skipflash = 0;
+unsigned int wmitimeout = 2;
+unsigned int wlanNodeCaching = 1;
+unsigned int enableuartprint = 1;
+unsigned int logWmiRawMsgs = 0;
+unsigned int enabletimerwar = 0;
+unsigned int mbox_yield_limit = 99;
+int reduce_credit_dribble = 1 + HTC_CONNECT_FLAGS_THRESHOLD_LEVEL_ONE_HALF;
+int allow_trace_signal = 0;
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+unsigned int testmode =0;
+#endif
+
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)
+module_param(bmienable, int, 0644);
+module_param(bypasswmi, int, 0644);
+module_param(debuglevel, int, 0644);
+module_param(tspecCompliance, int, 0644);
+module_param(onebitmode, int, 0644);
+module_param(busspeedlow, int, 0644);
+module_param(skipflash, int, 0644);
+module_param(wmitimeout, int, 0644);
+module_param(wlanNodeCaching, int, 0644);
+module_param(logWmiRawMsgs, int, 0644);
+module_param(enableuartprint, int, 0644);
+module_param(enabletimerwar, int, 0644);
+module_param(mbox_yield_limit, int, 0644);
+module_param(reduce_credit_dribble, int, 0644);
+module_param(allow_trace_signal, int, 0644);
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+module_param(testmode, int, 0644);
+#endif
+#else
+
+#define __user
+/* for linux 2.4 and lower */
+MODULE_PARM(bmienable,"i");
+MODULE_PARM(bypasswmi,"i");
+MODULE_PARM(debuglevel, "i");
+MODULE_PARM(onebitmode,"i");
+MODULE_PARM(busspeedlow, "i");
+MODULE_PARM(skipflash, "i");
+MODULE_PARM(wmitimeout, "i");
+MODULE_PARM(wlanNodeCaching, "i");
+MODULE_PARM(enableuartprint,"i");
+MODULE_PARM(logWmiRawMsgs, "i");
+MODULE_PARM(enabletimerwar,"i");
+MODULE_PARM(mbox_yield_limit,"i");
+MODULE_PARM(reduce_credit_dribble,"i");
+MODULE_PARM(allow_trace_signal,"i");
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+MODULE_PARM(testmode, "i");
+#endif
+#endif
+
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,10)
+/* in 2.6.10 and later this is now a pointer to a uint */
+unsigned int _mboxnum = HTC_MAILBOX_NUM_MAX;
+#define mboxnum &_mboxnum
+#else
+unsigned int mboxnum = HTC_MAILBOX_NUM_MAX;
+#endif
+
+#ifdef DEBUG
+A_UINT32 g_dbg_flags = DBG_DEFAULTS;
+unsigned int debugflags = 0;
+int debugdriver = 1;
+unsigned int debughtc = 128;
+unsigned int debugbmi = 1;
+unsigned int debughif = 2;
+unsigned int resetok = 1;
+unsigned int txcreditsavailable[HTC_MAILBOX_NUM_MAX] = {0};
+unsigned int txcreditsconsumed[HTC_MAILBOX_NUM_MAX] = {0};
+unsigned int txcreditintrenable[HTC_MAILBOX_NUM_MAX] = {0};
+unsigned int txcreditintrenableaggregate[HTC_MAILBOX_NUM_MAX] = {0};
+
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)
+module_param(debugflags, int, 0644);
+module_param(debugdriver, int, 0644);
+module_param(debughtc, int, 0644);
+module_param(debugbmi, int, 0644);
+module_param(debughif, int, 0644);
+module_param(resetok, int, 0644);
+module_param_array(txcreditsavailable, int, mboxnum, 0644);
+module_param_array(txcreditsconsumed, int, mboxnum, 0644);
+module_param_array(txcreditintrenable, int, mboxnum, 0644);
+module_param_array(txcreditintrenableaggregate, int, mboxnum, 0644);
+#else
+/* linux 2.4 and lower */
+MODULE_PARM(debugflags,"i");
+MODULE_PARM(debugdriver, "i");
+MODULE_PARM(debughtc, "i");
+MODULE_PARM(debugbmi, "i");
+MODULE_PARM(debughif, "i");
+MODULE_PARM(resetok, "i");
+MODULE_PARM(txcreditsavailable, "0-3i");
+MODULE_PARM(txcreditsconsumed, "0-3i");
+MODULE_PARM(txcreditintrenable, "0-3i");
+MODULE_PARM(txcreditintrenableaggregate, "0-3i");
+#endif
+
+#endif /* DEBUG */
+
+unsigned int tx_attempt[HTC_MAILBOX_NUM_MAX] = {0};
+unsigned int tx_post[HTC_MAILBOX_NUM_MAX] = {0};
+unsigned int tx_complete[HTC_MAILBOX_NUM_MAX] = {0};
+unsigned int hifBusRequestNumMax = 40;
+unsigned int war23838_disabled = 0;
+#ifdef ADAPTIVE_POWER_THROUGHPUT_CONTROL
+unsigned int enableAPTCHeuristics = 1;
+#endif /* ADAPTIVE_POWER_THROUGHPUT_CONTROL */
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)
+module_param_array(tx_attempt, int, mboxnum, 0644);
+module_param_array(tx_post, int, mboxnum, 0644);
+module_param_array(tx_complete, int, mboxnum, 0644);
+module_param(hifBusRequestNumMax, int, 0644);
+module_param(war23838_disabled, int, 0644);
+#ifdef ADAPTIVE_POWER_THROUGHPUT_CONTROL
+module_param(enableAPTCHeuristics, int, 0644);
+#endif /* ADAPTIVE_POWER_THROUGHPUT_CONTROL */
+#else
+MODULE_PARM(tx_attempt, "0-3i");
+MODULE_PARM(tx_post, "0-3i");
+MODULE_PARM(tx_complete, "0-3i");
+MODULE_PARM(hifBusRequestNumMax, "i");
+MODULE_PARM(war23838_disabled, "i");
+#ifdef ADAPTIVE_POWER_THROUGHPUT_CONTROL
+MODULE_PARM(enableAPTCHeuristics, "i");
+#endif /* ADAPTIVE_POWER_THROUGHPUT_CONTROL */
+#endif
+
+#ifdef BLOCK_TX_PATH_FLAG
+int blocktx = 0;
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)
+module_param(blocktx, int, 0644);
+#else
+MODULE_PARM(blocktx, "i");
+#endif
+#endif /* BLOCK_TX_PATH_FLAG */
+
+// TODO move to arsoft_c
+USER_RSSI_THOLD rssi_map[12];
+
+int reconnect_flag = 0;
+
+/* Function declarations */
+static int ar6000_init_module(void);
+static void ar6000_cleanup_module(void);
+
+int ar6000_init(struct net_device *dev);
+static int ar6000_open(struct net_device *dev);
+static int ar6000_close(struct net_device *dev);
+static void ar6000_init_control_info(AR_SOFTC_T *ar);
+static int ar6000_data_tx(struct sk_buff *skb, struct net_device *dev);
+
+static void ar6000_destroy(struct net_device *dev);
+static void ar6000_detect_error(unsigned long ptr);
+static struct net_device_stats *ar6000_get_stats(struct net_device *dev);
+static struct iw_statistics *ar6000_get_iwstats(struct net_device * dev);
+
+/*
+ * HTC service connection handlers
+ */
+static void ar6000_avail_ev(HTC_HANDLE HTCHandle);
+
+static void ar6000_unavail_ev(void *Instance);
+
+static void ar6000_target_failure(void *Instance, A_STATUS Status);
+
+static void ar6000_rx(void *Context, HTC_PACKET *pPacket);
+
+static void ar6000_rx_refill(void *Context,HTC_ENDPOINT_ID Endpoint);
+
+static void ar6000_tx_complete(void *Context, HTC_PACKET *pPacket);
+
+static void ar6000_tx_queue_full(void *Context, HTC_ENDPOINT_ID Endpoint);
+
+/*
+ * Static variables
+ */
+
+static struct net_device *ar6000_devices[MAX_AR6000];
+extern struct iw_handler_def ath_iw_handler_def;
+DECLARE_WAIT_QUEUE_HEAD(arEvent);
+static void ar6000_cookie_init(AR_SOFTC_T *ar);
+static void ar6000_cookie_cleanup(AR_SOFTC_T *ar);
+static void ar6000_free_cookie(AR_SOFTC_T *ar, struct ar_cookie * cookie);
+static struct ar_cookie *ar6000_alloc_cookie(AR_SOFTC_T *ar);
+static void ar6000_TxDataCleanup(AR_SOFTC_T *ar);
+
+#ifdef USER_KEYS
+static A_STATUS ar6000_reinstall_keys(AR_SOFTC_T *ar,A_UINT8 key_op_ctrl);
+#endif
+
+
+static struct ar_cookie s_ar_cookie_mem[MAX_COOKIE_NUM];
+
+#define HOST_INTEREST_ITEM_ADDRESS(ar, item)    \
+((ar->arTargetType == TARGET_TYPE_AR6001) ?     \
+   AR6001_HOST_INTEREST_ITEM_ADDRESS(item) :    \
+   AR6002_HOST_INTEREST_ITEM_ADDRESS(item))
+
+
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,0)
+/* Looks like we need this for 2.4 kernels */
+static inline void *netdev_priv(struct net_device *dev)
+{
+    return(dev->priv);
+}
+#endif
+
+/* Debug log support */
+
+/*
+ * Flag to govern whether the debug logs should be parsed in the kernel
+ * or reported to the application.
+ */
+#define REPORT_DEBUG_LOGS_TO_APP
+
+A_STATUS
+ar6000_set_host_app_area(AR_SOFTC_T *ar)
+{
+    A_UINT32 address, data;
+    struct host_app_area_s host_app_area;
+
+    /* Fetch the address of the host_app_area_s instance in the host interest area */
+    address = HOST_INTEREST_ITEM_ADDRESS(ar, hi_app_host_interest);
+    if (ar6000_ReadRegDiag(ar->arHifDevice, &address, &data) != A_OK) {
+        return A_ERROR;
+    }
+    address = data;
+    host_app_area.wmi_protocol_ver = WMI_PROTOCOL_VERSION;
+    if (ar6000_WriteDataDiag(ar->arHifDevice, address, 
+                             (A_UCHAR *)&host_app_area, 
+                             sizeof(struct host_app_area_s)) != A_OK)
+    {
+        return A_ERROR;
+    }
+
+    return A_OK;
+}
+
+A_UINT32
+dbglog_get_debug_hdr_ptr(AR_SOFTC_T *ar)
+{
+    A_UINT32 param;
+    A_UINT32 address;
+    A_STATUS status;
+
+    address = HOST_INTEREST_ITEM_ADDRESS(ar, hi_dbglog_hdr);
+    if ((status = ar6000_ReadDataDiag(ar->arHifDevice, address,
+                                      (A_UCHAR *)&param, 4)) != A_OK)
+    {
+        param = 0;
+    }
+
+    return param;
+}
+
+/*
+ * The dbglog module has been initialized. Its ok to access the relevant
+ * data stuctures over the diagnostic window.
+ */
+void
+ar6000_dbglog_init_done(AR_SOFTC_T *ar)
+{
+    ar->dbglog_init_done = TRUE;
+}
+
+A_UINT32
+dbglog_get_debug_fragment(A_INT8 *datap, A_UINT32 len, A_UINT32 limit)
+{
+    A_INT32 *buffer;
+    A_UINT32 count;
+    A_UINT32 numargs;
+    A_UINT32 length;
+    A_UINT32 fraglen;
+
+    count = fraglen = 0;
+    buffer = (A_INT32 *)datap;
+    length = (limit >> 2);
+
+    if (len <= limit) {
+        fraglen = len;
+    } else {
+        while (count < length) {
+            numargs = DBGLOG_GET_NUMARGS(buffer[count]);
+            fraglen = (count << 2);
+            count += numargs + 1;
+        }
+    }
+
+    return fraglen;
+}
+
+void
+dbglog_parse_debug_logs(A_INT8 *datap, A_UINT32 len)
+{
+    A_INT32 *buffer;
+    A_UINT32 count;
+    A_UINT32 timestamp;
+    A_UINT32 debugid;
+    A_UINT32 moduleid;
+    A_UINT32 numargs;
+    A_UINT32 length;
+
+    count = 0;
+    buffer = (A_INT32 *)datap;
+    length = (len >> 2);
+    while (count < length) {
+        debugid = DBGLOG_GET_DBGID(buffer[count]);
+        moduleid = DBGLOG_GET_MODULEID(buffer[count]);
+        numargs = DBGLOG_GET_NUMARGS(buffer[count]);
+        timestamp = DBGLOG_GET_TIMESTAMP(buffer[count]);
+        switch (numargs) {
+            case 0:
+            AR_DEBUG_PRINTF("%d %d (%d)\n", moduleid, debugid, timestamp);
+            break;
+
+            case 1:
+            AR_DEBUG_PRINTF("%d %d (%d): 0x%x\n", moduleid, debugid,
+                            timestamp, buffer[count+1]);
+            break;
+
+            case 2:
+            AR_DEBUG_PRINTF("%d %d (%d): 0x%x, 0x%x\n", moduleid, debugid,
+                            timestamp, buffer[count+1], buffer[count+2]);
+            break;
+
+            default:
+            AR_DEBUG_PRINTF("Invalid args: %d\n", numargs);
+        }
+        count += numargs + 1;
+    }
+}
+
+int
+ar6000_dbglog_get_debug_logs(AR_SOFTC_T *ar)
+{
+    struct dbglog_hdr_s debug_hdr;
+    struct dbglog_buf_s debug_buf;
+    A_UINT32 address;
+    A_UINT32 length;
+    A_UINT32 dropped;
+    A_UINT32 firstbuf;
+    A_UINT32 debug_hdr_ptr;
+
+    if (!ar->dbglog_init_done) return A_ERROR;
+
+        
+    AR6000_SPIN_LOCK(&ar->arLock, 0);
+    
+    if (ar->dbgLogFetchInProgress) {
+        AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+        return A_EBUSY;    
+    }
+    
+        /* block out others */
+    ar->dbgLogFetchInProgress = TRUE;
+        
+    AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+              
+    debug_hdr_ptr = dbglog_get_debug_hdr_ptr(ar);
+    printk("debug_hdr_ptr: 0x%x\n", debug_hdr_ptr);
+
+    /* Get the contents of the ring buffer */
+    if (debug_hdr_ptr) {
+        address = debug_hdr_ptr;
+        length = sizeof(struct dbglog_hdr_s);
+        ar6000_ReadDataDiag(ar->arHifDevice, address,
+                            (A_UCHAR *)&debug_hdr, length);
+        address = (A_UINT32)debug_hdr.dbuf;
+        firstbuf = address;
+        dropped = debug_hdr.dropped;
+        length = sizeof(struct dbglog_buf_s);
+        ar6000_ReadDataDiag(ar->arHifDevice, address,
+                            (A_UCHAR *)&debug_buf, length);
+
+        do {
+            address = (A_UINT32)debug_buf.buffer;
+            length = debug_buf.length;
+            if ((length) && (debug_buf.length <= debug_buf.bufsize)) {
+                /* Rewind the index if it is about to overrun the buffer */
+                if (ar->log_cnt > (DBGLOG_HOST_LOG_BUFFER_SIZE - length)) {
+                    ar->log_cnt = 0;
+                }
+                if(A_OK != ar6000_ReadDataDiag(ar->arHifDevice, address,
+                                    (A_UCHAR *)&ar->log_buffer[ar->log_cnt], length))
+                {
+                    break;
+                }
+                ar6000_dbglog_event(ar, dropped, &ar->log_buffer[ar->log_cnt], length);
+                ar->log_cnt += length;
+            } else {
+                AR_DEBUG_PRINTF("Length: %d (Total size: %d)\n",
+                                debug_buf.length, debug_buf.bufsize);
+            }
+
+            address = (A_UINT32)debug_buf.next;
+            length = sizeof(struct dbglog_buf_s);
+            if(A_OK != ar6000_ReadDataDiag(ar->arHifDevice, address,
+                                (A_UCHAR *)&debug_buf, length))
+            {
+                break;
+            }
+
+        } while (address != firstbuf);
+    }
+
+    ar->dbgLogFetchInProgress = FALSE;
+    
+    return A_OK;
+}
+
+void
+ar6000_dbglog_event(AR_SOFTC_T *ar, A_UINT32 dropped,
+                    A_INT8 *buffer, A_UINT32 length)
+{
+#ifdef REPORT_DEBUG_LOGS_TO_APP
+    #define MAX_WIRELESS_EVENT_SIZE 252
+    /*
+     * Break it up into chunks of MAX_WIRELESS_EVENT_SIZE bytes of messages.
+     * There seems to be a limitation on the length of message that could be
+     * transmitted to the user app via this mechanism.
+     */
+    A_UINT32 send, sent;
+
+    sent = 0;
+    send = dbglog_get_debug_fragment(&buffer[sent], length - sent,
+                                     MAX_WIRELESS_EVENT_SIZE);
+    while (send) {
+        ar6000_send_event_to_app(ar, WMIX_DBGLOG_EVENTID, &buffer[sent], send);
+        sent += send;
+        send = dbglog_get_debug_fragment(&buffer[sent], length - sent,
+                                         MAX_WIRELESS_EVENT_SIZE);
+    }
+#else
+    AR_DEBUG_PRINTF("Dropped logs: 0x%x\nDebug info length: %d\n",
+                    dropped, length);
+
+    /* Interpret the debug logs */
+    dbglog_parse_debug_logs(buffer, length);
+#endif /* REPORT_DEBUG_LOGS_TO_APP */
+}
+
+
+
+static int __init
+ar6000_init_module(void)
+{
+    static int probed = 0;
+    A_STATUS status;
+    HTC_INIT_INFO initInfo;
+
+    A_MEMZERO(&initInfo,sizeof(initInfo));
+    initInfo.AddInstance = ar6000_avail_ev;
+    initInfo.DeleteInstance = ar6000_unavail_ev;
+    initInfo.TargetFailure = ar6000_target_failure;
+
+
+#ifdef DEBUG
+    /* Set the debug flags if specified at load time */
+    if(debugflags != 0)
+    {
+        g_dbg_flags = debugflags;
+    }
+#endif
+
+    if (probed) {
+        return -ENODEV;
+    }
+    probed++;
+
+#ifdef ADAPTIVE_POWER_THROUGHPUT_CONTROL
+    memset(&aptcTR, 0, sizeof(APTC_TRAFFIC_RECORD));
+#endif /* ADAPTIVE_POWER_THROUGHPUT_CONTROL */
+
+#ifdef CONFIG_HOST_GPIO_SUPPORT
+    ar6000_gpio_init();
+#endif /* CONFIG_HOST_GPIO_SUPPORT */
+
+    status = HTCInit(&initInfo);
+    if(status != A_OK)
+        return -ENODEV;
+
+    return 0;
+}
+
+static void __exit
+ar6000_cleanup_module(void)
+{
+    int i = 0;
+    struct net_device *ar6000_netdev;
+
+#ifdef ADAPTIVE_POWER_THROUGHPUT_CONTROL
+    /* Delete the Adaptive Power Control timer */
+    if (timer_pending(&aptcTimer)) {
+        del_timer_sync(&aptcTimer);
+    }
+#endif /* ADAPTIVE_POWER_THROUGHPUT_CONTROL */
+
+    for (i=0; i < MAX_AR6000; i++) {
+        if (ar6000_devices[i] != NULL) {
+            ar6000_netdev = ar6000_devices[i];
+            ar6000_devices[i] = NULL;
+            ar6000_destroy(ar6000_netdev);
+        }
+    }
+
+        /* shutting down HTC will cause the HIF layer to detach from the
+         * underlying bus driver which will cause the subsequent deletion of
+         * all HIF and HTC instances */
+    HTCShutDown();
+
+    AR_DEBUG_PRINTF("ar6000_cleanup: success\n");
+}
+
+#ifdef ADAPTIVE_POWER_THROUGHPUT_CONTROL
+void
+aptcTimerHandler(unsigned long arg)
+{
+    A_UINT32 numbytes;
+    A_UINT32 throughput;
+    AR_SOFTC_T *ar;
+    A_STATUS status;
+
+    ar = (AR_SOFTC_T *)arg;
+    A_ASSERT(ar != NULL);
+    A_ASSERT(!timer_pending(&aptcTimer));
+
+    AR6000_SPIN_LOCK(&ar->arLock, 0);
+
+    /* Get the number of bytes transferred */
+    numbytes = aptcTR.bytesTransmitted + aptcTR.bytesReceived;
+    aptcTR.bytesTransmitted = aptcTR.bytesReceived = 0;
+
+    /* Calculate and decide based on throughput thresholds */
+    throughput = ((numbytes * 8)/APTC_TRAFFIC_SAMPLING_INTERVAL); /* Kbps */
+    if (throughput < APTC_LOWER_THROUGHPUT_THRESHOLD) {
+        /* Enable Sleep and delete the timer */
+        A_ASSERT(ar->arWmiReady == TRUE);
+        AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+        status = wmi_powermode_cmd(ar->arWmi, REC_POWER);
+        AR6000_SPIN_LOCK(&ar->arLock, 0);
+        A_ASSERT(status == A_OK);
+        aptcTR.timerScheduled = FALSE;
+    } else {
+        A_TIMEOUT_MS(&aptcTimer, APTC_TRAFFIC_SAMPLING_INTERVAL, 0);
+    }
+
+    AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+}
+#endif /* ADAPTIVE_POWER_THROUGHPUT_CONTROL */
+
+
+
+/* set HTC block size, assume BMI is already initialized */
+A_STATUS ar6000_SetHTCBlockSize(AR_SOFTC_T *ar)
+{
+    A_STATUS status;
+    A_UINT32 blocksizes[HTC_MAILBOX_NUM_MAX];
+
+    do {
+            /* get the block sizes */
+        status = HIFConfigureDevice(ar->arHifDevice, HIF_DEVICE_GET_MBOX_BLOCK_SIZE,
+                                    blocksizes, sizeof(blocksizes));
+
+        if (A_FAILED(status)) {
+            AR_DEBUG_PRINTF("Failed to get block size info from HIF layer...\n");
+            break;
+        }
+            /* note: we actually get the block size for mailbox 1, for SDIO the block
+             * size on mailbox 0 is artificially set to 1 */
+            /* must be a power of 2 */
+        A_ASSERT((blocksizes[1] & (blocksizes[1] - 1)) == 0);
+
+            /* set the host interest area for the block size */
+        status = BMIWriteMemory(ar->arHifDevice,
+                                HOST_INTEREST_ITEM_ADDRESS(ar, hi_mbox_io_block_sz),
+                                (A_UCHAR *)&blocksizes[1],
+                                4);
+
+        if (A_FAILED(status)) {
+            AR_DEBUG_PRINTF("BMIWriteMemory for IO block size failed \n");
+            break;
+        }
+
+        AR_DEBUG_PRINTF("Block Size Set: %d (target address:0x%X)\n",
+                blocksizes[1], HOST_INTEREST_ITEM_ADDRESS(ar, hi_mbox_io_block_sz));
+
+            /* set the host interest area for the mbox ISR yield limit */
+        status = BMIWriteMemory(ar->arHifDevice,
+                                HOST_INTEREST_ITEM_ADDRESS(ar, hi_mbox_isr_yield_limit),
+                                (A_UCHAR *)&mbox_yield_limit,
+                                4);
+
+        if (A_FAILED(status)) {
+            AR_DEBUG_PRINTF("BMIWriteMemory for yield limit failed \n");
+            break;
+        }
+
+    } while (FALSE);
+
+    return status;
+}
+
+/*
+ * HTC Event handlers
+ */
+static void
+ar6000_avail_ev(HTC_HANDLE HTCHandle)
+{
+    int i;
+    struct net_device *dev;
+    AR_SOFTC_T *ar;
+    int device_index = 0;
+
+    AR_DEBUG_PRINTF("ar6000_available\n");
+
+    for (i=0; i < MAX_AR6000; i++) {
+        if (ar6000_devices[i] == NULL) {
+            break;
+        }
+    }
+
+    if (i == MAX_AR6000) {
+        AR_DEBUG_PRINTF("ar6000_available: max devices reached\n");
+        return;
+    }
+
+    /* Save this. It gives a bit better readability especially since */
+    /* we use another local "i" variable below.                      */
+    device_index = i;
+
+    A_ASSERT(HTCHandle != NULL);
+
+    dev = alloc_etherdev(sizeof(AR_SOFTC_T));
+    if (dev == NULL) {
+        AR_DEBUG_PRINTF("ar6000_available: can't alloc etherdev\n");
+        return;
+    }
+    SET_MODULE_OWNER(dev);
+
+    ether_setup(dev);
+
+    if (dev->priv == NULL) {
+        printk(KERN_CRIT "ar6000_available: Could not allocate memory\n");
+        return;
+    }
+
+    A_MEMZERO(dev->priv, sizeof(AR_SOFTC_T));
+
+    ar                       = (AR_SOFTC_T *)dev->priv;
+    ar->arNetDev             = dev;
+    ar->arHtcTarget          = HTCHandle;
+    ar->arHifDevice          = HTCGetHifDevice(HTCHandle);
+    ar->arWlanState          = WLAN_ENABLED;
+    ar->arDeviceIndex        = device_index;
+
+    A_INIT_TIMER(&ar->arHBChallengeResp.timer, ar6000_detect_error, dev);
+    ar->arHBChallengeResp.seqNum = 0;
+    ar->arHBChallengeResp.outstanding = FALSE;
+    ar->arHBChallengeResp.missCnt = 0;
+    ar->arHBChallengeResp.frequency = AR6000_HB_CHALLENGE_RESP_FREQ_DEFAULT;
+    ar->arHBChallengeResp.missThres = AR6000_HB_CHALLENGE_RESP_MISS_THRES_DEFAULT;
+
+    ar6000_init_control_info(ar);
+    init_waitqueue_head(&arEvent);
+    sema_init(&ar->arSem, 1);
+
+#ifdef ADAPTIVE_POWER_THROUGHPUT_CONTROL
+    A_INIT_TIMER(&aptcTimer, aptcTimerHandler, ar);
+#endif /* ADAPTIVE_POWER_THROUGHPUT_CONTROL */
+
+    /*
+     * If requested, perform some magic which requires no cooperation from
+     * the Target.  It causes the Target to ignore flash and execute to the
+     * OS from ROM.
+     *
+     * This is intended to support recovery from a corrupted flash on Targets
+     * that support flash.
+     */
+    if (skipflash)
+    {
+        ar6000_reset_device_skipflash(ar->arHifDevice);
+            }
+
+    BMIInit();
+    {
+        struct bmi_target_info targ_info;
+
+        if (BMIGetTargetInfo(ar->arHifDevice, &targ_info) != A_OK) {
+            return;
+        }
+
+        ar->arVersion.target_ver = targ_info.target_ver;
+        ar->arTargetType = targ_info.target_type;
+    }
+
+    if (enableuartprint) {
+        A_UINT32 param;
+        param = 1;
+        if (BMIWriteMemory(ar->arHifDevice,
+                           HOST_INTEREST_ITEM_ADDRESS(ar, hi_serial_enable),
+                           (A_UCHAR *)&param,
+                           4)!= A_OK)
+        {
+             AR_DEBUG_PRINTF("BMIWriteMemory for enableuartprint failed \n");
+             return ;
+        }
+        AR_DEBUG_PRINTF("Serial console prints enabled\n");
+    }
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+    if(testmode) {
+        ar->arTargetMode = AR6000_TCMD_MODE;
+    }else {
+        ar->arTargetMode = AR6000_WLAN_MODE;
+    }
+#endif
+    if (enabletimerwar) {
+        A_UINT32 param;
+
+        if (BMIReadMemory(ar->arHifDevice,
+            HOST_INTEREST_ITEM_ADDRESS(ar, hi_option_flag),
+            (A_UCHAR *)&param,
+            4)!= A_OK)
+        {
+            AR_DEBUG_PRINTF("BMIReadMemory for enabletimerwar failed \n");
+            return;
+        }
+
+        param |= HI_OPTION_TIMER_WAR;
+
+        if (BMIWriteMemory(ar->arHifDevice,
+            HOST_INTEREST_ITEM_ADDRESS(ar, hi_option_flag),
+            (A_UCHAR *)&param,
+            4) != A_OK)
+        {
+            AR_DEBUG_PRINTF("BMIWriteMemory for enabletimerwar failed \n");
+            return;
+        }
+        AR_DEBUG_PRINTF("Timer WAR enabled\n");
+    }
+
+
+        /* since BMIInit is called in the driver layer, we have to set the block
+         * size here for the target */
+
+    if (A_FAILED(ar6000_SetHTCBlockSize(ar))) {
+        return;
+    }
+
+    spin_lock_init(&ar->arLock);
+
+    /* Don't install the init function if BMI is requested */
+    if(!bmienable)
+    {
+        dev->init = ar6000_init;
+    } else {
+        AR_DEBUG_PRINTF(" BMI enabled \n");
+    }
+
+    dev->open = &ar6000_open;
+    dev->stop = &ar6000_close;
+    dev->hard_start_xmit = &ar6000_data_tx;
+    dev->get_stats = &ar6000_get_stats;
+
+    /* dev->tx_timeout = ar6000_tx_timeout; */
+    dev->do_ioctl = &ar6000_ioctl_dispatcher;
+    dev->watchdog_timeo = AR6000_TX_TIMEOUT;
+    ar6000_ioctl_iwsetup(&ath_iw_handler_def);
+    dev->wireless_handlers = &ath_iw_handler_def;
+
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,19)
+    dev->get_wireless_stats = ar6000_get_iwstats; /*Displayed via proc fs */
+#else
+    ath_iw_handler_def.get_wireless_stats = ar6000_get_iwstats; /*Displayed via proc fs */
+#endif
+
+    /*
+     * We need the OS to provide us with more headroom in order to
+     * perform dix to 802.3, WMI header encap, and the HTC header
+     */
+    dev->hard_header_len = ETH_HLEN + sizeof(ATH_LLC_SNAP_HDR) +
+        sizeof(WMI_DATA_HDR) + HTC_HEADER_LEN;
+
+    /* This runs the init function */
+    if (register_netdev(dev)) {
+        AR_DEBUG_PRINTF("ar6000_avail: register_netdev failed\n");
+        ar6000_destroy(dev);
+        return;
+    }
+
+    HTCSetInstance(ar->arHtcTarget, ar);
+
+    /* We only register the device in the global list if we succeed. */
+    /* If the device is in the global list, it will be destroyed     */
+    /* when the module is unloaded.                                  */
+    ar6000_devices[device_index] = dev;
+
+    AR_DEBUG_PRINTF("ar6000_avail: name=%s htcTarget=0x%x, dev=0x%x (%d), ar=0x%x\n",
+                    dev->name, (A_UINT32)HTCHandle, (A_UINT32)dev, device_index,
+                    (A_UINT32)ar);
+}
+
+static void ar6000_target_failure(void *Instance, A_STATUS Status)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)Instance;
+    WMI_TARGET_ERROR_REPORT_EVENT errEvent;
+    static A_BOOL sip = FALSE;
+
+    if (Status != A_OK) {
+        if (timer_pending(&ar->arHBChallengeResp.timer)) {
+            A_UNTIMEOUT(&ar->arHBChallengeResp.timer);
+        }
+
+        /* try dumping target assertion information (if any) */
+        ar6000_dump_target_assert_info(ar->arHifDevice,ar->arTargetType);
+        
+        /*
+         * Fetch the logs from the target via the diagnostic
+         * window.
+         */
+        ar6000_dbglog_get_debug_logs(ar);
+
+        /* Report the error only once */
+        if (!sip) {
+            sip = TRUE;
+            errEvent.errorVal = WMI_TARGET_COM_ERR |
+                                WMI_TARGET_FATAL_ERR;
+            ar6000_send_event_to_app(ar, WMI_ERROR_REPORT_EVENTID,
+                                     (A_UINT8 *)&errEvent,
+                                     sizeof(WMI_TARGET_ERROR_REPORT_EVENT));
+        }
+    }
+}
+
+static void
+ar6000_unavail_ev(void *Instance)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)Instance;
+        /* NULL out it's entry in the global list */
+    ar6000_devices[ar->arDeviceIndex] = NULL;
+    ar6000_destroy(ar->arNetDev);
+}
+
+/*
+ * We need to differentiate between the surprise and planned removal of the
+ * device because of the following consideration:
+ * - In case of surprise removal, the hcd already frees up the pending
+ *   for the device and hence there is no need to unregister the function
+ *   driver inorder to get these requests. For planned removal, the function
+ *   driver has to explictly unregister itself to have the hcd return all the
+ *   pending requests before the data structures for the devices are freed up.
+ *   Note that as per the current implementation, the function driver will
+ *   end up releasing all the devices since there is no API to selectively
+ *   release a particular device.
+ * - Certain commands issued to the target can be skipped for surprise
+ *   removal since they will anyway not go through.
+ */
+static void
+ar6000_destroy(struct net_device *dev)
+{
+    AR_SOFTC_T *ar;
+
+    AR_DEBUG_PRINTF("+ar6000_destroy \n");
+
+    if((dev == NULL) || ((ar = netdev_priv(dev)) == NULL))
+    {
+        AR_DEBUG_PRINTF("%s(): Failed to get device structure.\n", __func__);
+        return;
+    }
+
+    /* Stop the transmit queues */
+    netif_stop_queue(dev);
+
+    /* Disable the target and the interrupts associated with it */
+    if (ar->arWmiReady == TRUE)
+    {
+        if (!bypasswmi)
+        {
+            if (ar->arConnected == TRUE || ar->arConnectPending == TRUE)
+            {
+                AR_DEBUG_PRINTF("%s(): Disconnect\n", __func__);
+                AR6000_SPIN_LOCK(&ar->arLock, 0);
+                ar6000_init_profile_info(ar);
+                AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+                wmi_disconnect_cmd(ar->arWmi);
+            }
+
+            ar6000_dbglog_get_debug_logs(ar);
+            ar->arWmiReady  = FALSE;
+            ar->arConnected = FALSE;
+            ar->arConnectPending = FALSE;
+            wmi_shutdown(ar->arWmi);
+            ar->arWmiEnabled = FALSE;
+            ar->arWmi = NULL;
+            ar->arWlanState = WLAN_ENABLED;
+#ifdef USER_KEYS
+            ar->user_savedkeys_stat = USER_SAVEDKEYS_STAT_INIT;
+            ar->user_key_ctrl      = 0;
+#endif
+        }
+
+         AR_DEBUG_PRINTF("%s(): WMI stopped\n", __func__);
+    }
+    else
+    {
+        AR_DEBUG_PRINTF("%s(): WMI not ready 0x%08x 0x%08x\n",
+            __func__, (unsigned int) ar, (unsigned int) ar->arWmi);
+
+        /* Shut down WMI if we have started it */
+        if(ar->arWmiEnabled == TRUE)
+        {
+            AR_DEBUG_PRINTF("%s(): Shut down WMI\n", __func__);
+            wmi_shutdown(ar->arWmi);
+            ar->arWmiEnabled = FALSE;
+            ar->arWmi = NULL;
+        }
+    }
+
+    /* stop HTC */
+    HTCStop(ar->arHtcTarget);
+
+    /* set the instance to NULL so we do not get called back on remove incase we
+     * we're explicity destroyed by module unload */
+    HTCSetInstance(ar->arHtcTarget, NULL);
+
+    if (resetok) {
+        /* try to reset the device if we can
+         * The driver may have been configure NOT to reset the target during
+         * a debug session */
+        AR_DEBUG_PRINTF(" Attempting to reset target on instance destroy.... \n");
+        ar6000_reset_device(ar->arHifDevice, ar->arTargetType);
+    } else {
+        AR_DEBUG_PRINTF(" Host does not want target reset. \n");
+    }
+
+       /* Done with cookies */
+    ar6000_cookie_cleanup(ar);
+
+    /* Cleanup BMI */
+    BMIInit();
+
+    /* Clear the tx counters */
+    memset(tx_attempt, 0, sizeof(tx_attempt));
+    memset(tx_post, 0, sizeof(tx_post));
+    memset(tx_complete, 0, sizeof(tx_complete));
+
+
+    /* Free up the device data structure */
+    unregister_netdev(dev);
+#ifndef free_netdev
+    kfree(dev);
+#else
+    free_netdev(dev);
+#endif
+
+    AR_DEBUG_PRINTF("-ar6000_destroy \n");
+}
+
+static void ar6000_detect_error(unsigned long ptr)
+{
+    struct net_device *dev = (struct net_device *)ptr;
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_TARGET_ERROR_REPORT_EVENT errEvent;
+
+    AR6000_SPIN_LOCK(&ar->arLock, 0);
+
+    if (ar->arHBChallengeResp.outstanding) {
+        ar->arHBChallengeResp.missCnt++;
+    } else {
+        ar->arHBChallengeResp.missCnt = 0;
+    }
+
+    if (ar->arHBChallengeResp.missCnt > ar->arHBChallengeResp.missThres) {
+        /* Send Error Detect event to the application layer and do not reschedule the error detection module timer */
+        ar->arHBChallengeResp.missCnt = 0;
+        ar->arHBChallengeResp.seqNum = 0;
+        errEvent.errorVal = WMI_TARGET_COM_ERR | WMI_TARGET_FATAL_ERR;
+        AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+        ar6000_send_event_to_app(ar, WMI_ERROR_REPORT_EVENTID,
+                                 (A_UINT8 *)&errEvent,
+                                 sizeof(WMI_TARGET_ERROR_REPORT_EVENT));
+        return;
+    }
+
+    /* Generate the sequence number for the next challenge */
+    ar->arHBChallengeResp.seqNum++;
+    ar->arHBChallengeResp.outstanding = TRUE;
+
+    AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+
+    /* Send the challenge on the control channel */
+    if (wmi_get_challenge_resp_cmd(ar->arWmi, ar->arHBChallengeResp.seqNum, DRV_HB_CHALLENGE) != A_OK) {
+        AR_DEBUG_PRINTF("Unable to send heart beat challenge\n");
+    }
+
+
+    /* Reschedule the timer for the next challenge */
+    A_TIMEOUT_MS(&ar->arHBChallengeResp.timer, ar->arHBChallengeResp.frequency * 1000, 0);
+}
+
+void ar6000_init_profile_info(AR_SOFTC_T *ar)
+{
+    ar->arSsidLen            = 0;
+    A_MEMZERO(ar->arSsid, sizeof(ar->arSsid));
+    ar->arNetworkType        = INFRA_NETWORK;
+    ar->arDot11AuthMode      = OPEN_AUTH;
+    ar->arAuthMode           = NONE_AUTH;
+    ar->arPairwiseCrypto     = NONE_CRYPT;
+    ar->arPairwiseCryptoLen  = 0;
+    ar->arGroupCrypto        = NONE_CRYPT;
+    ar->arGroupCryptoLen     = 0;
+    A_MEMZERO(ar->arWepKeyList, sizeof(ar->arWepKeyList));
+    A_MEMZERO(ar->arReqBssid, sizeof(ar->arReqBssid));
+    A_MEMZERO(ar->arBssid, sizeof(ar->arBssid));
+    ar->arBssChannel = 0;
+}
+
+static void
+ar6000_init_control_info(AR_SOFTC_T *ar)
+{
+    ar->arWmiEnabled         = FALSE;
+    ar6000_init_profile_info(ar);
+    ar->arDefTxKeyIndex      = 0;
+    A_MEMZERO(ar->arWepKeyList, sizeof(ar->arWepKeyList));
+    ar->arChannelHint        = 0;
+    ar->arListenInterval     = MAX_LISTEN_INTERVAL;
+    ar->arVersion.host_ver   = AR6K_SW_VERSION;
+    ar->arRssi               = 0;
+    ar->arTxPwr              = 0;
+    ar->arTxPwrSet           = FALSE;
+    ar->arSkipScan           = 0;
+    ar->arBeaconInterval     = 0;
+    ar->arBitRate            = 0;
+    ar->arMaxRetries         = 0;
+    ar->arWmmEnabled         = TRUE;
+}
+
+static int
+ar6000_open(struct net_device *dev)
+{
+    /* Wake up the queues */
+    netif_wake_queue(dev);
+
+    return 0;
+}
+
+static int
+ar6000_close(struct net_device *dev)
+{
+    netif_stop_queue(dev);
+
+    return 0;
+}
+
+/* connect to a service */
+static A_STATUS ar6000_connectservice(AR_SOFTC_T               *ar,
+                                      HTC_SERVICE_CONNECT_REQ  *pConnect,
+                                      WMI_PRI_STREAM_ID        WmiStreamID,
+                                      char                     *pDesc)
+{
+    A_STATUS                 status;
+    HTC_SERVICE_CONNECT_RESP response;
+
+    do {
+
+        A_MEMZERO(&response,sizeof(response));
+
+        status = HTCConnectService(ar->arHtcTarget,
+                                   pConnect,
+                                   &response);
+
+        if (A_FAILED(status)) {
+            AR_DEBUG_PRINTF(" Failed to connect to %s service status:%d \n", pDesc, status);
+            break;
+        }
+
+        if (WmiStreamID == WMI_NOT_MAPPED) {
+                /* done */
+            break;
+        }
+
+            /* set endpoint mapping for the WMI stream in the driver layer */
+        arSetWMIStream2EndpointIDMap(ar,WmiStreamID,response.Endpoint);
+
+    } while (FALSE);
+
+    return status;
+}
+
+static void ar6000_TxDataCleanup(AR_SOFTC_T *ar)
+{
+        /* flush all the data (non-control) streams 
+         * we only flush packets that are tagged as data, we leave any control packets that
+         * were in the TX queues alone */
+    HTCFlushEndpoint(ar->arHtcTarget,
+                     arWMIStream2EndpointID(ar,WMI_BEST_EFFORT_PRI), 
+                     AR6K_DATA_PKT_TAG);
+    HTCFlushEndpoint(ar->arHtcTarget,
+                     arWMIStream2EndpointID(ar,WMI_LOW_PRI), 
+                     AR6K_DATA_PKT_TAG);
+    HTCFlushEndpoint(ar->arHtcTarget,
+                     arWMIStream2EndpointID(ar,WMI_HIGH_PRI),
+                     AR6K_DATA_PKT_TAG);
+    HTCFlushEndpoint(ar->arHtcTarget,
+                     arWMIStream2EndpointID(ar,WMI_HIGHEST_PRI),
+                     AR6K_DATA_PKT_TAG);
+}
+
+/* This function does one time initialization for the lifetime of the device */
+int ar6000_init(struct net_device *dev)
+{
+    AR_SOFTC_T *ar;
+    A_STATUS    status;
+    A_INT32     timeleft;
+
+    if((ar = netdev_priv(dev)) == NULL)
+    {
+        return(-EIO);
+    }
+
+    /* Do we need to finish the BMI phase */
+    if(BMIDone(ar->arHifDevice) != A_OK)
+    {
+        return -EIO;
+    }
+
+    if (!bypasswmi)
+    {
+#if 0 /* TBDXXX */
+        if (ar->arVersion.host_ver != ar->arVersion.target_ver) {
+            A_PRINTF("WARNING: Host version 0x%x does not match Target "
+                    " version 0x%x!\n",
+                    ar->arVersion.host_ver, ar->arVersion.target_ver);
+        }
+#endif
+
+        /* Indicate that WMI is enabled (although not ready yet) */
+        ar->arWmiEnabled = TRUE;
+        if ((ar->arWmi = wmi_init((void *) ar)) == NULL)
+        {
+            AR_DEBUG_PRINTF("%s() Failed to initialize WMI.\n", __func__);
+            return(-EIO);
+        }
+
+        AR_DEBUG_PRINTF("%s() Got WMI @ 0x%08x.\n", __func__,
+            (unsigned int) ar->arWmi);
+    }
+
+    do {
+        HTC_SERVICE_CONNECT_REQ connect;
+
+            /* the reason we have to wait for the target here is that the driver layer
+             * has to init BMI in order to set the host block size,
+             */
+        status = HTCWaitTarget(ar->arHtcTarget);
+
+        if (A_FAILED(status)) {
+            break;
+        }
+
+        A_MEMZERO(&connect,sizeof(connect));
+            /* meta data is unused for now */
+        connect.pMetaData = NULL;
+        connect.MetaDataLength = 0;
+            /* these fields are the same for all service endpoints */
+        connect.EpCallbacks.pContext = ar;
+        connect.EpCallbacks.EpTxComplete = ar6000_tx_complete;
+        connect.EpCallbacks.EpRecv = ar6000_rx;
+        connect.EpCallbacks.EpRecvRefill = ar6000_rx_refill;
+        connect.EpCallbacks.EpSendFull = ar6000_tx_queue_full;
+            /* set the max queue depth so that our ar6000_tx_queue_full handler gets called.
+             * Linux has the peculiarity of not providing flow control between the
+             * NIC and the network stack. There is no API to indicate that a TX packet
+             * was sent which could provide some back pressure to the network stack.
+             * Under linux you would have to wait till the network stack consumed all sk_buffs
+             * before any back-flow kicked in. Which isn't very friendly.
+             * So we have to manage this ourselves */
+        connect.MaxSendQueueDepth = 32;
+
+            /* connect to control service */
+        connect.ServiceID = WMI_CONTROL_SVC;
+        status = ar6000_connectservice(ar,
+                                       &connect,
+                                       WMI_CONTROL_PRI,
+                                       "WMI CONTROL");
+        if (A_FAILED(status)) {
+            break;
+        }
+
+            /* for the remaining data services set the connection flag to reduce dribbling,
+             * if configured to do so */
+        if (reduce_credit_dribble) {
+            connect.ConnectionFlags |= HTC_CONNECT_FLAGS_REDUCE_CREDIT_DRIBBLE;
+            /* the credit dribble trigger threshold is (reduce_credit_dribble - 1) for a value
+             * of 0-3 */
+            connect.ConnectionFlags &= ~HTC_CONNECT_FLAGS_THRESHOLD_LEVEL_MASK;
+            connect.ConnectionFlags |=
+                        ((A_UINT16)reduce_credit_dribble - 1) & HTC_CONNECT_FLAGS_THRESHOLD_LEVEL_MASK;
+        }
+            /* connect to best-effort service */
+        connect.ServiceID = WMI_DATA_BE_SVC;
+
+        status = ar6000_connectservice(ar,
+                                       &connect,
+                                       WMI_BEST_EFFORT_PRI,
+                                       "WMI DATA BE");
+        if (A_FAILED(status)) {
+            break;
+        }
+
+            /* connect to back-ground
+             * map this to WMI LOW_PRI */
+        connect.ServiceID = WMI_DATA_BK_SVC;
+        status = ar6000_connectservice(ar,
+                                       &connect,
+                                       WMI_LOW_PRI,
+                                       "WMI DATA BK");
+        if (A_FAILED(status)) {
+            break;
+        }
+
+            /* connect to Video service, map this to
+             * to HI PRI */
+        connect.ServiceID = WMI_DATA_VI_SVC;
+        status = ar6000_connectservice(ar,
+                                       &connect,
+                                       WMI_HIGH_PRI,
+                                       "WMI DATA VI");
+        if (A_FAILED(status)) {
+            break;
+        }
+
+            /* connect to VO service, this is currently not
+             * mapped to a WMI priority stream due to historical reasons.
+             * WMI originally defined 3 priorities over 3 mailboxes
+             * We can change this when WMI is reworked so that priorities are not
+             * dependent on mailboxes */
+        connect.ServiceID = WMI_DATA_VO_SVC;
+        status = ar6000_connectservice(ar,
+                                       &connect,
+                                       WMI_HIGHEST_PRI,
+                                       "WMI DATA VO");
+        if (A_FAILED(status)) {
+            break;
+        }
+
+        A_ASSERT(arWMIStream2EndpointID(ar,WMI_CONTROL_PRI) != 0);
+        A_ASSERT(arWMIStream2EndpointID(ar,WMI_BEST_EFFORT_PRI) != 0);
+        A_ASSERT(arWMIStream2EndpointID(ar,WMI_LOW_PRI) != 0);
+        A_ASSERT(arWMIStream2EndpointID(ar,WMI_HIGH_PRI) != 0);
+        A_ASSERT(arWMIStream2EndpointID(ar,WMI_HIGHEST_PRI) != 0);
+    } while (FALSE);
+
+    if (A_FAILED(status)) {
+        return (-EIO);
+    }
+
+    /*
+     * give our connected endpoints some buffers
+     */
+    ar6000_rx_refill(ar, arWMIStream2EndpointID(ar,WMI_CONTROL_PRI));
+
+    ar6000_rx_refill(ar, arWMIStream2EndpointID(ar,WMI_BEST_EFFORT_PRI));
+
+    /*
+     * We will post the receive buffers only for SPE testing and so we are
+     * making it conditional on the 'bypasswmi' flag.
+     */
+    if (bypasswmi) {
+        ar6000_rx_refill(ar,arWMIStream2EndpointID(ar,WMI_LOW_PRI));
+        ar6000_rx_refill(ar,arWMIStream2EndpointID(ar,WMI_HIGH_PRI));
+    }
+
+        /* setup credit distribution */
+    ar6000_setup_credit_dist(ar->arHtcTarget, &ar->arCreditStateInfo);
+
+    /* Since cookies are used for HTC transports, they should be */
+    /* initialized prior to enabling HTC.                        */
+    ar6000_cookie_init(ar);
+
+    /* start HTC */
+    status = HTCStart(ar->arHtcTarget);
+
+    if (status != A_OK) {
+        if (ar->arWmiEnabled == TRUE) {
+            wmi_shutdown(ar->arWmi);
+            ar->arWmiEnabled = FALSE;
+            ar->arWmi = NULL;
+        }
+        ar6000_cookie_cleanup(ar);
+        return -EIO;
+    }
+
+    if (!bypasswmi) {
+        /* Wait for Wmi event to be ready */
+        timeleft = wait_event_interruptible_timeout(arEvent,
+            (ar->arWmiReady == TRUE), wmitimeout * HZ);
+
+        if(!timeleft || signal_pending(current))
+        {
+            AR_DEBUG_PRINTF("WMI is not ready or wait was interrupted\n");
+#if defined(DWSIM) /* TBDXXX */
+            AR_DEBUG_PRINTF(".....but proceed anyway.\n");
+#else
+            return -EIO;
+#endif
+        }
+
+        AR_DEBUG_PRINTF("%s() WMI is ready\n", __func__);
+
+        /* Communicate the wmi protocol verision to the target */
+        if ((ar6000_set_host_app_area(ar)) != A_OK) {
+            AR_DEBUG_PRINTF("Unable to set the host app area\n");
+        }
+    }
+
+    ar->arNumDataEndPts = 1;
+
+    return(0);
+}
+
+
+void
+ar6000_bitrate_rx(void *devt, A_INT32 rateKbps)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)devt;
+
+    ar->arBitRate = rateKbps;
+    wake_up(&arEvent);
+}
+
+void
+ar6000_ratemask_rx(void *devt, A_UINT16 ratemask)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)devt;
+
+    ar->arRateMask = ratemask;
+    wake_up(&arEvent);
+}
+
+void
+ar6000_txPwr_rx(void *devt, A_UINT8 txPwr)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)devt;
+
+    ar->arTxPwr = txPwr;
+    wake_up(&arEvent);
+}
+
+
+void
+ar6000_channelList_rx(void *devt, A_INT8 numChan, A_UINT16 *chanList)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)devt;
+
+    A_MEMCPY(ar->arChannelList, chanList, numChan * sizeof (A_UINT16));
+    ar->arNumChannels = numChan;
+
+    wake_up(&arEvent);
+}
+
+A_UINT8 
+ar6000_ibss_map_epid(struct sk_buff *skb, struct net_device *dev, A_UINT32 * mapNo)
+{
+    AR_SOFTC_T      *ar = (AR_SOFTC_T *)dev->priv;
+    A_UINT8         *datap;
+    ATH_MAC_HDR     *macHdr;
+    A_UINT32         i, eptMap;
+
+    (*mapNo) = 0;
+    datap = A_NETBUF_DATA(skb);
+    macHdr = (ATH_MAC_HDR *)(datap + sizeof(WMI_DATA_HDR));
+    if (IEEE80211_IS_MULTICAST(macHdr->dstMac)) {
+        return ENDPOINT_2;
+    }
+
+    eptMap = -1;
+    for (i = 0; i < ar->arNodeNum; i ++) {
+        if (IEEE80211_ADDR_EQ(macHdr->dstMac, ar->arNodeMap[i].macAddress)) {
+            (*mapNo) = i + 1;
+            ar->arNodeMap[i].txPending ++;
+            return ar->arNodeMap[i].epId;
+        }
+
+        if ((eptMap == -1) && !ar->arNodeMap[i].txPending) {
+            eptMap = i;
+        }
+    }
+
+    if (eptMap == -1) {
+        eptMap = ar->arNodeNum;
+        ar->arNodeNum ++;
+        A_ASSERT(ar->arNodeNum <= MAX_NODE_NUM);
+    }
+
+    A_MEMCPY(ar->arNodeMap[eptMap].macAddress, macHdr->dstMac, IEEE80211_ADDR_LEN);
+
+    for (i = ENDPOINT_2; i <= ENDPOINT_5; i ++) {
+        if (!ar->arTxPending[i]) {
+            ar->arNodeMap[eptMap].epId = i;
+            break;
+        }
+        // No free endpoint is available, start redistribution on the inuse endpoints.
+        if (i == ENDPOINT_5) {
+            ar->arNodeMap[eptMap].epId = ar->arNexEpId;
+            ar->arNexEpId ++;
+            if (ar->arNexEpId > ENDPOINT_5) {
+                ar->arNexEpId = ENDPOINT_2;
+            }
+        }
+    }
+
+    (*mapNo) = eptMap + 1;
+    ar->arNodeMap[eptMap].txPending ++;
+
+    return ar->arNodeMap[eptMap].epId;
+}
+
+#ifdef DEBUG
+static void ar6000_dump_skb(struct sk_buff *skb)
+{
+   u_char *ch;
+   for (ch = A_NETBUF_DATA(skb);
+        (A_UINT32)ch < ((A_UINT32)A_NETBUF_DATA(skb) +
+        A_NETBUF_LEN(skb)); ch++)
+    {
+         AR_DEBUG_PRINTF("%2.2x ", *ch);
+    }
+    AR_DEBUG_PRINTF("\n");
+}
+#endif
+
+static int
+ar6000_data_tx(struct sk_buff *skb, struct net_device *dev)
+{
+    AR_SOFTC_T        *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_PRI_STREAM_ID streamID = WMI_NOT_MAPPED;
+    A_UINT32          mapNo = 0;
+    int               len;
+    struct ar_cookie *cookie;
+    A_BOOL            checkAdHocPsMapping = FALSE;
+
+#if LINUX_VERSION_CODE <= KERNEL_VERSION(2,6,13)
+    skb->list = NULL;
+#endif
+
+    AR_DEBUG2_PRINTF("ar6000_data_tx start - skb=0x%x, data=0x%x, len=0x%x\n",
+                     (A_UINT32)skb, (A_UINT32)A_NETBUF_DATA(skb),
+                     A_NETBUF_LEN(skb));
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+     /* TCMD doesnt support any data, free the buf and return */
+    if(ar->arTargetMode == AR6000_TCMD_MODE) {
+        A_NETBUF_FREE(skb);
+        return 0;
+    }
+#endif
+    do {
+
+        if (ar->arWmiReady == FALSE && bypasswmi == 0) {
+            break;
+        }
+
+#ifdef BLOCK_TX_PATH_FLAG
+        if (blocktx) {
+            break;
+        }
+#endif /* BLOCK_TX_PATH_FLAG */
+
+        if (ar->arWmiEnabled) {
+            if (A_NETBUF_HEADROOM(skb) < dev->hard_header_len) {
+                struct sk_buff  *newbuf;
+                /*
+                 * We really should have gotten enough headroom but sometimes
+                 * we still get packets with not enough headroom.  Copy the packet.
+                 */
+                len = A_NETBUF_LEN(skb);
+                newbuf = A_NETBUF_ALLOC(len);
+                if (newbuf == NULL) {
+                    break;
+                }
+                A_NETBUF_PUT(newbuf, len);
+                A_MEMCPY(A_NETBUF_DATA(newbuf), A_NETBUF_DATA(skb), len);
+                A_NETBUF_FREE(skb);
+                skb = newbuf;
+                /* fall through and assemble header */
+            }
+
+            if (wmi_dix_2_dot3(ar->arWmi, skb) != A_OK) {
+                AR_DEBUG_PRINTF("ar6000_data_tx - wmi_dix_2_dot3 failed\n");
+                break;
+            }
+
+            if (wmi_data_hdr_add(ar->arWmi, skb, DATA_MSGTYPE) != A_OK) {
+                AR_DEBUG_PRINTF("ar6000_data_tx - wmi_data_hdr_add failed\n");
+                break;
+            }
+
+            if ((ar->arNetworkType == ADHOC_NETWORK) &&
+                ar->arIbssPsEnable && ar->arConnected) {
+                    /* flag to check adhoc mapping once we take the lock below: */
+                checkAdHocPsMapping = TRUE;
+
+            } else {
+                    /* get the stream mapping */
+                if (ar->arWmmEnabled) {
+                    streamID = wmi_get_stream_id(ar->arWmi,
+                                    wmi_implicit_create_pstream(ar->arWmi, skb, UPLINK_TRAFFIC, UNDEFINED_PRI));
+                } else {
+                    streamID = WMI_BEST_EFFORT_PRI;
+                }
+            }
+
+        } else {
+            struct iphdr    *ipHdr;
+            /*
+             * the endpoint is directly based on the TOS field in the IP
+             * header **** only for testing ******
+             */
+            ipHdr = A_NETBUF_DATA(skb) + sizeof(ATH_MAC_HDR);
+                /* here we map the TOS field to an endpoint number, this is for
+                 * the endpointping test application */
+            streamID = IP_TOS_TO_WMI_PRI(ipHdr->tos);
+        }
+
+    } while (FALSE);
+
+        /* did we succeed ? */
+    if ((streamID == WMI_NOT_MAPPED) && !checkAdHocPsMapping) {
+            /* cleanup and exit */
+        A_NETBUF_FREE(skb);
+        AR6000_STAT_INC(ar, tx_dropped);
+        AR6000_STAT_INC(ar, tx_aborted_errors);
+        return 0;
+    }
+
+    cookie = NULL;
+
+        /* take the lock to protect driver data */
+    AR6000_SPIN_LOCK(&ar->arLock, 0);
+
+    do {
+
+        if (checkAdHocPsMapping) {
+            streamID = ar6000_ibss_map_epid(skb, dev, &mapNo);
+        }
+
+        A_ASSERT(streamID != WMI_NOT_MAPPED);
+
+            /* validate that the endpoint is connected */
+        if (arWMIStream2EndpointID(ar,streamID) == 0) {
+            AR_DEBUG_PRINTF("Stream %d is NOT mapped!\n",streamID);
+            break;
+        }
+            /* allocate resource for this packet */
+        cookie = ar6000_alloc_cookie(ar);
+
+        if (cookie != NULL) {
+                /* update counts while the lock is held */
+            ar->arTxPending[streamID]++;
+            ar->arTotalTxDataPending++;
+        }
+
+    } while (FALSE);
+
+    AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+
+    if (cookie != NULL) {
+        cookie->arc_bp[0] = (A_UINT32)skb;
+        cookie->arc_bp[1] = mapNo;
+        SET_HTC_PACKET_INFO_TX(&cookie->HtcPkt,
+                               cookie,
+                               A_NETBUF_DATA(skb),
+                               A_NETBUF_LEN(skb),
+                               arWMIStream2EndpointID(ar,streamID),
+                               AR6K_DATA_PKT_TAG);
+
+#ifdef DEBUG
+        if (debugdriver >= 3) {
+            ar6000_dump_skb(skb);
+        }
+#endif
+            /* HTC interface is asynchronous, if this fails, cleanup will happen in
+             * the ar6000_tx_complete callback */
+        HTCSendPkt(ar->arHtcTarget, &cookie->HtcPkt);
+    } else {
+            /* no packet to send, cleanup */
+        A_NETBUF_FREE(skb);
+        AR6000_STAT_INC(ar, tx_dropped);
+        AR6000_STAT_INC(ar, tx_aborted_errors);
+    }
+
+    return 0;
+}
+
+#ifdef ADAPTIVE_POWER_THROUGHPUT_CONTROL
+static void
+tvsub(register struct timeval *out, register struct timeval *in)
+{
+    if((out->tv_usec -= in->tv_usec) < 0) {
+        out->tv_sec--;
+        out->tv_usec += 1000000;
+    }
+    out->tv_sec -= in->tv_sec;
+}
+
+void
+applyAPTCHeuristics(AR_SOFTC_T *ar)
+{
+    A_UINT32 duration;
+    A_UINT32 numbytes;
+    A_UINT32 throughput;
+    struct timeval ts;
+    A_STATUS status;
+
+    AR6000_SPIN_LOCK(&ar->arLock, 0);
+
+    if ((enableAPTCHeuristics) && (!aptcTR.timerScheduled)) {
+        do_gettimeofday(&ts);
+        tvsub(&ts, &aptcTR.samplingTS);
+        duration = ts.tv_sec * 1000 + ts.tv_usec / 1000; /* ms */
+        numbytes = aptcTR.bytesTransmitted + aptcTR.bytesReceived;
+
+        if (duration > APTC_TRAFFIC_SAMPLING_INTERVAL) {
+            /* Initialize the time stamp and byte count */
+            aptcTR.bytesTransmitted = aptcTR.bytesReceived = 0;
+            do_gettimeofday(&aptcTR.samplingTS);
+
+            /* Calculate and decide based on throughput thresholds */
+            throughput = ((numbytes * 8) / duration);
+            if (throughput > APTC_UPPER_THROUGHPUT_THRESHOLD) {
+                /* Disable Sleep and schedule a timer */
+                A_ASSERT(ar->arWmiReady == TRUE);
+                AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+                status = wmi_powermode_cmd(ar->arWmi, MAX_PERF_POWER);
+                AR6000_SPIN_LOCK(&ar->arLock, 0);
+                A_TIMEOUT_MS(&aptcTimer, APTC_TRAFFIC_SAMPLING_INTERVAL, 0);
+                aptcTR.timerScheduled = TRUE;
+            }
+        }
+    }
+
+    AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+}
+#endif /* ADAPTIVE_POWER_THROUGHPUT_CONTROL */
+
+static void ar6000_tx_queue_full(void *Context, HTC_ENDPOINT_ID Endpoint)
+{
+    AR_SOFTC_T     *ar = (AR_SOFTC_T *)Context;
+
+
+    if (Endpoint == arWMIStream2EndpointID(ar,WMI_CONTROL_PRI)) {
+        if (!bypasswmi) {
+                /* under normal WMI if this is getting full, then something is running rampant
+                 * the host should not be exhausting the WMI queue with too many commands
+                 * the only exception to this is during testing using endpointping */
+
+            AR6000_SPIN_LOCK(&ar->arLock, 0);
+                /* set flag to handle subsequent messages */
+            ar->arWMIControlEpFull = TRUE;
+            AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+            AR_DEBUG_PRINTF("WMI Control Endpoint is FULL!!! \n");
+        }
+    } else {
+
+        AR6000_SPIN_LOCK(&ar->arLock, 0);
+        ar->arNetQueueStopped = TRUE;
+        AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+        /* one of the data endpoints queues is getting full..need to stop network stack
+         * the queue will resume in ar6000_tx_complete() */
+        netif_stop_queue(ar->arNetDev);
+    }
+
+
+}
+
+
+static void
+ar6000_tx_complete(void *Context, HTC_PACKET *pPacket)
+{
+    AR_SOFTC_T     *ar = (AR_SOFTC_T *)Context;
+    void           *cookie = (void *)pPacket->pPktContext;
+    struct sk_buff *skb = NULL;
+    A_UINT32        mapNo = 0;
+    A_STATUS        status;
+    struct ar_cookie * ar_cookie;
+    WMI_PRI_STREAM_ID streamID;
+    A_BOOL          wakeEvent = FALSE;
+
+    status = pPacket->Status;
+    ar_cookie = (struct ar_cookie *)cookie;
+    skb = (struct sk_buff *)ar_cookie->arc_bp[0];
+    streamID = arEndpoint2WMIStreamID(ar,pPacket->Endpoint);
+    mapNo = ar_cookie->arc_bp[1];
+
+    A_ASSERT(skb);
+    A_ASSERT(pPacket->pBuffer == A_NETBUF_DATA(skb));
+
+    if (A_SUCCESS(status)) {
+        A_ASSERT(pPacket->ActualLength == A_NETBUF_LEN(skb));
+    }
+
+    AR_DEBUG2_PRINTF("ar6000_tx_complete skb=0x%x data=0x%x len=0x%x sid=%d ",
+                     (A_UINT32)skb, (A_UINT32)pPacket->pBuffer,
+                     pPacket->ActualLength,
+                     streamID);
+
+        /* lock the driver as we update internal state */
+    AR6000_SPIN_LOCK(&ar->arLock, 0);
+
+    ar->arTxPending[streamID]--;
+
+    if ((streamID != WMI_CONTROL_PRI) || bypasswmi) {
+        ar->arTotalTxDataPending--;
+    }
+
+    if (streamID == WMI_CONTROL_PRI)
+    {
+        if (ar->arWMIControlEpFull) {
+                /* since this packet completed, the WMI EP is no longer full */
+            ar->arWMIControlEpFull = FALSE;
+        }
+
+        if (ar->arTxPending[streamID] == 0) {
+            wakeEvent = TRUE;
+        }
+    }
+
+    if (A_FAILED(status)) {
+        AR_DEBUG_PRINTF("%s() -TX ERROR, status: 0x%x\n", __func__,
+                        status);
+        AR6000_STAT_INC(ar, tx_errors);
+    } else {
+        AR_DEBUG2_PRINTF("OK\n");
+        AR6000_STAT_INC(ar, tx_packets);
+        ar->arNetStats.tx_bytes += A_NETBUF_LEN(skb);
+#ifdef ADAPTIVE_POWER_THROUGHPUT_CONTROL
+        aptcTR.bytesTransmitted += a_netbuf_to_len(skb);
+        applyAPTCHeuristics(ar);
+#endif /* ADAPTIVE_POWER_THROUGHPUT_CONTROL */
+    }
+
+    // TODO this needs to be looked at
+    if ((ar->arNetworkType == ADHOC_NETWORK) && ar->arIbssPsEnable
+        && (streamID != WMI_CONTROL_PRI) && mapNo)
+    {
+        mapNo --;
+        ar->arNodeMap[mapNo].txPending --;
+
+        if (!ar->arNodeMap[mapNo].txPending && (mapNo == (ar->arNodeNum - 1))) {
+            A_UINT32 i;
+            for (i = ar->arNodeNum; i > 0; i --) {
+                if (!ar->arNodeMap[i - 1].txPending) {
+                    A_MEMZERO(&ar->arNodeMap[i - 1], sizeof(struct ar_node_mapping));
+                    ar->arNodeNum --;
+                } else {
+                    break;
+                }
+            }
+        }
+    }
+
+    /* Freeing a cookie should not be contingent on either of */
+    /* these flags, just if we have a cookie or not.           */
+    /* Can we even get here without a cookie? Fix later.       */
+    if (ar->arWmiReady == TRUE || (bypasswmi))
+    {
+        ar6000_free_cookie(ar, cookie);
+    }
+
+    if (ar->arNetQueueStopped) {
+        ar->arNetQueueStopped = FALSE;
+    }
+
+    AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+
+    /* lock is released, we can freely call other kernel APIs */
+
+        /* this indirectly frees the HTC_PACKET */
+    A_NETBUF_FREE(skb);
+
+    if ((ar->arConnected == TRUE) || (bypasswmi)) {
+        if (status != A_ECANCELED) {
+                /* don't wake the queue if we are flushing, other wise it will just
+                 * keep queueing packets, which will keep failing */
+            netif_wake_queue(ar->arNetDev);
+        }
+    }
+
+    if (wakeEvent) {
+        wake_up(&arEvent);
+    }
+
+}
+
+/*
+ * Receive event handler.  This is called by HTC when a packet is received
+ */
+int pktcount;
+static void
+ar6000_rx(void *Context, HTC_PACKET *pPacket)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)Context;
+    struct sk_buff *skb = (struct sk_buff *)pPacket->pPktContext;
+    int minHdrLen;
+    A_STATUS        status = pPacket->Status;
+    WMI_PRI_STREAM_ID streamID = arEndpoint2WMIStreamID(ar,pPacket->Endpoint);
+    HTC_ENDPOINT_ID   ept = pPacket->Endpoint;
+
+    A_ASSERT((status != A_OK) || (pPacket->pBuffer == (A_NETBUF_DATA(skb) + HTC_HEADER_LEN)));
+
+    AR_DEBUG2_PRINTF("ar6000_rx ar=0x%x sid=%d, skb=0x%x, data=0x%x, len=0x%x ",
+                    (A_UINT32)ar, streamID, (A_UINT32)skb, (A_UINT32)pPacket->pBuffer,
+                    pPacket->ActualLength);
+    if (status != A_OK) {
+        AR_DEBUG2_PRINTF("ERR\n");
+    } else {
+        AR_DEBUG2_PRINTF("OK\n");
+    }
+
+        /* take lock to protect buffer counts
+         * and adaptive power throughput state */
+    AR6000_SPIN_LOCK(&ar->arLock, 0);
+
+    ar->arRxBuffers[streamID]--;
+
+    if (A_SUCCESS(status)) {
+        AR6000_STAT_INC(ar, rx_packets);
+        ar->arNetStats.rx_bytes += pPacket->ActualLength;
+#ifdef ADAPTIVE_POWER_THROUGHPUT_CONTROL
+        aptcTR.bytesReceived += a_netbuf_to_len(skb);
+        applyAPTCHeuristics(ar);
+#endif /* ADAPTIVE_POWER_THROUGHPUT_CONTROL */
+
+        A_NETBUF_PUT(skb, pPacket->ActualLength +  HTC_HEADER_LEN);
+        A_NETBUF_PULL(skb, HTC_HEADER_LEN);
+
+#ifdef DEBUG
+        if (debugdriver >= 2) {
+            ar6000_dump_skb(skb);
+        }
+#endif /* DEBUG */
+    }
+
+    AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+
+    if (status != A_OK) {
+        AR6000_STAT_INC(ar, rx_errors);
+        A_NETBUF_FREE(skb);
+    } else if (ar->arWmiEnabled == TRUE) {
+        if (streamID == WMI_CONTROL_PRI) {
+           /*
+            * this is a wmi control msg
+            */
+            wmi_control_rx(ar->arWmi, skb);
+        } else {
+            WMI_DATA_HDR *dhdr = (WMI_DATA_HDR *)A_NETBUF_DATA(skb);
+            if (WMI_DATA_HDR_IS_MSG_TYPE(dhdr, CNTL_MSGTYPE)) {
+                /*
+                 * this is a wmi control msg
+                 */
+                /* strip off WMI hdr */
+                wmi_data_hdr_remove(ar->arWmi, skb);
+                wmi_control_rx(ar->arWmi, skb);
+            } else {
+                /*
+                 * this is a wmi data packet
+                 */
+                minHdrLen = sizeof (WMI_DATA_HDR) + sizeof(ATH_MAC_HDR) +
+                            sizeof(ATH_LLC_SNAP_HDR);
+
+                if ((pPacket->ActualLength < minHdrLen) ||
+                    (pPacket->ActualLength > AR6000_BUFFER_SIZE))
+                {
+                    /*
+                     * packet is too short or too long
+                     */
+                    AR_DEBUG_PRINTF("TOO SHORT or TOO LONG\n");
+                    AR6000_STAT_INC(ar, rx_errors);
+                    AR6000_STAT_INC(ar, rx_length_errors);
+                    A_NETBUF_FREE(skb);
+                } else {
+                    if (ar->arWmmEnabled) {
+                        wmi_implicit_create_pstream(ar->arWmi, skb,
+                            DNLINK_TRAFFIC, UNDEFINED_PRI);
+                    }
+#if 0
+                    /* Access RSSI values here */
+                    AR_DEBUG_PRINTF("RSSI %d\n",
+                        ((WMI_DATA_HDR *) A_NETBUF_DATA(skb))->rssi);
+#endif
+                    wmi_data_hdr_remove(ar->arWmi, skb);
+                    wmi_dot3_2_dix(ar->arWmi, skb);
+
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,0)
+                    /*
+                     * extra push and memcpy, for eth_type_trans() of 2.4 kernel
+                     * will pull out hard_header_len bytes of the skb.
+                     */
+                    A_NETBUF_PUSH(skb, sizeof(WMI_DATA_HDR) + sizeof(ATH_LLC_SNAP_HDR) + HTC_HEADER_LEN);
+                    A_MEMCPY(A_NETBUF_DATA(skb), A_NETBUF_DATA(skb) + sizeof(WMI_DATA_HDR) +
+                             sizeof(ATH_LLC_SNAP_HDR) + HTC_HEADER_LEN, sizeof(ATH_MAC_HDR));
+#endif
+                    if ((ar->arNetDev->flags & IFF_UP) == IFF_UP)
+                    {
+                        skb->dev = ar->arNetDev;
+                        skb->protocol = eth_type_trans(skb, ar->arNetDev);
+                        netif_rx(skb);
+                    }
+                    else
+                    {
+                        A_NETBUF_FREE(skb);
+                    }
+                }
+            }
+        }
+    } else {
+        if ((ar->arNetDev->flags & IFF_UP) == IFF_UP)
+        {
+            skb->dev = ar->arNetDev;
+            skb->protocol = eth_type_trans(skb, ar->arNetDev);
+            netif_rx(skb);
+        }
+        else
+        {
+            A_NETBUF_FREE(skb);
+        }
+    }
+
+    if (status != A_ECANCELED) {
+        /*
+         * HTC provides A_ECANCELED status when it doesn't want to be refilled
+         * (probably due to a shutdown)
+         */
+        ar6000_rx_refill(Context, ept);
+    }
+
+
+}
+
+static void
+ar6000_rx_refill(void *Context, HTC_ENDPOINT_ID Endpoint)
+{
+    AR_SOFTC_T  *ar = (AR_SOFTC_T *)Context;
+    void        *osBuf;
+    int         RxBuffers;
+    int         buffersToRefill;
+    HTC_PACKET  *pPacket;
+    WMI_PRI_STREAM_ID streamId = arEndpoint2WMIStreamID(ar,Endpoint);
+
+    buffersToRefill = (int)AR6000_MAX_RX_BUFFERS -
+                                    (int)ar->arRxBuffers[streamId];
+
+    if (buffersToRefill <= 0) {
+            /* fast return, nothing to fill */
+        return;
+    }
+
+    AR_DEBUG2_PRINTF("ar6000_rx_refill: providing htc with %d buffers at eid=%d\n",
+                    buffersToRefill, Endpoint);
+
+    for (RxBuffers = 0; RxBuffers < buffersToRefill; RxBuffers++) {
+        osBuf = A_NETBUF_ALLOC(AR6000_BUFFER_SIZE);
+        if (NULL == osBuf) {
+            break;
+        }
+            /* the HTC packet wrapper is at the head of the reserved area
+             * in the skb */
+        pPacket = (HTC_PACKET *)(A_NETBUF_HEAD(osBuf));
+            /* set re-fill info */
+        SET_HTC_PACKET_INFO_RX_REFILL(pPacket,osBuf,A_NETBUF_DATA(osBuf),AR6000_BUFFER_SIZE,Endpoint);
+            /* add this packet */
+        HTCAddReceivePkt(ar->arHtcTarget, pPacket);
+    }
+
+        /* update count */
+    AR6000_SPIN_LOCK(&ar->arLock, 0);
+    ar->arRxBuffers[streamId] += RxBuffers;
+    AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+}
+
+static struct net_device_stats *
+ar6000_get_stats(struct net_device *dev)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    return &ar->arNetStats;
+}
+
+static struct iw_statistics *
+ar6000_get_iwstats(struct net_device * dev)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    TARGET_STATS *pStats = &ar->arTargetStats;
+    struct iw_statistics * pIwStats = &ar->arIwStats;
+
+    if ((ar->arWmiReady == FALSE)
+    /*
+     * The in_atomic function is used to determine if the scheduling is
+     * allowed in the current context or not. This was introduced in 2.6
+     * From what I have read on the differences between 2.4 and 2.6, the
+     * 2.4 kernel did not support preemption and so this check might not
+     * be required for 2.4 kernels.
+     */
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)
+        || (in_atomic())
+#endif
+       )
+    {
+        pIwStats->status = 0;
+        pIwStats->qual.qual = 0;
+        pIwStats->qual.level =0;
+        pIwStats->qual.noise = 0;
+        pIwStats->discard.code =0;
+        pIwStats->discard.retries=0;
+        pIwStats->miss.beacon =0;
+        return pIwStats;
+    }
+    if (down_interruptible(&ar->arSem)) {
+        pIwStats->status = 0;
+        return pIwStats;
+    }
+
+
+    ar->statsUpdatePending = TRUE;
+
+    if(wmi_get_stats_cmd(ar->arWmi) != A_OK) {
+        up(&ar->arSem);
+        pIwStats->status = 0;
+        return pIwStats;
+    }
+
+    wait_event_interruptible_timeout(arEvent, ar->statsUpdatePending == FALSE, wmitimeout * HZ);
+
+    if (signal_pending(current)) {
+        AR_DEBUG_PRINTF("ar6000 : WMI get stats timeout \n");    
+        up(&ar->arSem);
+        pIwStats->status = 0;
+        return pIwStats;
+    }
+    pIwStats->status = 1 ;
+    pIwStats->qual.qual = pStats->cs_aveBeacon_rssi;
+    pIwStats->qual.level =pStats->cs_aveBeacon_rssi + 161;  /* noise is -95 dBm */
+    pIwStats->qual.noise = pStats->noise_floor_calibation;
+    pIwStats->discard.code = pStats->rx_decrypt_err;
+    pIwStats->discard.retries = pStats->tx_retry_cnt;
+    pIwStats->miss.beacon = pStats->cs_bmiss_cnt;
+    up(&ar->arSem);
+    return pIwStats;
+}
+
+void
+ar6000_ready_event(void *devt, A_UINT8 *datap, A_UINT8 phyCap)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)devt;
+    struct net_device *dev = ar->arNetDev;
+
+    ar->arWmiReady = TRUE;
+    wake_up(&arEvent);
+    A_MEMCPY(dev->dev_addr, datap, AR6000_ETH_ADDR_LEN);
+    AR_DEBUG_PRINTF("mac address = %2.2x:%2.2x:%2.2x:%2.2x:%2.2x:%2.2x\n",
+        dev->dev_addr[0], dev->dev_addr[1],
+        dev->dev_addr[2], dev->dev_addr[3],
+        dev->dev_addr[4], dev->dev_addr[5]);
+
+    ar->arPhyCapability = phyCap;
+}
+
+A_UINT8
+ar6000_iptos_to_userPriority(A_UINT8 *pkt)
+{
+    struct iphdr *ipHdr = (struct iphdr *)pkt;
+    A_UINT8 userPriority;
+
+    /*
+     * IP Tos format :
+     *      (Refer Pg 57 WMM-test-plan-v1.2)
+     * IP-TOS - 8bits
+     *          : DSCP(6-bits) ECN(2-bits)
+     *          : DSCP - P2 P1 P0 X X X
+     *              where (P2 P1 P0) form 802.1D
+     */
+    userPriority = ipHdr->tos >> 5;
+    return (userPriority & 0x7);
+}
+
+void
+ar6000_connect_event(AR_SOFTC_T *ar, A_UINT16 channel, A_UINT8 *bssid,
+                     A_UINT16 listenInterval, A_UINT16 beaconInterval,
+                     NETWORK_TYPE networkType, A_UINT8 beaconIeLen,
+                     A_UINT8 assocReqLen, A_UINT8 assocRespLen,
+                     A_UINT8 *assocInfo)
+{
+    union iwreq_data wrqu;
+    int i, beacon_ie_pos, assoc_resp_ie_pos, assoc_req_ie_pos;
+    static const char *tag1 = "ASSOCINFO(ReqIEs=";
+    static const char *tag2 = "ASSOCRESPIE=";
+    static const char *beaconIetag = "BEACONIE=";
+    char buf[WMI_CONTROL_MSG_MAX_LEN * 2 + sizeof(tag1)];
+    char *pos;
+    A_UINT8 key_op_ctrl;
+
+    A_MEMCPY(ar->arBssid, bssid, sizeof(ar->arBssid));
+    ar->arBssChannel = channel;
+
+    A_PRINTF("AR6000 connected event on freq %d ", channel);
+    A_PRINTF("with bssid %2.2x:%2.2x:%2.2x:%2.2x:%2.2x:%2.2x "
+            " listenInterval=%d, beaconInterval = %d, beaconIeLen = %d assocReqLen=%d"
+            " assocRespLen =%d\n",
+             bssid[0], bssid[1], bssid[2],
+             bssid[3], bssid[4], bssid[5],
+             listenInterval, beaconInterval,
+             beaconIeLen, assocReqLen, assocRespLen);
+    if (networkType & ADHOC_NETWORK) {
+        if (networkType & ADHOC_CREATOR) {
+            A_PRINTF("Network: Adhoc (Creator)\n");
+        } else {
+            A_PRINTF("Network: Adhoc (Joiner)\n");
+        }
+    } else {
+        A_PRINTF("Network: Infrastructure\n");
+    }
+
+    if (beaconIeLen && (sizeof(buf) > (9 + beaconIeLen * 2))) {
+        AR_DEBUG_PRINTF("\nBeaconIEs= ");
+
+        beacon_ie_pos = 0;
+        A_MEMZERO(buf, sizeof(buf));
+        sprintf(buf, "%s", beaconIetag);
+        pos = buf + 9;
+        for (i = beacon_ie_pos; i < beacon_ie_pos + beaconIeLen; i++) {
+            AR_DEBUG_PRINTF("%2.2x ", assocInfo[i]);
+            sprintf(pos, "%2.2x", assocInfo[i]);
+            pos += 2;
+        }
+        AR_DEBUG_PRINTF("\n");
+
+        A_MEMZERO(&wrqu, sizeof(wrqu));
+        wrqu.data.length = strlen(buf);
+        wireless_send_event(ar->arNetDev, IWEVCUSTOM, &wrqu, buf);
+    }
+
+    if (assocRespLen && (sizeof(buf) > (12 + (assocRespLen * 2))))
+    {
+        assoc_resp_ie_pos = beaconIeLen + assocReqLen +
+                            sizeof(A_UINT16)  +  /* capinfo*/
+                            sizeof(A_UINT16)  +  /* status Code */
+                            sizeof(A_UINT16)  ;  /* associd */
+        A_MEMZERO(buf, sizeof(buf));
+        sprintf(buf, "%s", tag2);
+        pos = buf + 12;
+        AR_DEBUG_PRINTF("\nAssocRespIEs= ");
+        /*
+         * The Association Response Frame w.o. the WLAN header is delivered to
+         * the host, so skip over to the IEs
+         */
+        for (i = assoc_resp_ie_pos; i < assoc_resp_ie_pos + assocRespLen - 6; i++)
+        {
+            AR_DEBUG_PRINTF("%2.2x ", assocInfo[i]);
+            sprintf(pos, "%2.2x", assocInfo[i]);
+            pos += 2;
+        }
+        AR_DEBUG_PRINTF("\n");
+
+        A_MEMZERO(&wrqu, sizeof(wrqu));
+        wrqu.data.length = strlen(buf);
+        wireless_send_event(ar->arNetDev, IWEVCUSTOM, &wrqu, buf);
+    }
+
+    if (assocReqLen && (sizeof(buf) > (17 + (assocReqLen * 2)))) {
+        /*
+         * assoc Request includes capability and listen interval. Skip these.
+         */
+        assoc_req_ie_pos =  beaconIeLen +
+                            sizeof(A_UINT16)  +  /* capinfo*/
+                            sizeof(A_UINT16);    /* listen interval */
+
+        A_MEMZERO(buf, sizeof(buf));
+        sprintf(buf, "%s", tag1);
+        pos = buf + 17;
+        AR_DEBUG_PRINTF("AssocReqIEs= ");
+        for (i = assoc_req_ie_pos; i < assoc_req_ie_pos + assocReqLen - 4; i++) {
+            AR_DEBUG_PRINTF("%2.2x ", assocInfo[i]);
+            sprintf(pos, "%2.2x", assocInfo[i]);
+            pos += 2;;
+        }
+        AR_DEBUG_PRINTF("\n");
+
+        A_MEMZERO(&wrqu, sizeof(wrqu));
+        wrqu.data.length = strlen(buf);
+        wireless_send_event(ar->arNetDev, IWEVCUSTOM, &wrqu, buf);
+    }
+
+#ifdef USER_KEYS
+    if (ar->user_savedkeys_stat == USER_SAVEDKEYS_STAT_RUN &&
+        ar->user_saved_keys.keyOk == TRUE)
+    {
+        
+        key_op_ctrl = KEY_OP_VALID_MASK & ~KEY_OP_INIT_TSC;
+        if (ar->user_key_ctrl & AR6000_USER_SETKEYS_RSC_UNCHANGED) {
+            key_op_ctrl &= ~KEY_OP_INIT_RSC;
+        } else {
+            key_op_ctrl |= KEY_OP_INIT_RSC;
+        }
+        ar6000_reinstall_keys(ar, key_op_ctrl);
+    }
+#endif /* USER_KEYS */
+
+        /* flush data queues */
+    ar6000_TxDataCleanup(ar);
+
+    netif_wake_queue(ar->arNetDev);
+
+    if ((OPEN_AUTH == ar->arDot11AuthMode) &&
+        (NONE_AUTH == ar->arAuthMode)      &&
+        (WEP_CRYPT == ar->arPairwiseCrypto))
+    {
+        if (!ar->arConnected) {
+            ar6000_install_static_wep_keys(ar);
+        }
+    }
+
+    ar->arConnected  = TRUE;
+    ar->arConnectPending = FALSE;
+
+    reconnect_flag = 0;
+
+    A_MEMZERO(&wrqu, sizeof(wrqu));
+    A_MEMCPY(wrqu.addr.sa_data, bssid, IEEE80211_ADDR_LEN);
+    wrqu.addr.sa_family = ARPHRD_ETHER;
+    wireless_send_event(ar->arNetDev, SIOCGIWAP, &wrqu, NULL);
+    if ((ar->arNetworkType == ADHOC_NETWORK) && ar->arIbssPsEnable) {
+        A_MEMZERO(ar->arNodeMap, sizeof(ar->arNodeMap));
+        ar->arNodeNum = 0;
+        ar->arNexEpId = ENDPOINT_2;
+    }
+
+}
+
+void ar6000_set_numdataendpts(AR_SOFTC_T *ar, A_UINT32 num)
+{
+    A_ASSERT(num <= (HTC_MAILBOX_NUM_MAX - 1));
+    ar->arNumDataEndPts = num;
+}
+
+void
+ar6000_disconnect_event(AR_SOFTC_T *ar, A_UINT8 reason, A_UINT8 *bssid,
+                        A_UINT8 assocRespLen, A_UINT8 *assocInfo, A_UINT16 protocolReasonStatus)
+{
+    A_UINT8 i;
+
+    A_PRINTF("AR6000 disconnected");
+    if (bssid[0] || bssid[1] || bssid[2] || bssid[3] || bssid[4] || bssid[5]) {
+        A_PRINTF(" from %2.2x:%2.2x:%2.2x:%2.2x:%2.2x:%2.2x ",
+                 bssid[0], bssid[1], bssid[2], bssid[3], bssid[4], bssid[5]);
+    }
+
+    AR_DEBUG_PRINTF("\nDisconnect Reason is %d", reason);
+    AR_DEBUG_PRINTF("\nProtocol Reason/Status Code is %d", protocolReasonStatus);
+    AR_DEBUG_PRINTF("\nAssocResp Frame = %s",
+                    assocRespLen ? " " : "NULL");
+    for (i = 0; i < assocRespLen; i++) {
+        if (!(i % 0x10)) {
+            AR_DEBUG_PRINTF("\n");
+        }
+        AR_DEBUG_PRINTF("%2.2x ", assocInfo[i]);
+    }
+    AR_DEBUG_PRINTF("\n");
+    /*
+     * If the event is due to disconnect cmd from the host, only they the target
+     * would stop trying to connect. Under any other condition, target would
+     * keep trying to connect.
+     *
+     */
+    if( reason == DISCONNECT_CMD)
+    {
+        ar->arConnectPending = FALSE;
+    } else {
+        ar->arConnectPending = TRUE;
+        if (((reason == ASSOC_FAILED) && (protocolReasonStatus == 0x11)) ||
+            ((reason == ASSOC_FAILED) && (protocolReasonStatus == 0x0) && (reconnect_flag == 1))) {
+            ar->arConnected = TRUE;
+            return;
+        }
+    }
+    ar->arConnected = FALSE;
+
+    if( (reason != CSERV_DISCONNECT) || (reconnect_flag != 1) ) {
+        reconnect_flag = 0;
+    }
+
+#ifdef USER_KEYS
+    if (reason != CSERV_DISCONNECT)
+    {
+        ar->user_savedkeys_stat = USER_SAVEDKEYS_STAT_INIT;
+        ar->user_key_ctrl      = 0;
+    }
+#endif /* USER_KEYS */
+
+    netif_stop_queue(ar->arNetDev);
+    A_MEMZERO(ar->arBssid, sizeof(ar->arBssid));
+    ar->arBssChannel = 0;
+    ar->arBeaconInterval = 0;
+
+    ar6000_TxDataCleanup(ar);
+}
+
+void
+ar6000_regDomain_event(AR_SOFTC_T *ar, A_UINT32 regCode)
+{
+    A_PRINTF("AR6000 Reg Code = 0x%x\n", regCode);
+    ar->arRegCode = regCode;
+}
+
+void
+ar6000_neighborReport_event(AR_SOFTC_T *ar, int numAps, WMI_NEIGHBOR_INFO *info)
+{
+    static const char *tag = "PRE-AUTH";
+    char buf[128];
+    union iwreq_data wrqu;
+    int i;
+
+    AR_DEBUG_PRINTF("AR6000 Neighbor Report Event\n");
+    for (i=0; i < numAps; info++, i++) {
+        AR_DEBUG_PRINTF("bssid %2.2x:%2.2x:%2.2x:%2.2x:%2.2x:%2.2x ",
+            info->bssid[0], info->bssid[1], info->bssid[2],
+            info->bssid[3], info->bssid[4], info->bssid[5]);
+        if (info->bssFlags & WMI_PREAUTH_CAPABLE_BSS) {
+            AR_DEBUG_PRINTF("preauth-cap");
+        }
+        if (info->bssFlags & WMI_PMKID_VALID_BSS) {
+            AR_DEBUG_PRINTF(" pmkid-valid\n");
+            continue;           /* we skip bss if the pmkid is already valid */
+        }
+        AR_DEBUG_PRINTF("\n");
+        snprintf(buf, sizeof(buf), "%s%2.2x%2.2x%2.2x%2.2x%2.2x%2.2x%2.2x%2.2x",
+                 tag,
+                 info->bssid[0], info->bssid[1], info->bssid[2],
+                 info->bssid[3], info->bssid[4], info->bssid[5],
+                 i, info->bssFlags);
+        A_MEMZERO(&wrqu, sizeof(wrqu));
+        wrqu.data.length = strlen(buf);
+        wireless_send_event(ar->arNetDev, IWEVCUSTOM, &wrqu, buf);
+    }
+}
+
+void
+ar6000_tkip_micerr_event(AR_SOFTC_T *ar, A_UINT8 keyid, A_BOOL ismcast)
+{
+    static const char *tag = "MLME-MICHAELMICFAILURE.indication";
+    char buf[128];
+    union iwreq_data wrqu;
+
+    A_PRINTF("AR6000 TKIP MIC error received for keyid %d %scast\n",
+             keyid, ismcast ? "multi": "uni");
+    snprintf(buf, sizeof(buf), "%s(keyid=%d %scat)", tag, keyid,
+             ismcast ? "multi" : "uni");
+    memset(&wrqu, 0, sizeof(wrqu));
+    wrqu.data.length = strlen(buf);
+    wireless_send_event(ar->arNetDev, IWEVCUSTOM, &wrqu, buf);
+}
+
+void
+ar6000_scanComplete_event(AR_SOFTC_T *ar, A_STATUS status)
+{
+    AR_DEBUG_PRINTF("AR6000 scan complete: %d\n", status);
+}
+
+void
+ar6000_targetStats_event(AR_SOFTC_T *ar,  WMI_TARGET_STATS *pTarget)
+{
+    TARGET_STATS *pStats = &ar->arTargetStats;
+    A_UINT8 ac;
+
+    A_PRINTF("AR6000 updating target stats\n");
+    pStats->tx_packets          += pTarget->txrxStats.tx_stats.tx_packets;
+    pStats->tx_bytes            += pTarget->txrxStats.tx_stats.tx_bytes;
+    pStats->tx_unicast_pkts     += pTarget->txrxStats.tx_stats.tx_unicast_pkts;
+    pStats->tx_unicast_bytes    += pTarget->txrxStats.tx_stats.tx_unicast_bytes;
+    pStats->tx_multicast_pkts   += pTarget->txrxStats.tx_stats.tx_multicast_pkts;
+    pStats->tx_multicast_bytes  += pTarget->txrxStats.tx_stats.tx_multicast_bytes;
+    pStats->tx_broadcast_pkts   += pTarget->txrxStats.tx_stats.tx_broadcast_pkts;
+    pStats->tx_broadcast_bytes  += pTarget->txrxStats.tx_stats.tx_broadcast_bytes;
+    pStats->tx_rts_success_cnt  += pTarget->txrxStats.tx_stats.tx_rts_success_cnt;
+    for(ac = 0; ac < WMM_NUM_AC; ac++)
+        pStats->tx_packet_per_ac[ac] += pTarget->txrxStats.tx_stats.tx_packet_per_ac[ac];
+    pStats->tx_errors           += pTarget->txrxStats.tx_stats.tx_errors;
+    pStats->tx_failed_cnt       += pTarget->txrxStats.tx_stats.tx_failed_cnt;
+    pStats->tx_retry_cnt        += pTarget->txrxStats.tx_stats.tx_retry_cnt;
+    pStats->tx_rts_fail_cnt     += pTarget->txrxStats.tx_stats.tx_rts_fail_cnt;
+    pStats->tx_unicast_rate      = wmi_get_rate(pTarget->txrxStats.tx_stats.tx_unicast_rate);
+
+    pStats->rx_packets          += pTarget->txrxStats.rx_stats.rx_packets;
+    pStats->rx_bytes            += pTarget->txrxStats.rx_stats.rx_bytes;
+    pStats->rx_unicast_pkts     += pTarget->txrxStats.rx_stats.rx_unicast_pkts;
+    pStats->rx_unicast_bytes    += pTarget->txrxStats.rx_stats.rx_unicast_bytes;
+    pStats->rx_multicast_pkts   += pTarget->txrxStats.rx_stats.rx_multicast_pkts;
+    pStats->rx_multicast_bytes  += pTarget->txrxStats.rx_stats.rx_multicast_bytes;
+    pStats->rx_broadcast_pkts   += pTarget->txrxStats.rx_stats.rx_broadcast_pkts;
+    pStats->rx_broadcast_bytes  += pTarget->txrxStats.rx_stats.rx_broadcast_bytes;
+    pStats->rx_fragment_pkt     += pTarget->txrxStats.rx_stats.rx_fragment_pkt;
+    pStats->rx_errors           += pTarget->txrxStats.rx_stats.rx_errors;
+    pStats->rx_crcerr           += pTarget->txrxStats.rx_stats.rx_crcerr;
+    pStats->rx_key_cache_miss   += pTarget->txrxStats.rx_stats.rx_key_cache_miss;
+    pStats->rx_decrypt_err      += pTarget->txrxStats.rx_stats.rx_decrypt_err;
+    pStats->rx_duplicate_frames += pTarget->txrxStats.rx_stats.rx_duplicate_frames;
+    pStats->rx_unicast_rate      = wmi_get_rate(pTarget->txrxStats.rx_stats.rx_unicast_rate);
+
+
+    pStats->tkip_local_mic_failure
+                                += pTarget->txrxStats.tkipCcmpStats.tkip_local_mic_failure;
+    pStats->tkip_counter_measures_invoked
+                                += pTarget->txrxStats.tkipCcmpStats.tkip_counter_measures_invoked;
+    pStats->tkip_replays        += pTarget->txrxStats.tkipCcmpStats.tkip_replays;
+    pStats->tkip_format_errors  += pTarget->txrxStats.tkipCcmpStats.tkip_format_errors;
+    pStats->ccmp_format_errors  += pTarget->txrxStats.tkipCcmpStats.ccmp_format_errors;
+    pStats->ccmp_replays        += pTarget->txrxStats.tkipCcmpStats.ccmp_replays;
+
+
+    pStats->power_save_failure_cnt += pTarget->pmStats.power_save_failure_cnt;
+    pStats->noise_floor_calibation = pTarget->noise_floor_calibation;
+
+    pStats->cs_bmiss_cnt        += pTarget->cservStats.cs_bmiss_cnt;
+    pStats->cs_lowRssi_cnt      += pTarget->cservStats.cs_lowRssi_cnt;
+    pStats->cs_connect_cnt      += pTarget->cservStats.cs_connect_cnt;
+    pStats->cs_disconnect_cnt   += pTarget->cservStats.cs_disconnect_cnt;
+    pStats->cs_aveBeacon_snr    = pTarget->cservStats.cs_aveBeacon_snr;
+    pStats->cs_aveBeacon_rssi   = pTarget->cservStats.cs_aveBeacon_rssi;
+    pStats->cs_lastRoam_msec    = pTarget->cservStats.cs_lastRoam_msec;
+    pStats->cs_snr              = pTarget->cservStats.cs_snr;
+    pStats->cs_rssi             = pTarget->cservStats.cs_rssi;
+
+    pStats->lq_val              = pTarget->lqVal;
+
+    pStats->wow_num_pkts_dropped += pTarget->wowStats.wow_num_pkts_dropped;
+    pStats->wow_num_host_pkt_wakeups += pTarget->wowStats.wow_num_host_pkt_wakeups;
+    pStats->wow_num_host_event_wakeups += pTarget->wowStats.wow_num_host_event_wakeups;
+    pStats->wow_num_events_discarded += pTarget->wowStats.wow_num_events_discarded;
+
+    ar->statsUpdatePending = FALSE;
+    wake_up(&arEvent);
+}
+
+void
+ar6000_rssiThreshold_event(AR_SOFTC_T *ar,  WMI_RSSI_THRESHOLD_VAL newThreshold, A_INT16 rssi)
+{
+    USER_RSSI_THOLD userRssiThold;
+
+    userRssiThold.tag = rssi_map[newThreshold].tag;
+    userRssiThold.rssi = rssi;
+    AR_DEBUG2_PRINTF("rssi Threshold range = %d tag = %d  rssi = %d\n", newThreshold, userRssiThold.tag, rssi);
+    ar6000_send_event_to_app(ar, WMI_RSSI_THRESHOLD_EVENTID,(A_UINT8 *)&userRssiThold, sizeof(USER_RSSI_THOLD));
+}
+
+
+void
+ar6000_hbChallengeResp_event(AR_SOFTC_T *ar, A_UINT32 cookie, A_UINT32 source)
+{
+    if (source == APP_HB_CHALLENGE) {
+        /* Report it to the app in case it wants a positive acknowledgement */
+        ar6000_send_event_to_app(ar, WMIX_HB_CHALLENGE_RESP_EVENTID,
+                                 (A_UINT8 *)&cookie, sizeof(cookie));
+    } else {
+        /* This would ignore the replys that come in after their due time */
+        if (cookie == ar->arHBChallengeResp.seqNum) {
+            ar->arHBChallengeResp.outstanding = FALSE;
+        }
+    }
+}
+
+
+void
+ar6000_reportError_event(AR_SOFTC_T *ar, WMI_TARGET_ERROR_VAL errorVal)
+{
+    char    *errString[] = {
+                [WMI_TARGET_PM_ERR_FAIL]    "WMI_TARGET_PM_ERR_FAIL",
+                [WMI_TARGET_KEY_NOT_FOUND]  "WMI_TARGET_KEY_NOT_FOUND",
+                [WMI_TARGET_DECRYPTION_ERR] "WMI_TARGET_DECRYPTION_ERR",
+                [WMI_TARGET_BMISS]          "WMI_TARGET_BMISS",
+                [WMI_PSDISABLE_NODE_JOIN]   "WMI_PSDISABLE_NODE_JOIN"
+                };
+
+    A_PRINTF("AR6000 Error on Target. Error = 0x%x\n", errorVal);
+
+    /* One error is reported at a time, and errorval is a bitmask */
+    if(errorVal & (errorVal - 1))
+       return;
+
+    A_PRINTF("AR6000 Error type = ");
+    switch(errorVal)
+    {
+        case WMI_TARGET_PM_ERR_FAIL:
+        case WMI_TARGET_KEY_NOT_FOUND:
+        case WMI_TARGET_DECRYPTION_ERR:
+        case WMI_TARGET_BMISS:
+        case WMI_PSDISABLE_NODE_JOIN:
+            A_PRINTF("%s\n", errString[errorVal]);
+            break;
+        default:
+            A_PRINTF("INVALID\n");
+            break;
+    }
+
+}
+
+
+void
+ar6000_cac_event(AR_SOFTC_T *ar, A_UINT8 ac, A_UINT8 cacIndication,
+                 A_UINT8 statusCode, A_UINT8 *tspecSuggestion)
+{
+    WMM_TSPEC_IE    *tspecIe;
+
+    /*
+     * This is the TSPEC IE suggestion from AP.
+     * Suggestion provided by AP under some error
+     * cases, could be helpful for the host app.
+     * Check documentation.
+     */
+    tspecIe = (WMM_TSPEC_IE *)tspecSuggestion;
+
+    /*
+     * What do we do, if we get TSPEC rejection? One thought
+     * that comes to mind is implictly delete the pstream...
+     */
+    A_PRINTF("AR6000 CAC notification. "
+                "AC = %d, cacIndication = 0x%x, statusCode = 0x%x\n",
+                 ac, cacIndication, statusCode);
+}
+
+#define AR6000_PRINT_BSSID(_pBss)  do {     \
+        A_PRINTF("%2.2x:%2.2x:%2.2x:%2.2x:%2.2x:%2.2x ",\
+                 (_pBss)[0],(_pBss)[1],(_pBss)[2],(_pBss)[3],\
+                 (_pBss)[4],(_pBss)[5]);  \
+} while(0)
+
+void
+ar6000_roam_tbl_event(AR_SOFTC_T *ar, WMI_TARGET_ROAM_TBL *pTbl)
+{
+    A_UINT8 i;
+
+    A_PRINTF("ROAM TABLE NO OF ENTRIES is %d ROAM MODE is %d\n",
+              pTbl->numEntries, pTbl->roamMode);
+    for (i= 0; i < pTbl->numEntries; i++) {
+        A_PRINTF("[%d]bssid %2.2x:%2.2x:%2.2x:%2.2x:%2.2x:%2.2x ", i,
+            pTbl->bssRoamInfo[i].bssid[0], pTbl->bssRoamInfo[i].bssid[1],
+            pTbl->bssRoamInfo[i].bssid[2],
+            pTbl->bssRoamInfo[i].bssid[3],
+            pTbl->bssRoamInfo[i].bssid[4],
+            pTbl->bssRoamInfo[i].bssid[5]);
+        A_PRINTF("RSSI %d RSSIDT %d LAST RSSI %d UTIL %d ROAM_UTIL %d"
+                 " BIAS %d\n",
+            pTbl->bssRoamInfo[i].rssi,
+            pTbl->bssRoamInfo[i].rssidt,
+            pTbl->bssRoamInfo[i].last_rssi,
+            pTbl->bssRoamInfo[i].util,
+            pTbl->bssRoamInfo[i].roam_util,
+            pTbl->bssRoamInfo[i].bias);
+    }
+}
+
+void
+ar6000_wow_list_event(struct ar6_softc *ar, A_UINT8 num_filters, WMI_GET_WOW_LIST_REPLY *wow_reply)
+{
+    A_UINT8 i,j;
+
+    /*Each event now contains exactly one filter, see bug 26613*/
+    A_PRINTF("WOW pattern %d of %d patterns\n", wow_reply->this_filter_num,                 wow_reply->num_filters);
+    A_PRINTF("wow mode = %s host mode = %s\n",
+            (wow_reply->wow_mode == 0? "disabled":"enabled"),
+            (wow_reply->host_mode == 1 ? "awake":"asleep"));
+
+
+    /*If there are no patterns, the reply will only contain generic
+      WoW information. Pattern information will exist only if there are
+      patterns present. Bug 26716*/
+
+   /* If this event contains pattern information, display it*/
+    if (wow_reply->this_filter_num) {
+        i=0;
+        A_PRINTF("id=%d size=%d offset=%d\n",
+                    wow_reply->wow_filters[i].wow_filter_id,
+                    wow_reply->wow_filters[i].wow_filter_size,
+                    wow_reply->wow_filters[i].wow_filter_offset);
+       A_PRINTF("wow pattern = ");
+       for (j=0; j< wow_reply->wow_filters[i].wow_filter_size; j++) {
+             A_PRINTF("%2.2x",wow_reply->wow_filters[i].wow_filter_pattern[j]);
+        }
+
+        A_PRINTF("\nwow mask = ");
+        for (j=0; j< wow_reply->wow_filters[i].wow_filter_size; j++) {
+            A_PRINTF("%2.2x",wow_reply->wow_filters[i].wow_filter_mask[j]);
+        }
+        A_PRINTF("\n");
+    }
+}
+
+/*
+ * Report the Roaming related data collected on the target
+ */
+void
+ar6000_display_roam_time(WMI_TARGET_ROAM_TIME *p)
+{
+    A_PRINTF("Disconnect Data : BSSID: ");
+    AR6000_PRINT_BSSID(p->disassoc_bssid);
+    A_PRINTF(" RSSI %d DISASSOC Time %d NO_TXRX_TIME %d\n",
+             p->disassoc_bss_rssi,p->disassoc_time,
+             p->no_txrx_time);
+    A_PRINTF("Connect Data: BSSID: ");
+    AR6000_PRINT_BSSID(p->assoc_bssid);
+    A_PRINTF(" RSSI %d ASSOC Time %d TXRX_TIME %d\n",
+             p->assoc_bss_rssi,p->assoc_time,
+             p->allow_txrx_time);
+    A_PRINTF("Last Data Tx Time (b4 Disassoc) %d "\
+             "First Data Tx Time (after Assoc) %d\n",
+             p->last_data_txrx_time, p->first_data_txrx_time);
+}
+
+void
+ar6000_roam_data_event(AR_SOFTC_T *ar, WMI_TARGET_ROAM_DATA *p)
+{
+    switch (p->roamDataType) {
+        case ROAM_DATA_TIME:
+            ar6000_display_roam_time(&p->u.roamTime);
+            break;
+        default:
+            break;
+    }
+}
+
+void
+ar6000_bssInfo_event_rx(AR_SOFTC_T *ar, A_UINT8 *datap, int len)
+{
+    struct sk_buff *skb;
+    WMI_BSS_INFO_HDR *bih = (WMI_BSS_INFO_HDR *)datap;
+
+
+    if (!ar->arMgmtFilter) {
+        return;
+    }
+    if (((ar->arMgmtFilter & IEEE80211_FILTER_TYPE_BEACON) &&
+        (bih->frameType != BEACON_FTYPE))  ||
+        ((ar->arMgmtFilter & IEEE80211_FILTER_TYPE_PROBE_RESP) &&
+        (bih->frameType != PROBERESP_FTYPE)))
+    {
+        return;
+    }
+
+    if ((skb = A_NETBUF_ALLOC_RAW(len)) != NULL) {
+
+        A_NETBUF_PUT(skb, len);
+        A_MEMCPY(A_NETBUF_DATA(skb), datap, len);
+        skb->dev = ar->arNetDev;
+        skb->mac.raw = A_NETBUF_DATA(skb);
+        skb->ip_summed = CHECKSUM_NONE;
+        skb->pkt_type = PACKET_OTHERHOST;
+        skb->protocol = __constant_htons(0x0019);
+        netif_rx(skb);
+    }
+}
+
+A_UINT32 wmiSendCmdNum;
+
+A_STATUS
+ar6000_control_tx(void *devt, void *osbuf, WMI_PRI_STREAM_ID streamID)
+{
+    AR_SOFTC_T       *ar = (AR_SOFTC_T *)devt;
+    A_STATUS         status = A_OK;
+    struct ar_cookie *cookie = NULL;
+    int i;
+
+        /* take lock to protect ar6000_alloc_cookie() */
+    AR6000_SPIN_LOCK(&ar->arLock, 0);
+
+    do {
+
+        AR_DEBUG2_PRINTF("ar_contrstatus = ol_tx: skb=0x%x, len=0x%x, sid=%d\n",
+                         (A_UINT32)osbuf, A_NETBUF_LEN(osbuf), streamID);
+
+        if ((streamID == WMI_CONTROL_PRI) && (ar->arWMIControlEpFull)) {
+                /* control endpoint is full, don't allocate resources, we
+                 * are just going to drop this packet */
+            cookie = NULL;
+            AR_DEBUG_PRINTF(" WMI Control EP full, dropping packet : 0x%X, len:%d \n",
+                    (A_UINT32)osbuf, A_NETBUF_LEN(osbuf));
+        } else {
+            cookie = ar6000_alloc_cookie(ar);
+        }
+
+        if (cookie == NULL) {
+            status = A_NO_MEMORY;
+            break;
+        }
+
+        if(logWmiRawMsgs) {
+            A_PRINTF("WMI cmd send, msgNo %d :", wmiSendCmdNum);
+            for(i = 0; i < a_netbuf_to_len(osbuf); i++)
+                A_PRINTF("%x ", ((A_UINT8 *)a_netbuf_to_data(osbuf))[i]);
+            A_PRINTF("\n");
+        }
+
+        wmiSendCmdNum++;
+
+    } while (FALSE);
+
+    if (cookie != NULL) {
+            /* got a structure to send it out on */
+        ar->arTxPending[streamID]++;
+
+        if (streamID != WMI_CONTROL_PRI) {
+            ar->arTotalTxDataPending++;
+        }
+    }
+
+    AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+
+    if (cookie != NULL) {
+        cookie->arc_bp[0] = (A_UINT32)osbuf;
+        cookie->arc_bp[1] = 0;
+        SET_HTC_PACKET_INFO_TX(&cookie->HtcPkt,
+                               cookie,
+                               A_NETBUF_DATA(osbuf),
+                               A_NETBUF_LEN(osbuf),
+                               arWMIStream2EndpointID(ar,streamID),
+                               AR6K_CONTROL_PKT_TAG);
+            /* this interface is asynchronous, if there is an error, cleanup will happen in the
+             * TX completion callback */
+        HTCSendPkt(ar->arHtcTarget, &cookie->HtcPkt);
+        status = A_OK;
+    }
+
+    return status;
+}
+
+/* indicate tx activity or inactivity on a WMI stream */
+void ar6000_indicate_tx_activity(void *devt, A_UINT8 TrafficClass, A_BOOL Active)
+{
+    AR_SOFTC_T  *ar = (AR_SOFTC_T *)devt;
+    WMI_PRI_STREAM_ID streamid;
+   
+    if (ar->arWmiEnabled) {
+        streamid = wmi_get_stream_id(ar->arWmi, TrafficClass);
+    } else {
+            /* for mbox ping testing, the traffic class is mapped directly as a stream ID, 
+             * see handling of AR6000_XIOCTL_TRAFFIC_ACTIVITY_CHANGE in ioctl.c */
+        streamid = (WMI_PRI_STREAM_ID)TrafficClass;   
+    }
+    
+        /* notify HTC, this may cause credit distribution changes */
+	
+    HTCIndicateActivityChange(ar->arHtcTarget,
+                              arWMIStream2EndpointID(ar,streamid),
+                              Active);
+
+}
+
+module_init(ar6000_init_module);
+module_exit(ar6000_cleanup_module);
+
+/* Init cookie queue */
+static void
+ar6000_cookie_init(AR_SOFTC_T *ar)
+{
+    A_UINT32    i;
+
+    ar->arCookieList = NULL;
+    A_MEMZERO(s_ar_cookie_mem, sizeof(s_ar_cookie_mem));
+
+    for (i = 0; i < MAX_COOKIE_NUM; i++) {
+        ar6000_free_cookie(ar, &s_ar_cookie_mem[i]);
+    }
+}
+
+/* cleanup cookie queue */
+static void
+ar6000_cookie_cleanup(AR_SOFTC_T *ar)
+{
+    /* It is gone .... */
+    ar->arCookieList = NULL;
+}
+
+/* Init cookie queue */
+static void
+ar6000_free_cookie(AR_SOFTC_T *ar, struct ar_cookie * cookie)
+{
+    /* Insert first */
+    A_ASSERT(ar != NULL);
+    A_ASSERT(cookie != NULL);
+    cookie->arc_list_next = ar->arCookieList;
+    ar->arCookieList = cookie;
+}
+
+/* cleanup cookie queue */
+static struct ar_cookie *
+ar6000_alloc_cookie(AR_SOFTC_T  *ar)
+{
+    struct ar_cookie   *cookie;
+
+    cookie = ar->arCookieList;
+    if(cookie != NULL)
+    {
+        ar->arCookieList = cookie->arc_list_next;
+    }
+
+    return cookie;
+}
+
+#ifdef SEND_EVENT_TO_APP
+/*
+ * This function is used to send event which come from taget to
+ * the application. The buf which send to application is include
+ * the event ID and event content.
+ */
+#define EVENT_ID_LEN   2
+void ar6000_send_event_to_app(AR_SOFTC_T *ar, A_UINT16 eventId,
+                              A_UINT8 *datap, int len)
+{
+
+#if (WIRELESS_EXT >= 15)
+
+/* note: IWEVCUSTOM only exists in wireless extensions after version 15 */
+
+    char *buf;
+    A_UINT16 size;
+    union iwreq_data wrqu;
+
+    size = len + EVENT_ID_LEN;
+
+    if (size > IW_CUSTOM_MAX) {
+        AR_DEBUG_PRINTF("WMI event ID : 0x%4.4X, len = %d too big for IWEVCUSTOM (max=%d) \n",
+                eventId, size, IW_CUSTOM_MAX);
+        return;
+    }
+
+    buf = A_MALLOC_NOWAIT(size);
+    A_MEMZERO(buf, size);
+    A_MEMCPY(buf, &eventId, EVENT_ID_LEN);
+    A_MEMCPY(buf+EVENT_ID_LEN, datap, len);
+
+    //AR_DEBUG_PRINTF("event ID = %d,len = %d\n",*(A_UINT16*)buf, size);
+    A_MEMZERO(&wrqu, sizeof(wrqu));
+    wrqu.data.length = size;
+    wireless_send_event(ar->arNetDev, IWEVCUSTOM, &wrqu, buf);
+
+    A_FREE(buf);
+#endif
+
+
+}
+#endif
+
+
+void
+ar6000_tx_retry_err_event(void *devt)
+{
+    AR_DEBUG2_PRINTF("Tx retries reach maximum!\n");
+}
+
+void
+ar6000_snrThresholdEvent_rx(void *devt, WMI_SNR_THRESHOLD_VAL newThreshold, A_UINT8 snr)
+{
+    AR_DEBUG2_PRINTF("snr threshold range %d, snr %d\n", newThreshold, snr);
+}
+
+void
+ar6000_lqThresholdEvent_rx(void *devt, WMI_LQ_THRESHOLD_VAL newThreshold, A_UINT8 lq)
+{
+    AR_DEBUG2_PRINTF("lq threshold range %d, lq %d\n", newThreshold, lq);
+}
+
+
+
+A_UINT32
+a_copy_to_user(void *to, const void *from, A_UINT32 n)
+{
+    return(copy_to_user(to, from, n));
+}
+
+A_UINT32
+a_copy_from_user(void *to, const void *from, A_UINT32 n)
+{
+    return(copy_from_user(to, from, n));
+}
+
+
+A_STATUS
+ar6000_get_driver_cfg(struct net_device *dev,
+                        A_UINT16 cfgParam,
+                        void *result)
+{
+
+    A_STATUS    ret = 0;
+
+    switch(cfgParam)
+    {
+        case AR6000_DRIVER_CFG_GET_WLANNODECACHING:
+           *((A_UINT32 *)result) = wlanNodeCaching;
+           break;
+        case AR6000_DRIVER_CFG_LOG_RAW_WMI_MSGS:
+           *((A_UINT32 *)result) = logWmiRawMsgs;
+            break;
+        default:
+           ret = EINVAL;
+           break;
+    }
+
+    return ret;
+}
+
+void
+ar6000_keepalive_rx(void *devt, A_UINT8 configured)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)devt;
+
+    ar->arKeepaliveConfigured = configured;
+    wake_up(&arEvent);
+}
+
+void
+ar6000_pmkid_list_event(void *devt, A_UINT8 numPMKID, WMI_PMKID *pmkidList)
+{
+    A_UINT8 i, j;
+
+    A_PRINTF("Number of Cached PMKIDs is %d\n", numPMKID);
+    
+    for (i = 0; i < numPMKID; i++) {
+        A_PRINTF("\nPMKID %d ", i);
+            for (j = 0; j < WMI_PMKID_LEN; j++) {
+                A_PRINTF("%2.2x", pmkidList->pmkid[j]);
+            }
+        pmkidList++;
+    }
+}
+
+#ifdef USER_KEYS
+static A_STATUS
+
+ar6000_reinstall_keys(AR_SOFTC_T *ar, A_UINT8 key_op_ctrl)
+{
+    A_STATUS status = A_OK;
+    struct ieee80211req_key *uik = &ar->user_saved_keys.ucast_ik;
+    struct ieee80211req_key *bik = &ar->user_saved_keys.bcast_ik;
+    CRYPTO_TYPE  keyType = ar->user_saved_keys.keyType;
+
+    if (IEEE80211_CIPHER_CCKM_KRK != uik->ik_type) {
+        if (NONE_CRYPT == keyType) {
+            goto _reinstall_keys_out;
+        }
+
+        if (uik->ik_keylen) {
+            status = wmi_addKey_cmd(ar->arWmi, uik->ik_keyix,
+                    ar->user_saved_keys.keyType, PAIRWISE_USAGE,
+                    uik->ik_keylen, (A_UINT8 *)&uik->ik_keyrsc,
+                    uik->ik_keydata, key_op_ctrl, SYNC_BEFORE_WMIFLAG);
+        }
+
+    } else {
+        status = wmi_add_krk_cmd(ar->arWmi, uik->ik_keydata);
+    }
+
+    if (IEEE80211_CIPHER_CCKM_KRK != bik->ik_type) {
+        if (NONE_CRYPT == keyType) {
+            goto _reinstall_keys_out;
+        }
+
+        if (bik->ik_keylen) {
+            status = wmi_addKey_cmd(ar->arWmi, bik->ik_keyix,
+                    ar->user_saved_keys.keyType, GROUP_USAGE,
+                    bik->ik_keylen, (A_UINT8 *)&bik->ik_keyrsc,
+                    bik->ik_keydata, key_op_ctrl, NO_SYNC_WMIFLAG);
+        }
+    } else {
+        status = wmi_add_krk_cmd(ar->arWmi, bik->ik_keydata);
+    }
+
+_reinstall_keys_out:
+    ar->user_savedkeys_stat = USER_SAVEDKEYS_STAT_INIT;
+    ar->user_key_ctrl      = 0;
+
+    return status;
+}
+#endif /* USER_KEYS */
+
+
+void
+ar6000_dset_open_req(
+    void *context,
+    A_UINT32 id,
+    A_UINT32 targHandle,
+    A_UINT32 targReplyFn,
+    A_UINT32 targReplyArg)
+{
+}
+
+void
+ar6000_dset_close(
+    void *context,
+    A_UINT32 access_cookie)
+{
+    return;
+}
+
+void
+ar6000_dset_data_req(
+   void *context,
+   A_UINT32 accessCookie,
+   A_UINT32 offset,
+   A_UINT32 length,
+   A_UINT32 targBuf,
+   A_UINT32 targReplyFn,
+   A_UINT32 targReplyArg)
+{
+}

Added: trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/ar6000_raw_if.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/ar6000_raw_if.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/ar6000_raw_if.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,439 @@
+/*
+ * 
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+
+#include "ar6000_drv.h"
+
+#ifdef HTC_RAW_INTERFACE
+
+static void
+ar6000_htc_raw_read_cb(void *Context, HTC_PACKET *pPacket)
+{
+    AR_SOFTC_T        *ar = (AR_SOFTC_T *)Context;
+    raw_htc_buffer    *busy;
+    HTC_RAW_STREAM_ID streamID; 
+
+    busy = (raw_htc_buffer *)pPacket->pPktContext;
+    A_ASSERT(busy != NULL);
+
+    if (pPacket->Status == A_ECANCELED) {
+        /*
+         * HTC provides A_ECANCELED status when it doesn't want to be refilled
+         * (probably due to a shutdown)
+         */
+        return;
+    }
+
+    streamID = arEndpoint2RawStreamID(ar,pPacket->Endpoint);
+    A_ASSERT(streamID != HTC_RAW_STREAM_NOT_MAPPED);
+    
+#ifdef CF
+   if (down_trylock(&ar->raw_htc_read_sem[streamID])) {
+#else
+    if (down_interruptible(&ar->raw_htc_read_sem[streamID])) {
+#endif /* CF */
+        AR_DEBUG2_PRINTF("Unable to down the semaphore\n");
+    }
+
+    A_ASSERT((pPacket->Status != A_OK) || 
+             (pPacket->pBuffer == (busy->data + HTC_HEADER_LEN)));
+
+    busy->length = pPacket->ActualLength + HTC_HEADER_LEN;
+    busy->currPtr = HTC_HEADER_LEN;
+    ar->read_buffer_available[streamID] = TRUE;
+    //AR_DEBUG_PRINTF("raw read cb:  0x%X 0x%X \n", busy->currPtr,busy->length);
+    up(&ar->raw_htc_read_sem[streamID]);
+
+    /* Signal the waiting process */
+    AR_DEBUG2_PRINTF("Waking up the StreamID(%d) read process\n", streamID);
+    wake_up_interruptible(&ar->raw_htc_read_queue[streamID]);
+}
+
+static void
+ar6000_htc_raw_write_cb(void *Context, HTC_PACKET *pPacket)
+{
+    AR_SOFTC_T          *ar = (AR_SOFTC_T  *)Context;
+    raw_htc_buffer      *free;
+    HTC_RAW_STREAM_ID   streamID;
+    
+    free = (raw_htc_buffer *)pPacket->pPktContext;
+    A_ASSERT(free != NULL);
+
+    if (pPacket->Status == A_ECANCELED) {
+        /*
+         * HTC provides A_ECANCELED status when it doesn't want to be refilled
+         * (probably due to a shutdown)
+         */
+        return;
+    }
+
+    streamID = arEndpoint2RawStreamID(ar,pPacket->Endpoint);
+    A_ASSERT(streamID != HTC_RAW_STREAM_NOT_MAPPED);
+    
+#ifdef CF
+    if (down_trylock(&ar->raw_htc_write_sem[streamID])) {
+#else
+    if (down_interruptible(&ar->raw_htc_write_sem[streamID])) {
+#endif
+        AR_DEBUG2_PRINTF("Unable to down the semaphore\n");
+    }
+
+    A_ASSERT(pPacket->pBuffer == (free->data + HTC_HEADER_LEN));
+
+    free->length = 0;
+    ar->write_buffer_available[streamID] = TRUE;
+    up(&ar->raw_htc_write_sem[streamID]);
+
+    /* Signal the waiting process */
+    AR_DEBUG2_PRINTF("Waking up the StreamID(%d) write process\n", streamID);
+    wake_up_interruptible(&ar->raw_htc_write_queue[streamID]);
+}
+
+/* connect to a service */
+static A_STATUS ar6000_connect_raw_service(AR_SOFTC_T        *ar,
+                                           HTC_RAW_STREAM_ID StreamID)
+{
+    A_STATUS                 status;
+    HTC_SERVICE_CONNECT_RESP response;
+    A_UINT8                  streamNo;
+    HTC_SERVICE_CONNECT_REQ  connect;
+    
+    do {      
+        
+        A_MEMZERO(&connect,sizeof(connect));
+            /* pass the stream ID as meta data to the RAW streams service */
+        streamNo = (A_UINT8)StreamID;
+        connect.pMetaData = &streamNo;
+        connect.MetaDataLength = sizeof(A_UINT8);
+            /* these fields are the same for all endpoints */
+        connect.EpCallbacks.pContext = ar;
+        connect.EpCallbacks.EpTxComplete = ar6000_htc_raw_write_cb;   
+        connect.EpCallbacks.EpRecv = ar6000_htc_raw_read_cb;   
+            /* simple interface, we don't need these optional callbacks */      
+        connect.EpCallbacks.EpRecvRefill = NULL;
+        connect.EpCallbacks.EpSendFull = NULL;
+        connect.MaxSendQueueDepth = RAW_HTC_WRITE_BUFFERS_NUM;  
+        
+            /* connect to the raw streams service, we may be able to get 1 or more
+             * connections, depending on WHAT is running on the target */
+        connect.ServiceID = HTC_RAW_STREAMS_SVC;
+        
+        A_MEMZERO(&response,sizeof(response));
+        
+            /* try to connect to the raw stream, it is okay if this fails with 
+             * status HTC_SERVICE_NO_MORE_EP */
+        status = HTCConnectService(ar->arHtcTarget, 
+                                   &connect,
+                                   &response);
+        
+        if (A_FAILED(status)) {
+            if (response.ConnectRespCode == HTC_SERVICE_NO_MORE_EP) {
+                AR_DEBUG_PRINTF("HTC RAW , No more streams allowed \n");
+                status = A_OK;    
+            }
+            break;    
+        }
+
+            /* set endpoint mapping for the RAW HTC streams */
+        arSetRawStream2EndpointIDMap(ar,StreamID,response.Endpoint);
+
+        AR_DEBUG_PRINTF("HTC RAW : stream ID: %d, endpoint: %d\n", 
+                        StreamID, arRawStream2EndpointID(ar,StreamID));
+        
+    } while (FALSE);
+    
+    return status;
+}
+
+int ar6000_htc_raw_open(AR_SOFTC_T *ar)
+{
+    A_STATUS status;
+    int streamID, endPt, count2;
+    raw_htc_buffer *buffer;
+    HTC_SERVICE_ID servicepriority;
+
+    A_ASSERT(ar->arHtcTarget != NULL);
+    
+        /* wait for target */
+    status = HTCWaitTarget(ar->arHtcTarget);
+        
+    if (A_FAILED(status)) {
+        AR_DEBUG_PRINTF("HTCWaitTarget failed (%d)\n", status);
+        return -ENODEV;  
+    }
+    
+    for (endPt = 0; endPt < ENDPOINT_MAX; endPt++) {
+        ar->arEp2RawMapping[endPt] = HTC_RAW_STREAM_NOT_MAPPED;
+    }
+        
+    for (streamID = HTC_RAW_STREAM_0; streamID < HTC_RAW_STREAM_NUM_MAX; streamID++) {
+        /* Initialize the data structures */
+        init_MUTEX(&ar->raw_htc_read_sem[streamID]);
+        init_MUTEX(&ar->raw_htc_write_sem[streamID]);
+        init_waitqueue_head(&ar->raw_htc_read_queue[streamID]);
+        init_waitqueue_head(&ar->raw_htc_write_queue[streamID]);
+
+            /* try to connect to the raw service */
+        status = ar6000_connect_raw_service(ar,streamID);
+        
+        if (A_FAILED(status)) {
+            break;    
+        }
+        
+        if (arRawStream2EndpointID(ar,streamID) == 0) {
+            break;    
+        }
+        
+        for (count2 = 0; count2 < RAW_HTC_READ_BUFFERS_NUM; count2 ++) {
+            /* Initialize the receive buffers */
+            buffer = &ar->raw_htc_write_buffer[streamID][count2];
+            memset(buffer, 0, sizeof(raw_htc_buffer));
+            buffer = &ar->raw_htc_read_buffer[streamID][count2];
+            memset(buffer, 0, sizeof(raw_htc_buffer));
+            
+            SET_HTC_PACKET_INFO_RX_REFILL(&buffer->HTCPacket,
+                                          buffer,
+                                          buffer->data,
+                                          AR6000_BUFFER_SIZE,
+                                          arRawStream2EndpointID(ar,streamID));
+            
+            /* Queue buffers to HTC for receive */
+            if ((status = HTCAddReceivePkt(ar->arHtcTarget, &buffer->HTCPacket)) != A_OK)
+            {
+                BMIInit();
+                return -EIO;
+            }
+        }
+
+        for (count2 = 0; count2 < RAW_HTC_WRITE_BUFFERS_NUM; count2 ++) {
+            /* Initialize the receive buffers */
+            buffer = &ar->raw_htc_write_buffer[streamID][count2];
+            memset(buffer, 0, sizeof(raw_htc_buffer));
+        }
+
+        ar->read_buffer_available[streamID] = FALSE;
+        ar->write_buffer_available[streamID] = TRUE;
+    }
+    
+    if (A_FAILED(status)) {
+        return -EIO;    
+    }
+    
+    AR_DEBUG_PRINTF("HTC RAW, number of streams the target supports: %d \n", streamID);
+            
+    servicepriority = HTC_RAW_STREAMS_SVC;  /* only 1 */
+    
+        /* set callbacks and priority list */
+    HTCSetCreditDistribution(ar->arHtcTarget,
+                             ar,
+                             NULL,  /* use default */
+                             NULL,  /* use default */
+                             &servicepriority,
+                             1);
+
+    /* Start the HTC component */
+    if ((status = HTCStart(ar->arHtcTarget)) != A_OK) {
+        BMIInit();
+        return -EIO;
+    }
+
+    (ar)->arRawIfInit = TRUE;
+    
+    return 0;
+}
+
+int ar6000_htc_raw_close(AR_SOFTC_T *ar)
+{
+    A_PRINTF("ar6000_htc_raw_close called \n");
+    HTCStop(ar->arHtcTarget);
+    
+        /* reset the device */
+    ar6000_reset_device(ar->arHifDevice, ar->arTargetType);
+    /* Initialize the BMI component */
+    BMIInit();
+
+    return 0;
+}
+
+raw_htc_buffer *
+get_filled_buffer(AR_SOFTC_T *ar, HTC_RAW_STREAM_ID StreamID)
+{
+    int count;
+    raw_htc_buffer *busy;
+
+    /* Check for data */
+    for (count = 0; count < RAW_HTC_READ_BUFFERS_NUM; count ++) {
+        busy = &ar->raw_htc_read_buffer[StreamID][count];
+        if (busy->length) {
+            break;
+        }
+    }
+    if (busy->length) {
+        ar->read_buffer_available[StreamID] = TRUE;
+    } else {
+        ar->read_buffer_available[StreamID] = FALSE;
+    }
+
+    return busy;
+}
+
+ssize_t ar6000_htc_raw_read(AR_SOFTC_T *ar, HTC_RAW_STREAM_ID StreamID, 
+                            char __user *buffer, size_t length)
+{
+    int readPtr;
+    raw_htc_buffer *busy;
+
+    if (arRawStream2EndpointID(ar,StreamID) == 0) {
+        AR_DEBUG_PRINTF("StreamID(%d) not connected! \n", StreamID);
+        return -EFAULT;    
+    }
+    
+    if (down_interruptible(&ar->raw_htc_read_sem[StreamID])) {
+        return -ERESTARTSYS;
+    }
+
+    busy = get_filled_buffer(ar,StreamID);
+    while (!ar->read_buffer_available[StreamID]) {
+        up(&ar->raw_htc_read_sem[StreamID]);
+
+        /* Wait for the data */
+        AR_DEBUG2_PRINTF("Sleeping StreamID(%d) read process\n", StreamID);
+        if (wait_event_interruptible(ar->raw_htc_read_queue[StreamID],
+                                     ar->read_buffer_available[StreamID]))
+        {
+            return -EINTR;
+        }
+        if (down_interruptible(&ar->raw_htc_read_sem[StreamID])) {
+            return -ERESTARTSYS;
+        }
+        busy = get_filled_buffer(ar,StreamID);
+    }
+
+    /* Read the data */
+    readPtr = busy->currPtr;
+    if (length > busy->length - HTC_HEADER_LEN) {
+        length = busy->length - HTC_HEADER_LEN;
+    }
+    if (copy_to_user(buffer, &busy->data[readPtr], length)) {
+        up(&ar->raw_htc_read_sem[StreamID]);
+        return -EFAULT;
+    }
+
+    busy->currPtr += length;
+    
+    //AR_DEBUG_PRINTF("raw read ioctl:  currPTR : 0x%X 0x%X \n", busy->currPtr,busy->length);
+    
+    if (busy->currPtr == busy->length)
+    {    
+        busy->currPtr = 0;
+        busy->length = 0;        
+        HTC_PACKET_RESET_RX(&busy->HTCPacket);                                          
+        //AR_DEBUG_PRINTF("raw read ioctl:  ep for packet:%d \n", busy->HTCPacket.Endpoint);
+        HTCAddReceivePkt(ar->arHtcTarget, &busy->HTCPacket);
+    }
+    ar->read_buffer_available[StreamID] = FALSE;
+    up(&ar->raw_htc_read_sem[StreamID]);
+
+    return length;
+}
+
+static raw_htc_buffer *
+get_free_buffer(AR_SOFTC_T *ar, HTC_ENDPOINT_ID StreamID)
+{
+    int count;
+    raw_htc_buffer *free;
+
+    free = NULL;
+    for (count = 0; count < RAW_HTC_WRITE_BUFFERS_NUM; count ++) {
+        free = &ar->raw_htc_write_buffer[StreamID][count];
+        if (free->length == 0) {
+            break;
+        }
+    }
+    if (!free->length) {
+        ar->write_buffer_available[StreamID] = TRUE;
+    } else {
+        ar->write_buffer_available[StreamID] = FALSE;
+    }
+
+    return free;
+}
+
+ssize_t ar6000_htc_raw_write(AR_SOFTC_T *ar, HTC_RAW_STREAM_ID StreamID,
+                     char __user *buffer, size_t length)
+{
+    int writePtr;
+    raw_htc_buffer *free;
+
+    if (arRawStream2EndpointID(ar,StreamID) == 0) {
+        AR_DEBUG_PRINTF("StreamID(%d) not connected! \n", StreamID);
+        return -EFAULT;    
+    }
+    
+    if (down_interruptible(&ar->raw_htc_write_sem[StreamID])) {
+        return -ERESTARTSYS;
+    }
+
+    /* Search for a free buffer */
+    free = get_free_buffer(ar,StreamID);
+
+    /* Check if there is space to write else wait */
+    while (!ar->write_buffer_available[StreamID]) {
+        up(&ar->raw_htc_write_sem[StreamID]);
+
+        /* Wait for buffer to become free */
+        AR_DEBUG2_PRINTF("Sleeping StreamID(%d) write process\n", StreamID);
+        if (wait_event_interruptible(ar->raw_htc_write_queue[StreamID],
+                                     ar->write_buffer_available[StreamID]))
+        {
+            return -EINTR;
+        }
+        if (down_interruptible(&ar->raw_htc_write_sem[StreamID])) {
+            return -ERESTARTSYS;
+        }
+        free = get_free_buffer(ar,StreamID);
+    }
+
+    /* Send the data */
+    writePtr = HTC_HEADER_LEN;
+    if (length > (AR6000_BUFFER_SIZE - HTC_HEADER_LEN)) {
+        length = AR6000_BUFFER_SIZE - HTC_HEADER_LEN;
+    }
+
+    if (copy_from_user(&free->data[writePtr], buffer, length)) {
+        up(&ar->raw_htc_read_sem[StreamID]);
+        return -EFAULT;
+    }
+
+    free->length = length;
+        
+    SET_HTC_PACKET_INFO_TX(&free->HTCPacket,
+                           free,
+                           &free->data[writePtr],
+                           length,
+                           arRawStream2EndpointID(ar,StreamID),
+                           AR6K_DATA_PKT_TAG);
+    
+    HTCSendPkt(ar->arHtcTarget,&free->HTCPacket);
+    
+    ar->write_buffer_available[StreamID] = FALSE;
+    up(&ar->raw_htc_write_sem[StreamID]);
+
+    return length;
+}
+#endif /* HTC_RAW_INTERFACE */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/ar6000_drv.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/ar6000_drv.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/ar6000_drv.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,369 @@
+/*
+ *
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#ifndef _AR6000_H_
+#define _AR6000_H_
+
+#include <linux/version.h>
+
+
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,17)
+#include <linux/config.h>
+#else
+#include <linux/autoconf.h>
+#endif
+#include <linux/init.h>
+#include <linux/kernel.h>
+#include <linux/spinlock.h>
+#include <linux/skbuff.h>
+#include <linux/if_ether.h>
+#include <linux/netdevice.h>
+#include <linux/etherdevice.h>
+#include <net/iw_handler.h>
+#include <linux/if_arp.h>
+#include <linux/ip.h>
+#include <asm/semaphore.h>
+#include <linux/wireless.h>
+#include <linux/module.h>
+#include <asm/io.h>
+
+#include <a_config.h>
+#include <athdefs.h>
+#include "a_types.h"
+#include "a_osapi.h"
+#include "htc_api.h"
+#include "wmi.h"
+#include "a_drv.h"
+#include "bmi.h"
+#include <ieee80211.h>
+#include <ieee80211_ioctl.h>
+#include <wlan_api.h>
+#include <wmi_api.h>
+#include "gpio_api.h"
+#include "gpio.h"
+#include <host_version.h>
+#include <linux/rtnetlink.h>
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,0)
+#include <asm/uaccess.h>
+#else
+#include <linux/init.h>
+#include <linux/moduleparam.h>
+#endif
+#include "AR6Khwreg.h"
+#include "ar6000_api.h"
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+#include <testcmd.h>
+#endif
+
+#include "targaddrs.h"
+#include "dbglog_api.h"
+#include "ar6000_diag.h"
+#include "common_drv.h"
+
+#ifndef  __dev_put
+#define  __dev_put(dev) dev_put(dev)
+#endif
+
+#define  __ATH_CENTRAL_IOCTL_DISPATCHER___  /* To become compile time flag */
+
+#ifdef USER_KEYS
+
+#define USER_SAVEDKEYS_STAT_INIT     0
+#define USER_SAVEDKEYS_STAT_RUN      1
+
+// TODO this needs to move into the AR_SOFTC struct
+struct USER_SAVEDKEYS {
+    struct ieee80211req_key   ucast_ik;
+    struct ieee80211req_key   bcast_ik;
+    CRYPTO_TYPE               keyType;
+    A_BOOL                    keyOk;
+};
+#endif
+
+#define DBG_INFO		0x00000001
+#define DBG_ERROR		0x00000002
+#define DBG_WARNING		0x00000004
+#define DBG_SDIO		0x00000008
+#define DBG_HIF			0x00000010
+#define DBG_HTC			0x00000020
+#define DBG_WMI			0x00000040
+#define DBG_WMI2		0x00000080
+#define DBG_DRIVER		0x00000100
+
+#define DBG_DEFAULTS	(DBG_ERROR|DBG_WARNING)
+
+
+#ifdef DEBUG
+#define AR_DEBUG_PRINTF(args...)        if (debugdriver) A_PRINTF(args);
+#define AR_DEBUG2_PRINTF(args...)        if (debugdriver >= 2) A_PRINTF(args);
+extern int debugdriver;
+#else
+#define AR_DEBUG_PRINTF(args...)
+#define AR_DEBUG2_PRINTF(args...)
+#endif
+
+A_STATUS ar6000_ReadRegDiag(HIF_DEVICE *hifDevice, A_UINT32 *address, A_UINT32 *data);
+A_STATUS ar6000_WriteRegDiag(HIF_DEVICE *hifDevice, A_UINT32 *address, A_UINT32 *data);
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+#define	MAX_AR6000                        1
+#define AR6000_MAX_RX_BUFFERS             16
+#define AR6000_BUFFER_SIZE                1664
+#define AR6000_TX_TIMEOUT                 10
+#define	AR6000_ETH_ADDR_LEN               6
+#define	AR6000_MAX_ENDPOINTS              4
+#define MAX_NODE_NUM                      15
+#define MAX_COOKIE_NUM                    150
+#define AR6000_HB_CHALLENGE_RESP_FREQ_DEFAULT        1
+#define AR6000_HB_CHALLENGE_RESP_MISS_THRES_DEFAULT  1
+
+enum {
+    DRV_HB_CHALLENGE = 0,
+    APP_HB_CHALLENGE
+};
+
+/* HTC RAW streams */
+typedef enum _HTC_RAW_STREAM_ID {
+    HTC_RAW_STREAM_NOT_MAPPED = -1,
+    HTC_RAW_STREAM_0 = 0,
+    HTC_RAW_STREAM_1 = 1,
+    HTC_RAW_STREAM_2 = 2,
+    HTC_RAW_STREAM_3 = 3,
+    HTC_RAW_STREAM_NUM_MAX
+} HTC_RAW_STREAM_ID;
+
+#define RAW_HTC_READ_BUFFERS_NUM    4
+#define RAW_HTC_WRITE_BUFFERS_NUM   4
+
+typedef struct {
+    int currPtr;
+    int length;
+    unsigned char data[AR6000_BUFFER_SIZE];
+    HTC_PACKET    HTCPacket;
+} raw_htc_buffer;
+
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+/*
+ *  add TCMD_MODE besides wmi and bypasswmi
+ *  in TCMD_MODE, only few TCMD releated wmi commands
+ *  counld be hanlder
+ */
+enum {
+    AR6000_WMI_MODE = 0,
+    AR6000_BYPASS_MODE,
+    AR6000_TCMD_MODE,
+    AR6000_WLAN_MODE
+};
+#endif /* CONFIG_HOST_TCMD_SUPPORT */
+
+struct ar_wep_key {
+    A_UINT8                 arKeyIndex;
+    A_UINT8                 arKeyLen;
+    A_UINT8                 arKey[64];
+} ;
+
+struct ar_node_mapping {
+    A_UINT8                 macAddress[6];
+    A_UINT8                 epId;
+    A_UINT8                 txPending;
+};
+
+struct ar_cookie {
+    A_UINT32               arc_bp[2];    /* Must be first field */
+    HTC_PACKET             HtcPkt;       /* HTC packet wrapper */
+    struct ar_cookie *arc_list_next;
+};
+
+struct ar_hb_chlng_resp {
+    A_TIMER                 timer;
+    A_UINT32                frequency;
+    A_UINT32                seqNum;
+    A_BOOL                  outstanding;
+    A_UINT8                 missCnt;
+    A_UINT8                 missThres;
+};
+
+typedef struct ar6_softc {
+    struct net_device       *arNetDev;    /* net_device pointer */
+    void                    *arWmi;
+    int                     arTxPending[WMI_PRI_MAX_COUNT];
+    int                     arTotalTxDataPending;
+    A_UINT8                 arNumDataEndPts;
+    A_BOOL                  arWmiEnabled;
+    A_BOOL                  arWmiReady;
+    A_BOOL                  arConnected;
+    HTC_HANDLE              arHtcTarget;
+    void                    *arHifDevice;
+    spinlock_t              arLock;
+    struct semaphore        arSem;
+    int                     arRxBuffers[WMI_PRI_MAX_COUNT];
+    int                     arSsidLen;
+    u_char                  arSsid[32];
+    A_UINT8                 arNetworkType;
+    A_UINT8                 arDot11AuthMode;
+    A_UINT8                 arAuthMode;
+    A_UINT8                 arPairwiseCrypto;
+    A_UINT8                 arPairwiseCryptoLen;
+    A_UINT8                 arGroupCrypto;
+    A_UINT8                 arGroupCryptoLen;
+    A_UINT8                 arDefTxKeyIndex;
+    struct ar_wep_key       arWepKeyList[WMI_MAX_KEY_INDEX + 1];
+    A_UINT8                 arBssid[6];
+    A_UINT8                 arReqBssid[6];
+    A_UINT16                arChannelHint;
+    A_UINT16                arBssChannel;
+    A_UINT16                arListenInterval;
+    struct ar6000_version   arVersion;
+    A_UINT32                arTargetType;
+    A_INT8                  arRssi;
+    A_UINT8                 arTxPwr;
+    A_BOOL                  arTxPwrSet;
+    A_INT32                 arBitRate;
+    struct net_device_stats arNetStats;
+    struct iw_statistics 	arIwStats;
+    A_INT8                  arNumChannels;
+    A_UINT16                arChannelList[32];
+    A_UINT32                arRegCode;
+    A_BOOL                  statsUpdatePending;
+    TARGET_STATS            arTargetStats;
+    A_INT8                  arMaxRetries;
+    A_UINT8                 arPhyCapability;
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+    A_UINT8                 tcmdRxReport;
+    A_UINT32                tcmdRxTotalPkt;
+    A_INT32                 tcmdRxRssi;
+    A_UINT32                tcmdPm;
+   A_UINT32                 arTargetMode; 
+#endif
+    AR6000_WLAN_STATE       arWlanState;
+    struct ar_node_mapping  arNodeMap[MAX_NODE_NUM];
+    A_UINT8                 arIbssPsEnable;
+    A_UINT8                 arNodeNum;
+    A_UINT8                 arNexEpId;
+    struct ar_cookie        *arCookieList;
+    A_UINT16                arRateMask;
+    A_UINT8                 arSkipScan;
+    A_UINT16                arBeaconInterval;
+    A_BOOL                  arConnectPending;
+    A_BOOL                  arWmmEnabled;
+    struct ar_hb_chlng_resp arHBChallengeResp;
+    A_UINT8                 arKeepaliveConfigured;
+    A_UINT32                arMgmtFilter;
+    HTC_ENDPOINT_ID         arWmi2EpMapping[WMI_PRI_MAX_COUNT];
+    WMI_PRI_STREAM_ID       arEp2WmiMapping[ENDPOINT_MAX];
+#ifdef HTC_RAW_INTERFACE
+    HTC_ENDPOINT_ID         arRaw2EpMapping[HTC_RAW_STREAM_NUM_MAX];
+    HTC_RAW_STREAM_ID       arEp2RawMapping[ENDPOINT_MAX];
+    struct semaphore        raw_htc_read_sem[HTC_RAW_STREAM_NUM_MAX];
+    struct semaphore        raw_htc_write_sem[HTC_RAW_STREAM_NUM_MAX];
+    wait_queue_head_t       raw_htc_read_queue[HTC_RAW_STREAM_NUM_MAX];
+    wait_queue_head_t       raw_htc_write_queue[HTC_RAW_STREAM_NUM_MAX];
+    raw_htc_buffer          raw_htc_read_buffer[HTC_RAW_STREAM_NUM_MAX][RAW_HTC_READ_BUFFERS_NUM];
+    raw_htc_buffer          raw_htc_write_buffer[HTC_RAW_STREAM_NUM_MAX][RAW_HTC_WRITE_BUFFERS_NUM];
+    A_BOOL                  write_buffer_available[HTC_RAW_STREAM_NUM_MAX];
+    A_BOOL                  read_buffer_available[HTC_RAW_STREAM_NUM_MAX];
+#endif
+    A_BOOL                  arNetQueueStopped;
+    A_BOOL                  arRawIfInit;
+    int                     arDeviceIndex;
+    COMMON_CREDIT_STATE_INFO arCreditStateInfo;
+    A_BOOL                  arWMIControlEpFull;
+    A_BOOL                  dbgLogFetchInProgress;
+    A_UCHAR                 log_buffer[DBGLOG_HOST_LOG_BUFFER_SIZE];
+    A_UINT32                log_cnt;
+    A_UINT32                dbglog_init_done;    
+    A_UINT32                arConnectCtrlFlags;
+#ifdef USER_KEYS
+    A_INT32                 user_savedkeys_stat;
+    A_UINT32                user_key_ctrl;
+    struct USER_SAVEDKEYS   user_saved_keys;
+#endif
+} AR_SOFTC_T;
+
+
+#define arWMIStream2EndpointID(ar,wmi)          (ar)->arWmi2EpMapping[(wmi)]
+#define arSetWMIStream2EndpointIDMap(ar,wmi,ep)  \
+{  (ar)->arWmi2EpMapping[(wmi)] = (ep); \
+   (ar)->arEp2WmiMapping[(ep)] = (wmi); }
+#define arEndpoint2WMIStreamID(ar,ep)           (ar)->arEp2WmiMapping[(ep)]
+
+#define arRawIfEnabled(ar) (ar)->arRawIfInit
+#define arRawStream2EndpointID(ar,raw)          (ar)->arRaw2EpMapping[(raw)]
+#define arSetRawStream2EndpointIDMap(ar,raw,ep)  \
+{  (ar)->arRaw2EpMapping[(raw)] = (ep); \
+   (ar)->arEp2RawMapping[(ep)] = (raw); }
+#define arEndpoint2RawStreamID(ar,ep)           (ar)->arEp2RawMapping[(ep)]
+
+struct ar_giwscan_param {
+    char    *current_ev;
+    char    *end_buf;
+    A_BOOL  firstPass;
+};
+
+#define AR6000_STAT_INC(ar, stat)       (ar->arNetStats.stat++)
+
+#define AR6000_SPIN_LOCK(lock, param)   do {                            \
+    if (irqs_disabled()) {                                              \
+        AR_DEBUG_PRINTF("IRQs disabled:AR6000_LOCK\n");                 \
+    }                                                                   \
+    spin_lock_bh(lock);                                                 \
+} while (0)
+
+#define AR6000_SPIN_UNLOCK(lock, param) do {                            \
+    if (irqs_disabled()) {                                              \
+        AR_DEBUG_PRINTF("IRQs disabled: AR6000_UNLOCK\n");              \
+    }                                                                   \
+    spin_unlock_bh(lock);                                               \
+} while (0)
+
+int ar6000_ioctl(struct net_device *dev, struct ifreq *rq, int cmd);
+int ar6000_ioctl_dispatcher(struct net_device *dev, struct ifreq *rq, int cmd);
+void ar6000_ioctl_iwsetup(struct iw_handler_def *def);
+void ar6000_gpio_init(void);
+void ar6000_init_profile_info(AR_SOFTC_T *ar);
+void ar6000_install_static_wep_keys(AR_SOFTC_T *ar);
+int ar6000_init(struct net_device *dev);
+int ar6000_dbglog_get_debug_logs(AR_SOFTC_T *ar);
+A_STATUS ar6000_SetHTCBlockSize(AR_SOFTC_T *ar);
+
+#ifdef HTC_RAW_INTERFACE
+
+#ifndef __user
+#define __user
+#endif
+
+int ar6000_htc_raw_open(AR_SOFTC_T *ar);
+int ar6000_htc_raw_close(AR_SOFTC_T *ar);
+ssize_t ar6000_htc_raw_read(AR_SOFTC_T *ar,
+                            HTC_RAW_STREAM_ID StreamID,
+                            char __user *buffer, size_t count);
+ssize_t ar6000_htc_raw_write(AR_SOFTC_T *ar,
+                             HTC_RAW_STREAM_ID StreamID,
+                             char __user *buffer, size_t count);
+
+#endif /* HTC_RAW_INTERFACE */
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _AR6000_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/ar6xapi_linux.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/ar6xapi_linux.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/ar6xapi_linux.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,128 @@
+#ifndef _AR6XAPI_LINUX_H
+#define _AR6XAPI_LINUX_H
+/*
+ *
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+struct ar6_softc;
+
+void ar6000_ready_event(void *devt, A_UINT8 *datap, A_UINT8 phyCap);
+A_UINT8 ar6000_iptos_to_userPriority(A_UINT8 *pkt);
+A_STATUS ar6000_control_tx(void *devt, void *osbuf, WMI_PRI_STREAM_ID streamID);
+void ar6000_connect_event(struct ar6_softc *ar, A_UINT16 channel,
+                          A_UINT8 *bssid, A_UINT16 listenInterval,
+                          A_UINT16 beaconInterval, NETWORK_TYPE networkType,
+                          A_UINT8 beaconIeLen, A_UINT8 assocReqLen,
+                          A_UINT8 assocRespLen,A_UINT8 *assocInfo);
+void ar6000_disconnect_event(struct ar6_softc *ar, A_UINT8 reason,
+                             A_UINT8 *bssid, A_UINT8 assocRespLen,
+                             A_UINT8 *assocInfo, A_UINT16 protocolReasonStatus);
+void ar6000_tkip_micerr_event(struct ar6_softc *ar, A_UINT8 keyid,
+                              A_BOOL ismcast);
+void ar6000_bitrate_rx(void *devt, A_INT32 rateKbps);
+void ar6000_channelList_rx(void *devt, A_INT8 numChan, A_UINT16 *chanList);
+void ar6000_regDomain_event(struct ar6_softc *ar, A_UINT32 regCode);
+void ar6000_txPwr_rx(void *devt, A_UINT8 txPwr);
+void ar6000_keepalive_rx(void *devt, A_UINT8 configured);
+void ar6000_neighborReport_event(struct ar6_softc *ar, int numAps,
+                                 WMI_NEIGHBOR_INFO *info);
+void ar6000_set_numdataendpts(struct ar6_softc *ar, A_UINT32 num);
+void ar6000_scanComplete_event(struct ar6_softc *ar, A_STATUS status);
+void ar6000_targetStats_event(struct ar6_softc *ar,  WMI_TARGET_STATS *pStats);
+void ar6000_rssiThreshold_event(struct ar6_softc *ar,
+                                WMI_RSSI_THRESHOLD_VAL newThreshold,
+                                A_INT16 rssi);
+void ar6000_reportError_event(struct ar6_softc *, WMI_TARGET_ERROR_VAL errorVal);
+void ar6000_cac_event(struct ar6_softc *ar, A_UINT8 ac, A_UINT8 cac_indication,
+                                A_UINT8 statusCode, A_UINT8 *tspecSuggestion);
+void ar6000_hbChallengeResp_event(struct ar6_softc *, A_UINT32 cookie, A_UINT32 source);
+void
+ar6000_roam_tbl_event(struct ar6_softc *ar, WMI_TARGET_ROAM_TBL *pTbl);
+
+void
+ar6000_roam_data_event(struct ar6_softc *ar, WMI_TARGET_ROAM_DATA *p);
+
+void
+ar6000_wow_list_event(struct ar6_softc *ar, A_UINT8 num_filters, 
+                      WMI_GET_WOW_LIST_REPLY *wow_reply);
+
+void ar6000_pmkid_list_event(void *devt, A_UINT8 numPMKID, 
+                             WMI_PMKID *pmkidList);
+
+void ar6000_gpio_intr_rx(A_UINT32 intr_mask, A_UINT32 input_values);
+void ar6000_gpio_data_rx(A_UINT32 reg_id, A_UINT32 value);
+void ar6000_gpio_ack_rx(void);
+
+void ar6000_dbglog_init_done(struct ar6_softc *ar);
+
+#ifdef SEND_EVENT_TO_APP
+void ar6000_send_event_to_app(struct ar6_softc *ar, A_UINT16 eventId, A_UINT8 *datap, int len);
+#endif
+
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+void ar6000_tcmd_rx_report_event(void *devt, A_UINT8 * results, int len);
+#endif
+
+void ar6000_tx_retry_err_event(void *devt);
+
+void ar6000_snrThresholdEvent_rx(void *devt,
+                                 WMI_SNR_THRESHOLD_VAL newThreshold,
+                                 A_UINT8 snr);
+
+void ar6000_lqThresholdEvent_rx(void *devt, WMI_LQ_THRESHOLD_VAL range, A_UINT8 lqVal);
+
+
+void ar6000_ratemask_rx(void *devt, A_UINT16 ratemask);
+
+A_STATUS ar6000_get_driver_cfg(struct net_device *dev,
+                                A_UINT16 cfgParam,
+                                void *result);
+void ar6000_bssInfo_event_rx(struct ar6_softc *ar, A_UINT8 *data, int len);
+
+void ar6000_dbglog_event(struct ar6_softc *ar, A_UINT32 dropped,
+                         A_INT8 *buffer, A_UINT32 length);
+
+int ar6000_dbglog_get_debug_logs(struct ar6_softc *ar);
+
+void ar6000_indicate_tx_activity(void *devt, A_UINT8 trafficClass, A_BOOL Active);
+
+void ar6000_dset_open_req(void *devt,
+                          A_UINT32 id,
+                          A_UINT32 targ_handle,
+                          A_UINT32 targ_reply_fn,
+                          A_UINT32 targ_reply_arg);
+void ar6000_dset_close(void *devt, A_UINT32 access_cookie);
+void ar6000_dset_data_req(void *devt,
+                          A_UINT32 access_cookie,
+                          A_UINT32 offset,
+                          A_UINT32 length,
+                          A_UINT32 targ_buf,
+                          A_UINT32 targ_reply_fn,
+                          A_UINT32 targ_reply_arg);
+
+
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif

Added: trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/athdrv_linux.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/athdrv_linux.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/athdrv_linux.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,993 @@
+/*
+ * Copyright (c) 2004-2006 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+
+#ifndef _ATHDRV_LINUX_H
+#define _ATHDRV_LINUX_H
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+
+/*
+ * There are two types of ioctl's here: Standard ioctls and
+ * eXtended ioctls.  All extended ioctls (XIOCTL) are multiplexed
+ * off of the single ioctl command, AR6000_IOCTL_EXTENDED.  The
+ * arguments for every XIOCTL starts with a 32-bit command word
+ * that is used to select which extended ioctl is in use.  After
+ * the command word are command-specific arguments.
+ */
+
+/* Linux standard Wireless Extensions, private ioctl interfaces */
+#define IEEE80211_IOCTL_SETPARAM             (SIOCIWFIRSTPRIV+0)
+#define IEEE80211_IOCTL_GETPARAM             (SIOCIWFIRSTPRIV+1)
+#define IEEE80211_IOCTL_SETKEY               (SIOCIWFIRSTPRIV+2)
+#define IEEE80211_IOCTL_SETWMMPARAMS         (SIOCIWFIRSTPRIV+3)
+#define IEEE80211_IOCTL_DELKEY               (SIOCIWFIRSTPRIV+4)
+#define IEEE80211_IOCTL_GETWMMPARAMS         (SIOCIWFIRSTPRIV+5)
+#define IEEE80211_IOCTL_SETMLME              (SIOCIWFIRSTPRIV+6)
+#define IEEE80211_IOCTL_SETOPTIE             (SIOCIWFIRSTPRIV+6)
+#define IEEE80211_IOCTL_GETOPTIE             (SIOCIWFIRSTPRIV+7)
+#define IEEE80211_IOCTL_ADDPMKID             (SIOCIWFIRSTPRIV+8)
+//#define IEEE80211_IOCTL_SETAUTHALG           (SIOCIWFIRSTPRIV+10)
+#define IEEE80211_IOCTL_LASTONE              (SIOCIWFIRSTPRIV+9)
+
+
+
+/*                      ====WMI Ioctls====                                    */
+/*
+ *
+ * Many ioctls simply provide WMI services to application code:
+ * an application makes such an ioctl call with a set of arguments
+ * that are packaged into the corresponding WMI message, and sent
+ * to the Target.
+ */
+
+#define AR6000_IOCTL_WMI_GETREV              (SIOCIWFIRSTPRIV+10)
+/*
+ * arguments:
+ *   ar6000_version *revision
+ */
+
+#define AR6000_IOCTL_WMI_SETPWR              (SIOCIWFIRSTPRIV+11)
+/*
+ * arguments:
+ *   WMI_POWER_MODE_CMD pwrModeCmd (see include/wmi.h)
+ * uses: WMI_SET_POWER_MODE_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_SETSCAN             (SIOCIWFIRSTPRIV+12)
+/*
+ * arguments:
+ *   WMI_SCAN_PARAMS_CMD scanParams (see include/wmi.h)
+ * uses: WMI_SET_SCAN_PARAMS_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_SETLISTENINT        (SIOCIWFIRSTPRIV+13)
+/*
+ * arguments:
+ *   UINT32 listenInterval
+ * uses: WMI_SET_LISTEN_INT_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_SETBSSFILTER        (SIOCIWFIRSTPRIV+14)
+/*
+ * arguments:
+ *   WMI_BSS_FILTER filter (see include/wmi.h)
+ * uses: WMI_SET_BSS_FILTER_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_SET_CHANNELPARAMS   (SIOCIWFIRSTPRIV+16)
+/*
+ * arguments:
+ *   WMI_CHANNEL_PARAMS_CMD chParams
+ * uses: WMI_SET_CHANNEL_PARAMS_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_SET_PROBEDSSID      (SIOCIWFIRSTPRIV+17)
+/*
+ * arguments:
+ *   WMI_PROBED_SSID_CMD probedSsids (see include/wmi.h)
+ * uses: WMI_SETPROBED_SSID_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_SET_PMPARAMS        (SIOCIWFIRSTPRIV+18)
+/*
+ * arguments:
+ *   WMI_POWER_PARAMS_CMD powerParams (see include/wmi.h)
+ * uses: WMI_SET_POWER_PARAMS_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_SET_BADAP           (SIOCIWFIRSTPRIV+19)
+/*
+ * arguments:
+ *   WMI_ADD_BAD_AP_CMD badAPs (see include/wmi.h)
+ * uses: WMI_ADD_BAD_AP_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_GET_QOS_QUEUE       (SIOCIWFIRSTPRIV+20)
+/*
+ * arguments:
+ *   ar6000_queuereq queueRequest (see below)
+ */
+
+#define AR6000_IOCTL_WMI_CREATE_QOS          (SIOCIWFIRSTPRIV+21)
+/*
+ * arguments:
+ *   WMI_CREATE_PSTREAM createPstreamCmd (see include/wmi.h)
+ * uses: WMI_CREATE_PSTREAM_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_DELETE_QOS          (SIOCIWFIRSTPRIV+22)
+/*
+ * arguments:
+ *   WMI_DELETE_PSTREAM_CMD deletePstreamCmd (see include/wmi.h)
+ * uses: WMI_DELETE_PSTREAM_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_SET_SNRTHRESHOLD   (SIOCIWFIRSTPRIV+23)
+/*
+ * arguments:
+ *   WMI_SNR_THRESHOLD_PARAMS_CMD thresholdParams (see include/wmi.h)
+ * uses: WMI_SNR_THRESHOLD_PARAMS_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_SET_ERROR_REPORT_BITMASK (SIOCIWFIRSTPRIV+24)
+/*
+ * arguments:
+ *   WMI_TARGET_ERROR_REPORT_BITMASK errorReportBitMask (see include/wmi.h)
+ * uses: WMI_TARGET_ERROR_REPORT_BITMASK_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_GET_TARGET_STATS    (SIOCIWFIRSTPRIV+25)
+/*
+ * arguments:
+ *   TARGET_STATS *targetStats (see below)
+ * uses: WMI_GET_STATISTICS_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_SET_ASSOC_INFO      (SIOCIWFIRSTPRIV+26)
+/*
+ * arguments:
+ *   WMI_SET_ASSOC_INFO_CMD setAssocInfoCmd
+ * uses: WMI_SET_ASSOC_INFO_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_SET_ACCESS_PARAMS   (SIOCIWFIRSTPRIV+27)
+/*
+ * arguments:
+ *   WMI_SET_ACCESS_PARAMS_CMD setAccessParams (see include/wmi.h)
+ * uses: WMI_SET_ACCESS_PARAMS_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_SET_BMISS_TIME      (SIOCIWFIRSTPRIV+28)
+/*
+ * arguments:
+ *   UINT32 beaconMissTime
+ * uses: WMI_SET_BMISS_TIME_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_SET_DISC_TIMEOUT    (SIOCIWFIRSTPRIV+29)
+/*
+ * arguments:
+ *   WMI_DISC_TIMEOUT_CMD disconnectTimeoutCmd (see include/wmi.h)
+ * uses: WMI_SET_DISC_TIMEOUT_CMDID
+ */
+
+#define AR6000_IOCTL_WMI_SET_IBSS_PM_CAPS    (SIOCIWFIRSTPRIV+30)
+/*
+ * arguments:
+ *   WMI_IBSS_PM_CAPS_CMD ibssPowerMgmtCapsCmd
+ * uses: WMI_SET_IBSS_PM_CAPS_CMDID
+ */
+
+/*
+ * There is a very small space available for driver-private
+ * wireless ioctls.  In order to circumvent this limitation,
+ * we multiplex a bunch of ioctls (XIOCTLs) on top of a
+ * single AR6000_IOCTL_EXTENDED ioctl.
+ */
+#define AR6000_IOCTL_EXTENDED                (SIOCIWFIRSTPRIV+31)
+
+
+/*                         ====BMI Extended Ioctls====                        */
+
+#define AR6000_XIOCTL_BMI_DONE                                  1
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_BMI_DONE)
+ * uses: BMI_DONE
+ */
+
+#define AR6000_XIOCTL_BMI_READ_MEMORY                           2
+/*
+ * arguments:
+ *   union {
+ *     struct {
+ *       UINT32 cmd (AR6000_XIOCTL_BMI_READ_MEMORY)
+ *       UINT32 address
+ *       UINT32 length
+ *     }
+ *     char results[length]
+ *   }
+ * uses: BMI_READ_MEMORY
+ */
+
+#define AR6000_XIOCTL_BMI_WRITE_MEMORY                          3
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_BMI_WRITE_MEMORY)
+ *   UINT32 address
+ *   UINT32 length
+ *   char data[length]
+ * uses: BMI_WRITE_MEMORY
+ */
+
+#define AR6000_XIOCTL_BMI_EXECUTE                               4
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_BMI_EXECUTE)
+ *   UINT32 TargetAddress
+ *   UINT32 parameter
+ * uses: BMI_EXECUTE
+ */
+
+#define AR6000_XIOCTL_BMI_SET_APP_START                         5
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_BMI_SET_APP_START)
+ *   UINT32 TargetAddress
+ * uses: BMI_SET_APP_START
+ */
+
+#define AR6000_XIOCTL_BMI_READ_SOC_REGISTER                     6
+/*
+ * arguments:
+ *   union {
+ *     struct {
+ *       UINT32 cmd (AR6000_XIOCTL_BMI_READ_SOC_REGISTER)
+ *       UINT32 TargetAddress, 32-bit aligned
+ *     }
+ *     UINT32 result
+ *   }
+ * uses: BMI_READ_SOC_REGISTER
+ */
+
+#define AR6000_XIOCTL_BMI_WRITE_SOC_REGISTER                    7
+/*
+ * arguments:
+ *     struct {
+ *       UINT32 cmd (AR6000_XIOCTL_BMI_WRITE_SOC_REGISTER)
+ *       UINT32 TargetAddress, 32-bit aligned
+ *       UINT32 newValue
+ *     }
+ * uses: BMI_WRITE_SOC_REGISTER
+ */
+
+#define AR6000_XIOCTL_BMI_TEST                                  8
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_BMI_TEST)
+ *   UINT32 address
+ *   UINT32 length
+ *   UINT32 count
+ */
+
+
+
+/* Historical Host-side DataSet support */
+#define AR6000_XIOCTL_UNUSED9                                   9
+#define AR6000_XIOCTL_UNUSED10                                  10
+#define AR6000_XIOCTL_UNUSED11                                  11
+
+/*                      ====Misc Extended Ioctls====                          */
+
+#define AR6000_XIOCTL_FORCE_TARGET_RESET                        12
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_FORCE_TARGET_RESET)
+ */
+
+
+#ifdef HTC_RAW_INTERFACE
+/* HTC Raw Interface Ioctls */
+#define AR6000_XIOCTL_HTC_RAW_OPEN                              13
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_HTC_RAW_OPEN)
+ */
+
+#define AR6000_XIOCTL_HTC_RAW_CLOSE                             14
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_HTC_RAW_CLOSE)
+ */
+
+#define AR6000_XIOCTL_HTC_RAW_READ                              15
+/*
+ * arguments:
+ *   union {
+ *     struct {
+ *       UINT32 cmd (AR6000_XIOCTL_HTC_RAW_READ)
+ *       UINT32 mailboxID
+ *       UINT32 length
+ *     }
+ *     results[length]
+ *   }
+ */
+
+#define AR6000_XIOCTL_HTC_RAW_WRITE                             16
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_HTC_RAW_WRITE)
+ *   UINT32 mailboxID
+ *   UINT32 length
+ *   char buffer[length]
+ */
+#endif /* HTC_RAW_INTERFACE */
+
+#define AR6000_XIOCTL_CHECK_TARGET_READY                        17
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_CHECK_TARGET_READY)
+ */
+
+
+
+/*                ====GPIO (General Purpose I/O) Extended Ioctls====          */
+
+#define AR6000_XIOCTL_GPIO_OUTPUT_SET                           18
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_GPIO_OUTPUT_SET)
+ *   ar6000_gpio_output_set_cmd_s (see below)
+ * uses: WMIX_GPIO_OUTPUT_SET_CMDID
+ */
+
+#define AR6000_XIOCTL_GPIO_INPUT_GET                            19
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_GPIO_INPUT_GET)
+ * uses: WMIX_GPIO_INPUT_GET_CMDID
+ */
+
+#define AR6000_XIOCTL_GPIO_REGISTER_SET                         20
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_GPIO_REGISTER_SET)
+ *   ar6000_gpio_register_cmd_s (see below)
+ * uses: WMIX_GPIO_REGISTER_SET_CMDID
+ */
+
+#define AR6000_XIOCTL_GPIO_REGISTER_GET                         21
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_GPIO_REGISTER_GET)
+ *   ar6000_gpio_register_cmd_s (see below)
+ * uses: WMIX_GPIO_REGISTER_GET_CMDID
+ */
+
+#define AR6000_XIOCTL_GPIO_INTR_ACK                             22
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_GPIO_INTR_ACK)
+ *   ar6000_cpio_intr_ack_cmd_s (see below)
+ * uses: WMIX_GPIO_INTR_ACK_CMDID
+ */
+
+#define AR6000_XIOCTL_GPIO_INTR_WAIT                            23
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_GPIO_INTR_WAIT)
+ */
+
+
+
+/*                    ====more wireless commands====                          */
+
+#define AR6000_XIOCTL_SET_ADHOC_BSSID                           24
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_SET_ADHOC_BSSID)
+ *   WMI_SET_ADHOC_BSSID_CMD setAdHocBssidCmd (see include/wmi.h)
+ */
+
+#define AR6000_XIOCTL_SET_OPT_MODE                              25
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_SET_OPT_MODE)
+ *   WMI_SET_OPT_MODE_CMD setOptModeCmd (see include/wmi.h)
+ * uses: WMI_SET_OPT_MODE_CMDID
+ */
+
+#define AR6000_XIOCTL_OPT_SEND_FRAME                            26
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_OPT_SEND_FRAME)
+ *   WMI_OPT_TX_FRAME_CMD optTxFrameCmd (see include/wmi.h)
+ * uses: WMI_OPT_TX_FRAME_CMDID
+ */
+
+#define AR6000_XIOCTL_SET_ADHOC_BEACON_INTVAL                   27
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_SET_ADHOC_BEACON_INTVAL)
+ *   WMI_BEACON_INT_CMD beaconIntCmd (see include/wmi.h)
+ * uses: WMI_SET_BEACON_INT_CMDID
+ */
+
+
+#define IEEE80211_IOCTL_SETAUTHALG                              28
+
+
+#define AR6000_XIOCTL_SET_VOICE_PKT_SIZE                        29
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_SET_VOICE_PKT_SIZE)
+ *   WMI_SET_VOICE_PKT_SIZE_CMD setVoicePktSizeCmd (see include/wmi.h)
+ * uses: WMI_SET_VOICE_PKT_SIZE_CMDID
+ */
+
+
+#define AR6000_XIOCTL_SET_MAX_SP                                30
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_SET_MAX_SP)
+ *   WMI_SET_MAX_SP_LEN_CMD maxSPLen(see include/wmi.h)
+ * uses: WMI_SET_MAX_SP_LEN_CMDID
+ */
+
+#define AR6000_XIOCTL_WMI_GET_ROAM_TBL                          31
+
+#define AR6000_XIOCTL_WMI_SET_ROAM_CTRL                         32
+
+#define AR6000_XIOCTRL_WMI_SET_POWERSAVE_TIMERS                 33
+
+
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTRL_WMI_SET_POWERSAVE_TIMERS)
+ *   WMI_SET_POWERSAVE_TIMERS_CMD powerSaveTimers(see include/wmi.h)
+ *   WMI_SET_POWERSAVE_TIMERS_CMDID
+ */
+
+#define AR6000_XIOCTRL_WMI_GET_POWER_MODE                        34
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTRL_WMI_GET_POWER_MODE)
+ */
+
+#define AR6000_XIOCTRL_WMI_SET_WLAN_STATE                       35
+typedef enum {
+    WLAN_DISABLED,
+    WLAN_ENABLED
+} AR6000_WLAN_STATE;
+/*
+ * arguments:
+ * enable/disable
+ */
+
+#define AR6000_XIOCTL_WMI_GET_ROAM_DATA                         36
+
+#define AR6000_XIOCTL_WMI_SETRETRYLIMITS                37
+/*
+ * arguments:
+ *   WMI_SET_RETRY_LIMITS_CMD ibssSetRetryLimitsCmd
+ * uses: WMI_SET_RETRY_LIMITS_CMDID
+ */
+
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+/*       ====extended commands for radio test ====                          */
+
+#define AR6000_XIOCTL_TCMD_CONT_TX                      38
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_TCMD_CONT_TX)
+ *   WMI_TCMD_CONT_TX_CMD contTxCmd (see include/wmi.h)
+ * uses: WMI_TCMD_CONT_TX_CMDID
+ */
+
+#define AR6000_XIOCTL_TCMD_CONT_RX                      39
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_TCMD_CONT_RX)
+ *   WMI_TCMD_CONT_RX_CMD rxCmd (see include/wmi.h)
+ * uses: WMI_TCMD_CONT_RX_CMDID
+ */
+
+#define AR6000_XIOCTL_TCMD_PM                           40
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_TCMD_PM)
+ *   WMI_TCMD_PM_CMD pmCmd (see include/wmi.h)
+ * uses: WMI_TCMD_PM_CMDID
+ */
+
+#endif /* CONFIG_HOST_TCMD_SUPPORT */
+
+#define AR6000_XIOCTL_WMI_STARTSCAN                     41
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_WMI_STARTSCAN)
+ *   UINT8  scanType
+ *   UINT8  scanConnected
+ *   A_BOOL forceFgScan
+ * uses: WMI_START_SCAN_CMDID
+ */
+
+#define AR6000_XIOCTL_WMI_SETFIXRATES                   42
+
+#define AR6000_XIOCTL_WMI_GETFIXRATES                   43
+
+
+#define AR6000_XIOCTL_WMI_SET_RSSITHRESHOLD             44
+/*
+ * arguments:
+ *   WMI_RSSI_THRESHOLD_PARAMS_CMD thresholdParams (see include/wmi.h)
+ * uses: WMI_RSSI_THRESHOLD_PARAMS_CMDID
+ */
+
+#define AR6000_XIOCTL_WMI_CLR_RSSISNR                   45
+/*
+ * arguments:
+ *   WMI_CLR_RSSISNR_CMD thresholdParams (see include/wmi.h)
+ * uses: WMI_CLR_RSSISNR_CMDID
+ */
+
+#define AR6000_XIOCTL_WMI_SET_LQTHRESHOLD               46
+/*
+ * arguments:
+ *   WMI_LQ_THRESHOLD_PARAMS_CMD thresholdParams (see include/wmi.h)
+ * uses: WMI_LQ_THRESHOLD_PARAMS_CMDID
+ */
+
+#define AR6000_XIOCTL_WMI_SET_RTS                        47
+/*
+ * arguments:
+ *   WMI_SET_RTS_MODE_CMD (see include/wmi.h)
+ * uses: WMI_SET_RTS_MODE_CMDID
+ */
+
+#define AR6000_XIOCTL_WMI_SET_LPREAMBLE                 48
+
+#define AR6000_XIOCTL_WMI_SET_AUTHMODE                  49
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_WMI_SET_AUTHMODE)
+ *   UINT8  mode
+ * uses: WMI_SET_RECONNECT_AUTH_MODE_CMDID
+ */
+
+#define AR6000_XIOCTL_WMI_SET_REASSOCMODE               50
+
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_WMI_SET_WMM)
+ *   UINT8  mode
+ * uses: WMI_SET_WMM_CMDID
+ */
+#define AR6000_XIOCTL_WMI_SET_WMM                       51
+
+/*
+ * arguments:
+ * UINT32 cmd (AR6000_XIOCTL_WMI_SET_HB_CHALLENGE_RESP_PARAMS)
+ * UINT32 frequency
+ * UINT8  threshold
+ */
+#define AR6000_XIOCTL_WMI_SET_HB_CHALLENGE_RESP_PARAMS  52
+
+/*
+ * arguments:
+ * UINT32 cmd (AR6000_XIOCTL_WMI_GET_HB_CHALLENGE_RESP)
+ * UINT32 cookie
+ */
+#define AR6000_XIOCTL_WMI_GET_HB_CHALLENGE_RESP         53
+
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_WMI_GET_RD)
+ *   UINT32 regDomain
+ */
+#define AR6000_XIOCTL_WMI_GET_RD                        54
+
+#define AR6000_XIOCTL_DIAG_READ                         55
+
+#define AR6000_XIOCTL_DIAG_WRITE                        56
+
+/*
+ * arguments cmd (AR6000_XIOCTL_SET_TXOP)
+ * WMI_TXOP_CFG  txopEnable
+ */
+#define AR6000_XIOCTL_WMI_SET_TXOP                      57
+
+#ifdef USER_KEYS
+/*
+ * arguments:
+ * UINT32 cmd (AR6000_XIOCTL_USER_SETKEYS)
+ * UINT32 keyOpCtrl
+ * uses AR6000_USER_SETKEYS_INFO
+ */
+#define AR6000_XIOCTL_USER_SETKEYS                      58
+#endif /* USER_KEYS */
+
+#define AR6000_XIOCTL_WMI_SET_KEEPALIVE                 59
+/*
+ * arguments:
+ *   UINT8 cmd (AR6000_XIOCTL_WMI_SET_KEEPALIVE)
+ *   UINT8 keepaliveInterval
+ * uses: WMI_SET_KEEPALIVE_CMDID
+ */
+
+#define AR6000_XIOCTL_WMI_GET_KEEPALIVE                 60
+/*
+ * arguments:
+ *   UINT8 cmd (AR6000_XIOCTL_WMI_GET_KEEPALIVE)
+ *   UINT8 keepaliveInterval
+ *   A_BOOL configured
+ * uses: WMI_GET_KEEPALIVE_CMDID
+ */
+
+/*               ====ROM Patching Extended Ioctls====                       */
+
+#define AR6000_XIOCTL_BMI_ROMPATCH_INSTALL              61
+/*
+ * arguments:
+ *     union {
+ *       struct {
+ *         UINT32 cmd (AR6000_XIOCTL_BMI_ROMPATCH_INSTALL)
+ *         UINT32 ROM Address
+ *         UINT32 RAM Address
+ *         UINT32 number of bytes
+ *         UINT32 activate? (0 or 1)
+ *       }
+ *       A_UINT32 resulting rompatch ID
+ *     }
+ * uses: BMI_ROMPATCH_INSTALL
+ */
+
+#define AR6000_XIOCTL_BMI_ROMPATCH_UNINSTALL            62
+/*
+ * arguments:
+ *     struct {
+ *       UINT32 cmd (AR6000_XIOCTL_BMI_ROMPATCH_UNINSTALL)
+ *       UINT32 rompatch ID
+ *     }
+ * uses: BMI_ROMPATCH_UNINSTALL
+ */
+
+#define AR6000_XIOCTL_BMI_ROMPATCH_ACTIVATE             63
+/*
+ * arguments:
+ *     struct {
+ *       UINT32 cmd (AR6000_XIOCTL_BMI_ROMPATCH_ACTIVATE)
+ *       UINT32 rompatch count
+ *       UINT32 rompatch IDs[rompatch count]
+ *     }
+ * uses: BMI_ROMPATCH_ACTIVATE
+ */
+
+#define AR6000_XIOCTL_BMI_ROMPATCH_DEACTIVATE           64
+/*
+ * arguments:
+ *     struct {
+ *       UINT32 cmd (AR6000_XIOCTL_BMI_ROMPATCH_DEACTIVATE)
+ *       UINT32 rompatch count
+ *       UINT32 rompatch IDs[rompatch count]
+ *     }
+ * uses: BMI_ROMPATCH_DEACTIVATE
+ */
+
+#define AR6000_XIOCTL_WMI_SET_APPIE             65
+/*
+ * arguments:
+ *      struct {
+ *          UINT32 cmd (AR6000_XIOCTL_WMI_SET_APPIE)
+ *          UINT32  app_frmtype;
+ *          UINT32  app_buflen;
+ *          UINT8   app_buf[];
+ *      }
+ */
+#define AR6000_XIOCTL_WMI_SET_MGMT_FRM_RX_FILTER    66
+/*
+ * arguments:
+ *      A_UINT32 filter_type;
+ */
+
+#define AR6000_XIOCTL_DBGLOG_CFG_MODULE             67
+
+#define AR6000_XIOCTL_DBGLOG_GET_DEBUG_LOGS         68
+
+#define AR6000_XIOCTL_WMI_SET_WSC_STATUS    		70
+/*
+ * arguments:
+ *      A_UINT32 wsc_status;
+ *            (WSC_REG_INACTIVE or WSC_REG_ACTIVE)
+ */
+
+/*
+ * arguments:
+ *      struct {
+ *          A_UINT8 streamType;
+ *          A_UINT8 status;
+ *      }
+ * uses: WMI_SET_BT_STATUS_CMDID
+ */
+#define AR6000_XIOCTL_WMI_SET_BT_STATUS             71
+
+/*
+ * arguments:
+ *      struct {
+ *           A_UINT8 paramType;
+ *           union {
+ *               A_UINT8 noSCOPkts;
+ *               BT_PARAMS_A2DP a2dpParams;
+ *               BT_COEX_REGS regs;
+ *           };
+ *      }
+ * uses: WMI_SET_BT_PARAM_CMDID
+ */
+#define AR6000_XIOCTL_WMI_SET_BT_PARAMS             72
+
+#define AR6000_XIOCTL_WMI_SET_HOST_SLEEP_MODE       73
+#define AR6000_XIOCTL_WMI_SET_WOW_MODE              74
+#define AR6000_XIOCTL_WMI_GET_WOW_LIST              75
+#define AR6000_XIOCTL_WMI_ADD_WOW_PATTERN           76
+#define AR6000_XIOCTL_WMI_DEL_WOW_PATTERN           77
+
+
+
+#define AR6000_XIOCTL_TARGET_INFO                   78
+/*
+ * arguments:
+ *   UINT32 cmd (AR6000_XIOCTL_TARGET_INFO)
+ *   A_UINT32 TargetVersion (returned)
+ *   A_UINT32 TargetType    (returned)
+ * (See also bmi_msg.h target_ver and target_type)
+ */
+
+#define AR6000_XIOCTL_DUMP_HTC_CREDIT_STATE         79
+/*
+ * arguments:
+ *      none
+ */
+
+#define AR6000_XIOCTL_TRAFFIC_ACTIVITY_CHANGE       80
+/*
+ * This ioctl is used to emulate traffic activity
+ * timeouts.  Activity/inactivity will trigger the driver
+ * to re-balance credits.
+ *
+ * arguments:
+ *      ar6000_traffic_activity_change
+ */
+
+#define AR6000_XIOCTL_WMI_SET_CONNECT_CTRL_FLAGS    81
+/*
+ * This ioctl is used to set the connect control flags
+ *
+ * arguments:
+ *      A_UINT32 connectCtrlFlags
+ */
+
+#define AR6000_XIOCTL_WMI_SET_AKMP_PARAMS              82
+/*
+ * This IOCTL sets any Authentication,Key Management and Protection
+ * related parameters. This is used along with the information set in
+ * Connect Command. 
+ * Currently this enables Multiple PMKIDs to an AP. 
+ *
+ * arguments:
+ *      struct {
+ *          A_UINT32    akmpInfo;
+ *      }
+ * uses: WMI_SET_AKMP_PARAMS_CMD
+ */
+
+#define AR6000_XIOCTL_WMI_GET_PMKID_LIST            83
+
+#define AR6000_XIOCTL_WMI_SET_PMKID_LIST            84
+/* 
+ * This IOCTL is used to set a list of PMKIDs. This list of 
+ * PMKIDs is used in the [Re]AssocReq Frame. This list is used
+ * only if the MultiPMKID option is enabled via the 
+ * AR6000_XIOCTL_WMI_SET_AKMP_PARAMS  IOCTL.
+ *
+ * arguments:
+ *      struct {
+ *          A_UINT32    numPMKID;
+ *          WMI_PMKID   pmkidList[WMI_MAX_PMKID_CACHE];
+ *      }
+ * uses: WMI_SET_PMKIDLIST_CMD
+ */
+
+/* Historical DSETPATCH support for INI patches */
+#define AR6000_XIOCTL_UNUSED90                      90
+
+
+
+/* used by AR6000_IOCTL_WMI_GETREV */
+struct ar6000_version {
+    A_UINT32        host_ver;
+    A_UINT32        target_ver;
+};
+
+/* used by AR6000_IOCTL_WMI_GET_QOS_QUEUE */
+struct ar6000_queuereq {
+    A_UINT8         trafficClass;
+    A_UINT16        activeTsids;
+};
+
+/* used by AR6000_IOCTL_WMI_GET_TARGET_STATS */
+typedef struct targetStats_t {
+    A_UINT64    tx_packets;
+    A_UINT64    tx_bytes;
+    A_UINT64    tx_unicast_pkts;
+    A_UINT64    tx_unicast_bytes;
+    A_UINT64    tx_multicast_pkts;
+    A_UINT64    tx_multicast_bytes;
+    A_UINT64    tx_broadcast_pkts;
+    A_UINT64    tx_broadcast_bytes;
+    A_UINT64    tx_rts_success_cnt;
+    A_UINT64    tx_packet_per_ac[4];
+
+    A_UINT64    tx_errors;
+    A_UINT64    tx_failed_cnt;
+    A_UINT64    tx_retry_cnt;
+    A_UINT64    tx_rts_fail_cnt;
+    A_INT32     tx_unicast_rate;
+    A_UINT64    rx_packets;
+    A_UINT64    rx_bytes;
+    A_UINT64    rx_unicast_pkts;
+    A_UINT64    rx_unicast_bytes;
+    A_UINT64    rx_multicast_pkts;
+    A_UINT64    rx_multicast_bytes;
+    A_UINT64    rx_broadcast_pkts;
+    A_UINT64    rx_broadcast_bytes;
+    A_UINT64    rx_fragment_pkt;
+
+    A_UINT64    rx_errors;
+    A_UINT64    rx_crcerr;
+    A_UINT64    rx_key_cache_miss;
+    A_UINT64    rx_decrypt_err;
+    A_UINT64    rx_duplicate_frames;
+    A_INT32     rx_unicast_rate;
+
+    A_UINT64    tkip_local_mic_failure;
+    A_UINT64    tkip_counter_measures_invoked;
+    A_UINT64    tkip_replays;
+    A_UINT64    tkip_format_errors;
+    A_UINT64    ccmp_format_errors;
+    A_UINT64    ccmp_replays;
+
+    A_UINT64    power_save_failure_cnt;
+    A_INT16     noise_floor_calibation;
+
+    A_UINT64    cs_bmiss_cnt;
+    A_UINT64    cs_lowRssi_cnt;
+    A_UINT64    cs_connect_cnt;
+    A_UINT64    cs_disconnect_cnt;
+    A_UINT8     cs_aveBeacon_snr;
+    A_INT16     cs_aveBeacon_rssi;
+    A_UINT8     cs_lastRoam_msec;
+    A_UINT8     cs_snr;
+    A_INT16     cs_rssi;
+
+    A_UINT32    lq_val;
+
+    A_UINT32    wow_num_pkts_dropped;
+    A_UINT8     wow_num_host_pkt_wakeups;
+    A_UINT8     wow_num_host_event_wakeups;
+    A_UINT16    wow_num_events_discarded;
+
+}TARGET_STATS;
+
+typedef struct targetStats_cmd_t {
+    TARGET_STATS targetStats;
+    int clearStats;
+} TARGET_STATS_CMD;
+
+/* used by AR6000_XIOCTL_USER_SETKEYS */
+
+/*
+ * Setting this bit to 1 doesnot initialize the RSC on the firmware
+ */
+#define AR6000_XIOCTL_USER_SETKEYS_RSC_CTRL    1
+#define AR6000_USER_SETKEYS_RSC_UNCHANGED     0x00000002
+
+typedef struct {
+    A_UINT32  keyOpCtrl;  /* Bit Map of Key Mgmt Ctrl Flags */
+} AR6000_USER_SETKEYS_INFO;
+
+
+/* used by AR6000_XIOCTL_GPIO_OUTPUT_SET */
+struct ar6000_gpio_output_set_cmd_s {
+    A_UINT32 set_mask;
+    A_UINT32 clear_mask;
+    A_UINT32 enable_mask;
+    A_UINT32 disable_mask;
+};
+
+/*
+ * used by AR6000_XIOCTL_GPIO_REGISTER_GET and AR6000_XIOCTL_GPIO_REGISTER_SET
+ */
+struct ar6000_gpio_register_cmd_s {
+    A_UINT32 gpioreg_id;
+    A_UINT32 value;
+};
+
+/* used by AR6000_XIOCTL_GPIO_INTR_ACK */
+struct ar6000_gpio_intr_ack_cmd_s {
+    A_UINT32 ack_mask;
+};
+
+/* used by AR6000_XIOCTL_GPIO_INTR_WAIT */
+struct ar6000_gpio_intr_wait_cmd_s {
+    A_UINT32 intr_mask;
+    A_UINT32 input_values;
+};
+
+/* used by the AR6000_XIOCTL_DBGLOG_CFG_MODULE */
+typedef struct ar6000_dbglog_module_config_s {
+    A_UINT32 valid;
+    A_UINT16 mmask;
+    A_UINT16 tsr;
+    A_BOOL   rep;
+    A_UINT16 size;
+} DBGLOG_MODULE_CONFIG;
+
+typedef struct user_rssi_thold_t {
+    A_INT16     tag;
+    A_INT16     rssi;
+} USER_RSSI_THOLD;
+
+typedef struct user_rssi_params_t {
+    A_UINT8            weight;
+    A_UINT32           pollTime;
+    USER_RSSI_THOLD    tholds[12];
+} USER_RSSI_PARAMS;
+
+/*
+ * Host driver may have some config parameters. Typically, these
+ * config params are one time config parameters. These could
+ * correspond to any of the underlying modules. Host driver exposes
+ * an api for the underlying modules to get this config.
+ */
+#define AR6000_DRIVER_CFG_BASE                  0x8000
+
+/* Should driver perform wlan node caching? */
+#define AR6000_DRIVER_CFG_GET_WLANNODECACHING   0x8001
+/*Should we log raw WMI msgs */
+#define AR6000_DRIVER_CFG_LOG_RAW_WMI_MSGS      0x8002
+
+/* used by AR6000_XIOCTL_DIAG_READ & AR6000_XIOCTL_DIAG_WRITE */
+struct ar6000_diag_window_cmd_s {
+    unsigned int addr;
+    unsigned int value;
+};
+
+
+struct ar6000_traffic_activity_change {
+    A_UINT32    StreamID;   /* stream ID to indicate activity change */
+    A_UINT32    Active;     /* active (1) or inactive (0) */
+};
+
+#ifdef __cplusplus
+}
+#endif
+#endif

Added: trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/athendpack_linux.h
===================================================================

Added: trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/athstartpack_linux.h
===================================================================

Added: trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/athtypes_linux.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/athtypes_linux.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/athtypes_linux.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,47 @@
+/*
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/os/linux/include/athtypes_linux.h#1 $
+ *
+ * This file contains the definitions of the basic atheros data types.
+ * It is used to map the data types in atheros files to a platform specific
+ * type.
+ *
+ * Copyright 2003-2005 Atheros Communications, Inc.,  All Rights Reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#ifndef _ATHTYPES_LINUX_H_
+#define _ATHTYPES_LINUX_H_
+
+#ifdef __KERNEL__
+#include <linux/types.h>
+#endif
+
+typedef int8_t      A_INT8;
+typedef int16_t     A_INT16;
+typedef int32_t     A_INT32;
+typedef int64_t     A_INT64;
+
+typedef u_int8_t     A_UINT8;
+typedef u_int16_t    A_UINT16;
+typedef u_int32_t    A_UINT32;
+typedef u_int64_t    A_UINT64;
+
+typedef int             A_BOOL;
+typedef char            A_CHAR;
+typedef unsigned char   A_UCHAR;
+typedef unsigned long   A_ATH_TIMER;
+
+
+#endif /* _ATHTYPES_LINUX_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/config_linux.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/config_linux.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/config_linux.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,44 @@
+/*
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#ifndef _CONFIG_LINUX_H_
+#define _CONFIG_LINUX_H_
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/*
+ * Host-side GPIO support is optional.
+ * If run-time access to GPIO pins is not required, then
+ * this should be changed to #undef.
+ */
+#define CONFIG_HOST_GPIO_SUPPORT
+
+/*
+ * Host side Test Command support
+ */
+#define CONFIG_HOST_TCMD_SUPPORT
+
+#define USE_4BYTE_REGISTER_ACCESS
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif

Added: trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/debug_linux.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/debug_linux.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/debug_linux.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,86 @@
+/*
+ * Copyright (c) 2004-2006 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#ifndef _DEBUG_LINUX_H_
+#define _DEBUG_LINUX_H_
+
+#define DBG_DEFAULTS	(DBG_ERROR|DBG_WARNING)
+
+extern A_UINT32 g_dbg_flags;
+
+#define DBGFMT  "%s() : "
+#define DBGARG  __func__
+#define DBGFN	A_PRINTF
+
+/* ------- Debug related stuff ------- */
+enum {
+    ATH_DEBUG_SEND = 0x0001,
+    ATH_DEBUG_RECV = 0x0002,
+    ATH_DEBUG_SYNC = 0x0004,
+    ATH_DEBUG_DUMP = 0x0008,
+    ATH_DEBUG_IRQ  = 0x0010,
+    ATH_DEBUG_TRC  = 0x0020,
+    ATH_DEBUG_WARN = 0x0040,
+    ATH_DEBUG_ERR  = 0x0080,
+    ATH_LOG_INF	   = 0x0100,
+    ATH_DEBUG_BMI  = 0x0110,
+    ATH_DEBUG_WMI  = 0x0120,
+    ATH_DEBUG_HIF  = 0x0140,
+    ATH_DEBUG_HTC  = 0x0180,
+    ATH_DEBUG_WLAN = 0x1000,
+    ATH_LOG_ERR	   = 0x1010,
+    ATH_DEBUG_ANY  = 0xFFFF,
+};
+
+#ifdef DEBUG
+
+#define A_DPRINTF(f, a) \
+	if(g_dbg_flags & (f)) \
+	{	\
+		DBGFN a ; \
+	}
+
+
+// TODO FIX usage of A_PRINTF!
+#define AR_DEBUG_LVL_CHECK(lvl) (debughtc & (lvl))
+#define AR_DEBUG_PRINTBUF(buffer, length, desc) do {   \
+    if (debughtc & ATH_DEBUG_DUMP) {             \
+        DebugDumpBytes(buffer, length,desc);               \
+    }                                            \
+} while(0)
+#define PRINTX_ARG(arg...) arg
+#define AR_DEBUG_PRINTF(flags, args) do {        \
+    if (debughtc & (flags)) {                    \
+        A_PRINTF(KERN_ALERT PRINTX_ARG args);    \
+    }                                            \
+} while (0)
+#define AR_DEBUG_ASSERT(test) do {               \
+    if (!(test)) {                               \
+        AR_DEBUG_PRINTF(ATH_DEBUG_ERR, ("Debug Assert Caught, File %s, Line: %d, Test:%s \n",__FILE__, __LINE__,#test));         \
+    }                                            \
+} while(0)
+extern int debughtc;
+#else
+#define AR_DEBUG_PRINTF(flags, args)
+#define AR_DEBUG_PRINTBUF(buffer, length)
+#define AR_DEBUG_ASSERT(test)
+#define AR_DEBUG_LVL_CHECK(lvl) 0
+#define A_DPRINTF(f, a)
+#endif
+
+#endif /* _DEBUG_LINUX_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/ieee80211_ioctl.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/ieee80211_ioctl.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/ieee80211_ioctl.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,163 @@
+/*
+ * Copyright (c) 2004-2005 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ *
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/os/linux/include/ieee80211_ioctl.h#1 $
+ */
+
+#ifndef _IEEE80211_IOCTL_H_
+#define _IEEE80211_IOCTL_H_
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/*
+ * Extracted from the MADWIFI net80211/ieee80211_ioctl.h
+ */
+
+/*
+ * WPA/RSN get/set key request.  Specify the key/cipher
+ * type and whether the key is to be used for sending and/or
+ * receiving.  The key index should be set only when working
+ * with global keys (use IEEE80211_KEYIX_NONE for ``no index'').
+ * Otherwise a unicast/pairwise key is specified by the bssid
+ * (on a station) or mac address (on an ap).  They key length
+ * must include any MIC key data; otherwise it should be no
+ more than IEEE80211_KEYBUF_SIZE.
+ */
+struct ieee80211req_key {
+	u_int8_t	ik_type;	/* key/cipher type */
+	u_int8_t	ik_pad;
+	u_int16_t	ik_keyix;	/* key index */
+	u_int8_t	ik_keylen;	/* key length in bytes */
+	u_int8_t	ik_flags;
+#define IEEE80211_KEY_XMIT  0x01
+#define IEEE80211_KEY_RECV  0x02
+#define	IEEE80211_KEY_DEFAULT	0x80	/* default xmit key */
+	u_int8_t	ik_macaddr[IEEE80211_ADDR_LEN];
+	u_int64_t	ik_keyrsc;	/* key receive sequence counter */
+	u_int64_t	ik_keytsc;	/* key transmit sequence counter */
+	u_int8_t	ik_keydata[IEEE80211_KEYBUF_SIZE+IEEE80211_MICBUF_SIZE];
+};
+/*
+ * Delete a key either by index or address.  Set the index
+ * to IEEE80211_KEYIX_NONE when deleting a unicast key.
+ */
+struct ieee80211req_del_key {
+	u_int8_t	idk_keyix;	/* key index */
+	u_int8_t	idk_macaddr[IEEE80211_ADDR_LEN];
+};
+/*
+ * MLME state manipulation request.  IEEE80211_MLME_ASSOC
+ * only makes sense when operating as a station.  The other
+ * requests can be used when operating as a station or an
+ * ap (to effect a station).
+ */
+struct ieee80211req_mlme {
+	u_int8_t	im_op;		/* operation to perform */
+#define	IEEE80211_MLME_ASSOC		1	/* associate station */
+#define	IEEE80211_MLME_DISASSOC		2	/* disassociate station */
+#define	IEEE80211_MLME_DEAUTH		3	/* deauthenticate station */
+#define	IEEE80211_MLME_AUTHORIZE	4	/* authorize station */
+#define	IEEE80211_MLME_UNAUTHORIZE	5	/* unauthorize station */
+	u_int16_t	im_reason;	/* 802.11 reason code */
+	u_int8_t	im_macaddr[IEEE80211_ADDR_LEN];
+};
+
+struct ieee80211req_addpmkid {
+    u_int8_t    pi_bssid[IEEE80211_ADDR_LEN];
+    u_int8_t    pi_enable;
+    u_int8_t    pi_pmkid[16];
+};
+
+#define AUTH_ALG_OPEN_SYSTEM	0x01
+#define AUTH_ALG_SHARED_KEY	0x02
+#define AUTH_ALG_LEAP		0x04
+
+struct ieee80211req_authalg {
+   u_int8_t auth_alg;
+};  
+
+/* 
+ * Request to add an IE to a Management Frame
+ */
+enum{
+    IEEE80211_APPIE_FRAME_BEACON     = 0,
+    IEEE80211_APPIE_FRAME_PROBE_REQ  = 1,
+    IEEE80211_APPIE_FRAME_PROBE_RESP = 2,
+    IEEE80211_APPIE_FRAME_ASSOC_REQ  = 3,
+    IEEE80211_APPIE_FRAME_ASSOC_RESP = 4,
+    IEEE80211_APPIE_NUM_OF_FRAME     = 5
+};
+
+/*
+ * The Maximum length of the IE that can be added to a Management frame
+ */
+#define IEEE80211_APPIE_FRAME_MAX_LEN  78
+
+struct ieee80211req_getset_appiebuf {
+    u_int32_t app_frmtype; /* management frame type for which buffer is added */
+    u_int32_t app_buflen;  /*application supplied buffer length */
+    u_int8_t  app_buf[];
+};
+
+/* 
+ * The following definitions are used by an application to set filter
+ * for receiving management frames 
+ */
+enum {
+     IEEE80211_FILTER_TYPE_BEACON      =   0x1,
+     IEEE80211_FILTER_TYPE_PROBE_REQ   =   0x2,
+     IEEE80211_FILTER_TYPE_PROBE_RESP  =   0x4,
+     IEEE80211_FILTER_TYPE_ASSOC_REQ   =   0x8,
+     IEEE80211_FILTER_TYPE_ASSOC_RESP  =   0x10,
+     IEEE80211_FILTER_TYPE_AUTH        =   0x20,
+     IEEE80211_FILTER_TYPE_DEAUTH      =   0x40,
+     IEEE80211_FILTER_TYPE_DISASSOC    =   0x80,
+     IEEE80211_FILTER_TYPE_ALL         =   0xFF  /* used to check the valid filter bits */
+};
+
+struct ieee80211req_set_filter {
+      u_int32_t app_filterype; /* management frame filter type */
+};
+
+enum {
+    IEEE80211_PARAM_AUTHMODE = 3,   /* Authentication Mode */
+    IEEE80211_PARAM_MCASTCIPHER = 5,
+    IEEE80211_PARAM_MCASTKEYLEN = 6,    /* multicast key length */
+    IEEE80211_PARAM_UCASTCIPHER = 8,
+    IEEE80211_PARAM_UCASTKEYLEN = 9,    /* unicast key length */
+	IEEE80211_PARAM_WPA		= 10,	/* WPA mode (0,1,2) */
+	IEEE80211_PARAM_ROAMING		= 12,	/* roaming mode */
+	IEEE80211_PARAM_PRIVACY		= 13,	/* privacy invoked */
+	IEEE80211_PARAM_COUNTERMEASURES	= 14,	/* WPA/TKIP countermeasures */
+	IEEE80211_PARAM_DROPUNENCRYPTED	= 15,	/* discard unencrypted frames */
+};
+
+/*
+ * Values for IEEE80211_PARAM_WPA
+ */
+#define WPA_MODE_WPA1   1
+#define WPA_MODE_WPA2   2
+#define WPA_MODE_AUTO   3
+#define WPA_MODE_NONE   4
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _IEEE80211_IOCTL_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/osapi_linux.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/osapi_linux.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/include/osapi_linux.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,319 @@
+/*
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/os/linux/include/osapi_linux.h#1 $
+ *
+ * This file contains the definitions of the basic atheros data types.
+ * It is used to map the data types in atheros files to a platform specific
+ * type.
+ *
+ * Copyright 2003-2005 Atheros Communications, Inc.,  All Rights Reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#ifndef _OSAPI_LINUX_H_
+#define _OSAPI_LINUX_H_
+
+#ifdef __KERNEL__
+
+#include <linux/version.h>
+#include <linux/types.h>
+#include <linux/kernel.h>
+#include <linux/string.h>
+#include <linux/skbuff.h>
+#include <linux/netdevice.h>
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)
+#include <linux/jiffies.h>
+#endif
+#include <linux/timer.h>
+#include <linux/delay.h>
+#include <linux/wait.h>
+#ifdef KERNEL_2_4
+#include <asm/arch/irq.h>
+#include <asm/irq.h>
+#endif
+
+#ifdef __GNUC__
+#define __ATTRIB_PACK           __attribute__ ((packed))
+#define __ATTRIB_PRINTF         __attribute__ ((format (printf, 1, 2)))
+#define __ATTRIB_NORETURN       __attribute__ ((noreturn))
+#ifndef INLINE
+#define INLINE                  __inline__
+#endif
+#else /* Not GCC */
+#define __ATTRIB_PACK
+#define __ATTRIB_PRINTF
+#define __ATTRIB_NORETURN
+#ifndef INLINE
+#define INLINE                  __inline
+#endif
+#endif /* End __GNUC__ */
+
+#define PREPACK
+#define POSTPACK                __ATTRIB_PACK
+
+/*
+ * Endianes macros
+ */
+#define A_BE2CPU8(x)       ntohb(x)
+#define A_BE2CPU16(x)      ntohs(x)
+#define A_BE2CPU32(x)      ntohl(x)
+
+#define A_LE2CPU8(x)       (x)
+#define A_LE2CPU16(x)      (x)
+#define A_LE2CPU32(x)      (x)
+
+#define A_CPU2BE8(x)       htonb(x)
+#define A_CPU2BE16(x)      htons(x)
+#define A_CPU2BE32(x)      htonl(x)
+
+#define A_MEMCPY(dst, src, len)         memcpy((A_UINT8 *)(dst), (src), (len))
+#define A_MEMZERO(addr, len)            memset(addr, 0, len)
+#define A_MEMCMP(addr1, addr2, len)     memcmp((addr1), (addr2), (len))
+#define A_MALLOC(size)                  kmalloc((size), GFP_KERNEL)
+#define A_MALLOC_NOWAIT(size)           kmalloc((size), GFP_ATOMIC)
+#define A_FREE(addr)                    kfree(addr)
+#define A_PRINTF(args...)               printk(args) 
+
+/* Mutual Exclusion */
+typedef spinlock_t                      A_MUTEX_T;
+#define A_MUTEX_INIT(mutex)             spin_lock_init(mutex)
+#define A_MUTEX_LOCK(mutex)             spin_lock_bh(mutex)
+#define A_MUTEX_UNLOCK(mutex)           spin_unlock_bh(mutex)
+#define A_IS_MUTEX_VALID(mutex)         TRUE  /* okay to return true, since A_MUTEX_DELETE does nothing */
+#define A_MUTEX_DELETE(mutex)           /* spin locks are not kernel resources so nothing to free.. */
+
+/* Get current time in ms adding a constant offset (in ms) */
+#define A_GET_MS(offset)    \
+	(jiffies + ((offset) / 1000) * HZ)
+
+/*
+ * Timer Functions
+ */
+#define A_MDELAY(msecs)                 mdelay(msecs)
+typedef struct timer_list               A_TIMER;
+
+#define A_INIT_TIMER(pTimer, pFunction, pArg) do {              \
+    init_timer(pTimer);                                         \
+    (pTimer)->function = (pFunction);                           \
+    (pTimer)->data   = (unsigned long)(pArg);                   \
+} while (0)
+
+/*
+ * Start a Timer that elapses after 'periodMSec' milli-seconds
+ * Support is provided for a one-shot timer. The 'repeatFlag' is
+ * ignored.
+ */
+#define A_TIMEOUT_MS(pTimer, periodMSec, repeatFlag) do {                   \
+    if (repeatFlag) {                                                       \
+        printk("\n" __FILE__ ":%d: Timer Repeat requested\n",__LINE__);     \
+        panic("Timer Repeat");                                              \
+    }                                                                       \
+    mod_timer((pTimer), jiffies + HZ * (periodMSec) / 1000);                \
+} while (0)
+
+/*
+ * Cancel the Timer. 
+ */
+#define A_UNTIMEOUT(pTimer) do {                                \
+    del_timer((pTimer));                                        \
+} while (0)
+
+#define A_DELETE_TIMER(pTimer) do {                             \
+} while (0)
+
+/*
+ * Wait Queue related functions
+ */
+typedef wait_queue_head_t               A_WAITQUEUE_HEAD;
+#define A_INIT_WAITQUEUE_HEAD(head)     init_waitqueue_head(head)
+#ifndef wait_event_interruptible_timeout
+#define __wait_event_interruptible_timeout(wq, condition, ret)          \
+do {                                                                    \
+        wait_queue_t __wait;                                            \
+        init_waitqueue_entry(&__wait, current);                         \
+                                                                        \
+        add_wait_queue(&wq, &__wait);                                   \
+        for (;;) {                                                      \
+                set_current_state(TASK_INTERRUPTIBLE);                  \
+                if (condition)                                          \
+                        break;                                          \
+                if (!signal_pending(current)) {                         \
+                        ret = schedule_timeout(ret);                    \
+                        if (!ret)                                       \
+                                break;                                  \
+                        continue;                                       \
+                }                                                       \
+                ret = -ERESTARTSYS;                                     \
+                break;                                                  \
+        }                                                               \
+        current->state = TASK_RUNNING;                                  \
+        remove_wait_queue(&wq, &__wait);                                \
+} while (0)
+
+#define wait_event_interruptible_timeout(wq, condition, timeout)        \
+({                                                                      \
+        long __ret = timeout;                                           \
+        if (!(condition))                                               \
+                __wait_event_interruptible_timeout(wq, condition, __ret); \
+        __ret;                                                          \
+})
+#endif /* wait_event_interruptible_timeout */
+
+#define A_WAIT_EVENT_INTERRUPTIBLE_TIMEOUT(head, condition, timeout) do { \
+    wait_event_interruptible_timeout(head, condition, timeout); \
+} while (0)
+
+#define A_WAKE_UP(head)                 wake_up(head)
+
+#ifdef DEBUG
+#define A_ASSERT(expr)  \
+    if (!(expr)) {   \
+        printk(KERN_ALERT "\n" __FILE__ ":%d: Assertion " #expr " failed!\n",__LINE__); \
+        panic(#expr); \
+    }
+
+#else
+#define A_ASSERT(expr)
+#endif /* DEBUG */
+
+/*
+ * Initialization of the network buffer subsystem
+ */
+#define A_NETBUF_INIT()
+
+/*
+ * Network buffer queue support
+ */
+typedef struct sk_buff_head A_NETBUF_QUEUE_T;
+
+#define A_NETBUF_QUEUE_INIT(q)  \
+    a_netbuf_queue_init(q)
+
+#define A_NETBUF_ENQUEUE(q, pkt) \
+    a_netbuf_enqueue((q), (pkt))
+#define A_NETBUF_PREQUEUE(q, pkt) \
+    a_netbuf_prequeue((q), (pkt))
+#define A_NETBUF_DEQUEUE(q) \
+    (a_netbuf_dequeue(q))
+#define A_NETBUF_QUEUE_SIZE(q)  \
+    a_netbuf_queue_size(q)
+#define A_NETBUF_QUEUE_EMPTY(q) \
+    a_netbuf_queue_empty(q)
+
+/*
+ * Network buffer support
+ */
+#define A_NETBUF_ALLOC(size) \
+    a_netbuf_alloc(size)
+#define A_NETBUF_ALLOC_RAW(size) \
+    a_netbuf_alloc_raw(size)
+#define A_NETBUF_FREE(bufPtr) \
+    a_netbuf_free(bufPtr)
+#define A_NETBUF_DATA(bufPtr) \
+    a_netbuf_to_data(bufPtr)
+#define A_NETBUF_LEN(bufPtr) \
+    a_netbuf_to_len(bufPtr)
+#define A_NETBUF_PUSH(bufPtr, len) \
+    a_netbuf_push(bufPtr, len)
+#define A_NETBUF_PUT(bufPtr, len) \
+    a_netbuf_put(bufPtr, len)
+#define A_NETBUF_TRIM(bufPtr,len) \
+    a_netbuf_trim(bufPtr, len)
+#define A_NETBUF_PULL(bufPtr, len) \
+    a_netbuf_pull(bufPtr, len)
+#define A_NETBUF_HEADROOM(bufPtr)\
+    a_netbuf_headroom(bufPtr)
+#define A_NETBUF_SETLEN(bufPtr,len) \
+    a_netbuf_setlen(bufPtr, len)
+
+/* Add data to end of a buffer  */
+#define A_NETBUF_PUT_DATA(bufPtr, srcPtr,  len) \
+    a_netbuf_put_data(bufPtr, srcPtr, len) 
+
+/* Add data to start of the  buffer */
+#define A_NETBUF_PUSH_DATA(bufPtr, srcPtr,  len) \
+    a_netbuf_push_data(bufPtr, srcPtr, len) 
+
+/* Remove data at start of the buffer */
+#define A_NETBUF_PULL_DATA(bufPtr, dstPtr, len) \
+    a_netbuf_pull_data(bufPtr, dstPtr, len) 
+
+/* Remove data from the end of the buffer */
+#define A_NETBUF_TRIM_DATA(bufPtr, dstPtr, len) \
+    a_netbuf_trim_data(bufPtr, dstPtr, len) 
+
+/* View data as "size" contiguous bytes of type "t" */
+#define A_NETBUF_VIEW_DATA(bufPtr, t, size) \
+    (t )( ((struct skbuf *)(bufPtr))->data)
+
+/* return the beginning of the headroom for the buffer */
+#define A_NETBUF_HEAD(bufPtr) \
+        ((((struct sk_buff *)(bufPtr))->head))
+    
+/*
+ * OS specific network buffer access routines
+ */
+void *a_netbuf_alloc(int size);
+void *a_netbuf_alloc_raw(int size);
+void a_netbuf_free(void *bufPtr);
+void *a_netbuf_to_data(void *bufPtr);
+A_UINT32 a_netbuf_to_len(void *bufPtr);
+A_STATUS a_netbuf_push(void *bufPtr, A_INT32 len);
+A_STATUS a_netbuf_push_data(void *bufPtr, char *srcPtr, A_INT32 len);
+A_STATUS a_netbuf_put(void *bufPtr, A_INT32 len);
+A_STATUS a_netbuf_put_data(void *bufPtr, char *srcPtr, A_INT32 len);
+A_STATUS a_netbuf_pull(void *bufPtr, A_INT32 len);
+A_STATUS a_netbuf_pull_data(void *bufPtr, char *dstPtr, A_INT32 len);
+A_STATUS a_netbuf_trim(void *bufPtr, A_INT32 len);
+A_STATUS a_netbuf_trim_data(void *bufPtr, char *dstPtr, A_INT32 len);
+A_STATUS a_netbuf_setlen(void *bufPtr, A_INT32 len);
+A_INT32 a_netbuf_headroom(void *bufPtr);
+void a_netbuf_enqueue(A_NETBUF_QUEUE_T *q, void *pkt);
+void a_netbuf_prequeue(A_NETBUF_QUEUE_T *q, void *pkt);
+void *a_netbuf_dequeue(A_NETBUF_QUEUE_T *q);
+int a_netbuf_queue_size(A_NETBUF_QUEUE_T *q);
+int a_netbuf_queue_empty(A_NETBUF_QUEUE_T *q);
+int a_netbuf_queue_empty(A_NETBUF_QUEUE_T *q);
+void a_netbuf_queue_init(A_NETBUF_QUEUE_T *q);
+
+/*
+ * Kernel v.s User space functions
+ */
+A_UINT32 a_copy_to_user(void *to, const void *from, A_UINT32 n);
+A_UINT32 a_copy_from_user(void *to, const void *from, A_UINT32 n);
+
+#else /* __KERNEL__ */
+
+#ifdef __GNUC__
+#define __ATTRIB_PACK           __attribute__ ((packed))
+#define __ATTRIB_PRINTF         __attribute__ ((format (printf, 1, 2)))
+#define __ATTRIB_NORETURN       __attribute__ ((noreturn))
+#ifndef INLINE
+#define INLINE                  __inline__
+#endif
+#else /* Not GCC */
+#define __ATTRIB_PACK
+#define __ATTRIB_PRINTF
+#define __ATTRIB_NORETURN
+#ifndef INLINE
+#define INLINE                  __inline
+#endif
+#endif /* End __GNUC__ */
+
+#define PREPACK
+#define POSTPACK                __ATTRIB_PACK
+
+#endif /* __KERNEL__ */
+
+#endif /* _OSAPI_LINUX_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/ioctl.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/ioctl.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/ioctl.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,2571 @@
+/*
+ * 
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+
+#include "ar6000_drv.h"
+
+static A_UINT8 bcast_mac[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
+static A_UINT8 null_mac[] = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
+extern USER_RSSI_THOLD rssi_map[12];
+extern unsigned int wmitimeout;
+extern A_WAITQUEUE_HEAD arEvent;
+extern int tspecCompliance;
+extern int bmienable;
+extern int bypasswmi; 
+#ifdef __ATH_CENTRAL_IOCTL_DISPATCHER___
+extern int allow_trace_signal;
+extern void ath_external_trigger(int val); 
+#endif
+
+static int
+ar6000_ioctl_get_roam_tbl(struct net_device *dev, struct ifreq *rq)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if(wmi_get_roam_tbl_cmd(ar->arWmi) != A_OK) {
+        return -EIO;
+    }
+
+    return 0;
+}
+
+static int
+ar6000_ioctl_get_roam_data(struct net_device *dev, struct ifreq *rq)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+
+    /* currently assume only roam times are required */
+    if(wmi_get_roam_data_cmd(ar->arWmi, ROAM_DATA_TIME) != A_OK) {
+        return -EIO;
+    }
+    
+
+    return 0;
+}
+
+static int
+ar6000_ioctl_set_roam_ctrl(struct net_device *dev, char *userdata)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_SET_ROAM_CTRL_CMD cmd;
+    A_UINT8 size = sizeof(cmd);
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+
+    if (copy_from_user(&cmd, userdata, size)) {
+        return -EFAULT;
+    }
+
+    if (cmd.roamCtrlType == WMI_SET_HOST_BIAS) {
+        if (cmd.info.bssBiasInfo.numBss > 1) {
+            size += (cmd.info.bssBiasInfo.numBss - 1) * sizeof(WMI_BSS_BIAS);
+        }
+    }
+
+    if (copy_from_user(&cmd, userdata, size)) {
+        return -EFAULT;
+    }
+
+    if(wmi_set_roam_ctrl_cmd(ar->arWmi, &cmd, size) != A_OK) {
+        return -EIO;
+    }
+
+    return 0;
+}
+
+static int
+ar6000_ioctl_set_powersave_timers(struct net_device *dev, char *userdata)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_POWERSAVE_TIMERS_POLICY_CMD cmd;
+    A_UINT8 size = sizeof(cmd);
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (copy_from_user(&cmd, userdata, size)) {
+        return -EFAULT;
+    }
+
+    if (copy_from_user(&cmd, userdata, size)) {
+        return -EFAULT;
+    }
+
+    if(wmi_set_powersave_timers_cmd(ar->arWmi, &cmd, size) != A_OK) {
+        return -EIO;
+    }
+
+    return 0;
+}
+
+static int
+ar6000_ioctl_set_wmm(struct net_device *dev, struct ifreq *rq)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_SET_WMM_CMD cmd;
+    A_STATUS ret;
+
+    if ((dev->flags & IFF_UP) != IFF_UP) {
+        return -EIO;
+    }
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (copy_from_user(&cmd, (char *)((unsigned int*)rq->ifr_data + 1), 
+                                sizeof(cmd))) 
+    {
+        return -EFAULT;
+    }
+
+    if (cmd.status == WMI_WMM_ENABLED) {
+        ar->arWmmEnabled = TRUE;
+    } else {
+        ar->arWmmEnabled = FALSE;
+    }
+
+    ret = wmi_set_wmm_cmd(ar->arWmi, cmd.status);
+
+    switch (ret) {
+        case A_OK:
+            return 0;
+        case A_EBUSY :
+            return -EBUSY;
+        case A_NO_MEMORY:
+            return -ENOMEM;
+        case A_EINVAL:
+        default:
+            return -EFAULT;
+    }
+}
+
+static int
+ar6000_ioctl_set_txop(struct net_device *dev, struct ifreq *rq)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_SET_WMM_TXOP_CMD cmd;
+    A_STATUS ret;
+
+    if ((dev->flags & IFF_UP) != IFF_UP) {
+        return -EIO;
+    }
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (copy_from_user(&cmd, (char *)((unsigned int*)rq->ifr_data + 1), 
+                                sizeof(cmd))) 
+    {
+        return -EFAULT;
+    }
+
+    ret = wmi_set_wmm_txop(ar->arWmi, cmd.txopEnable);
+
+    switch (ret) {
+        case A_OK:
+            return 0;
+        case A_EBUSY :
+            return -EBUSY;
+        case A_NO_MEMORY:
+            return -ENOMEM;
+        case A_EINVAL:
+        default:
+            return -EFAULT;
+    }
+}
+
+static int
+ar6000_ioctl_get_rd(struct net_device *dev, struct ifreq *rq)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    A_STATUS ret = 0;
+
+    if ((dev->flags & IFF_UP) != IFF_UP || ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if(copy_to_user((char *)((unsigned int*)rq->ifr_data + 1),
+                            &ar->arRegCode, sizeof(ar->arRegCode)))
+        ret = -EFAULT;
+
+    return ret;
+}
+
+
+/* Get power mode command */
+static int
+ar6000_ioctl_get_power_mode(struct net_device *dev, struct ifreq *rq)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_POWER_MODE_CMD power_mode;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    power_mode.powerMode = wmi_get_power_mode_cmd(ar->arWmi);
+    if (copy_to_user(rq->ifr_data, &power_mode, sizeof(WMI_POWER_MODE_CMD))) {
+        ret = -EFAULT;
+    }
+
+    return ret;
+}
+
+
+static int
+ar6000_ioctl_set_channelParams(struct net_device *dev, struct ifreq *rq)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_CHANNEL_PARAMS_CMD cmd, *cmdp;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+
+    if (copy_from_user(&cmd, rq->ifr_data, sizeof(cmd))) {
+        return -EFAULT;
+    }
+
+    if (cmd.numChannels > 1) {
+        cmdp = A_MALLOC(130);
+        if (copy_from_user(cmdp, rq->ifr_data,
+                           sizeof (*cmdp) +
+                           ((cmd.numChannels - 1) * sizeof(A_UINT16))))
+        {
+            kfree(cmdp);
+            return -EFAULT;
+        }
+    } else {
+        cmdp = &cmd;
+    }
+
+    if ((ar->arPhyCapability == WMI_11G_CAPABILITY) &&
+        ((cmdp->phyMode == WMI_11A_MODE) || (cmdp->phyMode == WMI_11AG_MODE)))
+    {
+        ret = -EINVAL;
+    }
+
+    if (!ret &&
+        (wmi_set_channelParams_cmd(ar->arWmi, cmdp->scanParam, cmdp->phyMode,
+                                   cmdp->numChannels, cmdp->channelList)
+         != A_OK))
+    {
+        ret = -EIO;
+    }
+
+    if (cmd.numChannels > 1) {
+        kfree(cmdp);
+    }
+
+    return ret;
+}
+
+static int
+ar6000_ioctl_set_snr_threshold(struct net_device *dev, struct ifreq *rq)
+{
+
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_SNR_THRESHOLD_PARAMS_CMD cmd;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (copy_from_user(&cmd, rq->ifr_data, sizeof(cmd))) {
+        return -EFAULT;
+    }
+
+    if( wmi_set_snr_threshold_params(ar->arWmi, &cmd) != A_OK ) {
+        ret = -EIO;
+    }
+
+    return ret;
+}
+
+static int
+ar6000_ioctl_set_rssi_threshold(struct net_device *dev, struct ifreq *rq)
+{
+#define SWAP_THOLD(thold1, thold2) do { \
+    USER_RSSI_THOLD tmpThold;           \
+    tmpThold.tag = thold1.tag;          \
+    tmpThold.rssi = thold1.rssi;        \
+    thold1.tag = thold2.tag;            \
+    thold1.rssi = thold2.rssi;          \
+    thold2.tag = tmpThold.tag;          \
+    thold2.rssi = tmpThold.rssi;        \
+} while (0)
+
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_RSSI_THRESHOLD_PARAMS_CMD cmd;
+    USER_RSSI_PARAMS rssiParams;
+    A_INT32 i, j;
+
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (copy_from_user((char *)&rssiParams, (char *)((unsigned int *)rq->ifr_data + 1), sizeof(USER_RSSI_PARAMS))) {
+        return -EFAULT;
+    }
+    cmd.weight = rssiParams.weight;
+    cmd.pollTime = rssiParams.pollTime;
+
+    A_MEMCPY(rssi_map, &rssiParams.tholds, sizeof(rssi_map));
+    /*
+     *  only 6 elements, so use bubble sorting, in ascending order
+     */
+    for (i = 5; i > 0; i--) {
+        for (j = 0; j < i; j++) { /* above tholds */
+            if (rssi_map[j+1].rssi < rssi_map[j].rssi) {
+                SWAP_THOLD(rssi_map[j+1], rssi_map[j]);
+            } else if (rssi_map[j+1].rssi == rssi_map[j].rssi) {
+                return EFAULT;
+            }
+        }
+    }
+    for (i = 11; i > 6; i--) {
+        for (j = 6; j < i; j++) { /* below tholds */
+            if (rssi_map[j+1].rssi < rssi_map[j].rssi) {
+                SWAP_THOLD(rssi_map[j+1], rssi_map[j]);
+            } else if (rssi_map[j+1].rssi == rssi_map[j].rssi) {
+                return EFAULT;
+            }
+        }
+    }
+
+#ifdef DEBUG
+    for (i = 0; i < 12; i++) {
+        AR_DEBUG2_PRINTF("thold[%d].tag: %d, thold[%d].rssi: %d \n", 
+                i, rssi_map[i].tag, i, rssi_map[i].rssi);
+    }
+#endif
+    cmd.thresholdAbove1_Val = rssi_map[0].rssi;
+    cmd.thresholdAbove2_Val = rssi_map[1].rssi;
+    cmd.thresholdAbove3_Val = rssi_map[2].rssi;
+    cmd.thresholdAbove4_Val = rssi_map[3].rssi;
+    cmd.thresholdAbove5_Val = rssi_map[4].rssi;
+    cmd.thresholdAbove6_Val = rssi_map[5].rssi;
+    cmd.thresholdBelow1_Val = rssi_map[6].rssi;
+    cmd.thresholdBelow2_Val = rssi_map[7].rssi;
+    cmd.thresholdBelow3_Val = rssi_map[8].rssi;
+    cmd.thresholdBelow4_Val = rssi_map[9].rssi;
+    cmd.thresholdBelow5_Val = rssi_map[10].rssi;
+    cmd.thresholdBelow6_Val = rssi_map[11].rssi;
+
+    if( wmi_set_rssi_threshold_params(ar->arWmi, &cmd) != A_OK ) {
+        ret = -EIO;
+    }
+
+    return ret;
+}
+
+static int
+ar6000_ioctl_set_lq_threshold(struct net_device *dev, struct ifreq *rq)
+{
+
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_LQ_THRESHOLD_PARAMS_CMD cmd;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (copy_from_user(&cmd, (char *)((unsigned int *)rq->ifr_data + 1), sizeof(cmd))) {
+        return -EFAULT;
+    }
+
+    if( wmi_set_lq_threshold_params(ar->arWmi, &cmd) != A_OK ) {
+        ret = -EIO;
+    }
+
+    return ret;
+}
+
+
+static int
+ar6000_ioctl_set_probedSsid(struct net_device *dev, struct ifreq *rq)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_PROBED_SSID_CMD cmd;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (copy_from_user(&cmd, rq->ifr_data, sizeof(cmd))) {
+        return -EFAULT;
+    }
+
+    if (wmi_probedSsid_cmd(ar->arWmi, cmd.entryIndex, cmd.flag, cmd.ssidLength,
+                                  cmd.ssid) != A_OK)
+    {
+        ret = -EIO;
+    }
+
+    return ret;
+}
+
+static int
+ar6000_ioctl_set_badAp(struct net_device *dev, struct ifreq *rq)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_ADD_BAD_AP_CMD cmd;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+
+    if (copy_from_user(&cmd, rq->ifr_data, sizeof(cmd))) {
+        return -EFAULT;
+    }
+
+    if (cmd.badApIndex > WMI_MAX_BAD_AP_INDEX) {
+        return -EIO;
+    }
+
+    if (A_MEMCMP(cmd.bssid, null_mac, AR6000_ETH_ADDR_LEN) == 0) {
+        /*
+         * This is a delete badAP.
+         */
+        if (wmi_deleteBadAp_cmd(ar->arWmi, cmd.badApIndex) != A_OK) {
+            ret = -EIO;
+        }
+    } else {
+        if (wmi_addBadAp_cmd(ar->arWmi, cmd.badApIndex, cmd.bssid) != A_OK) {
+            ret = -EIO;
+        }
+    }
+
+    return ret;
+}
+
+static int
+ar6000_ioctl_create_qos(struct net_device *dev, struct ifreq *rq)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_CREATE_PSTREAM_CMD cmd;
+    A_STATUS ret;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+
+    if (copy_from_user(&cmd, rq->ifr_data, sizeof(cmd))) {
+        return -EFAULT;
+    }
+
+    ret = wmi_verify_tspec_params(&cmd, tspecCompliance);
+    if (ret == A_OK)
+        ret = wmi_create_pstream_cmd(ar->arWmi, &cmd);
+
+    switch (ret) {
+        case A_OK:
+            return 0;
+        case A_EBUSY :
+            return -EBUSY;
+        case A_NO_MEMORY:
+            return -ENOMEM;
+        case A_EINVAL:
+        default:
+            return -EFAULT;
+    }
+}
+
+static int
+ar6000_ioctl_delete_qos(struct net_device *dev, struct ifreq *rq)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_DELETE_PSTREAM_CMD cmd;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (copy_from_user(&cmd, rq->ifr_data, sizeof(cmd))) {
+        return -EFAULT;
+    }
+
+    ret = wmi_delete_pstream_cmd(ar->arWmi, cmd.trafficClass, cmd.tsid);
+
+    switch (ret) {
+        case A_OK:
+            return 0;
+        case A_EBUSY :
+            return -EBUSY;
+        case A_NO_MEMORY:
+            return -ENOMEM;
+        case A_EINVAL:
+        default:
+            return -EFAULT;
+    }
+}
+
+static int
+ar6000_ioctl_get_qos_queue(struct net_device *dev, struct ifreq *rq)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    struct ar6000_queuereq qreq;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if( copy_from_user(&qreq, rq->ifr_data,
+                  sizeof(struct ar6000_queuereq)))
+        return -EFAULT;
+
+    qreq.activeTsids = wmi_get_mapped_qos_queue(ar->arWmi, qreq.trafficClass);
+
+    if (copy_to_user(rq->ifr_data, &qreq,
+                 sizeof(struct ar6000_queuereq)))
+    {
+        ret = -EFAULT;
+    }
+
+    return ret;
+}
+
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+static A_STATUS
+ar6000_ioctl_tcmd_get_rx_report(struct net_device *dev, 
+                                 struct ifreq *rq, A_UINT8 *data, A_UINT32 len)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    A_UINT32    buf[2];
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (down_interruptible(&ar->arSem)) {
+        return -ERESTARTSYS;
+    }
+    ar->tcmdRxReport = 0;
+    if (wmi_test_cmd(ar->arWmi, data, len) != A_OK) {
+        up(&ar->arSem);
+        return -EIO;
+    }
+
+    wait_event_interruptible_timeout(arEvent, ar->tcmdRxReport != 0, wmitimeout * HZ);
+
+    if (signal_pending(current)) {
+        ret = -EINTR;
+    }
+
+    buf[0] = ar->tcmdRxTotalPkt;
+    buf[1] = ar->tcmdRxRssi;
+    if (!ret && copy_to_user(rq->ifr_data, buf, sizeof(buf))) {
+        ret = -EFAULT;
+    }
+
+    up(&ar->arSem);
+
+    return ret;
+}
+
+void 
+ar6000_tcmd_rx_report_event(void *devt, A_UINT8 * results, int len)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)devt;
+    TCMD_CONT_RX * rx_rep = (TCMD_CONT_RX *)results;
+
+    ar->tcmdRxTotalPkt = rx_rep->u.report.totalPkt;
+    ar->tcmdRxRssi = rx_rep->u.report.rssiInDBm;
+    ar->tcmdRxReport = 1;
+
+    wake_up(&arEvent);
+}
+#endif /* CONFIG_HOST_TCMD_SUPPORT*/
+
+static int
+ar6000_ioctl_set_error_report_bitmask(struct net_device *dev, struct ifreq *rq)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_TARGET_ERROR_REPORT_BITMASK cmd;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (copy_from_user(&cmd, rq->ifr_data, sizeof(cmd))) {
+        return -EFAULT;
+    }
+
+    ret = wmi_set_error_report_bitmask(ar->arWmi, cmd.bitmask);
+    
+    return  (ret==0 ? ret : -EINVAL);
+}
+
+static int
+ar6000_clear_target_stats(struct net_device *dev)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    TARGET_STATS *pStats = &ar->arTargetStats;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+       return -EIO;
+    }
+    AR6000_SPIN_LOCK(&ar->arLock, 0);
+    A_MEMZERO(pStats, sizeof(TARGET_STATS));
+    AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+    return ret;
+}
+
+static int
+ar6000_ioctl_get_target_stats(struct net_device *dev, struct ifreq *rq)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    TARGET_STATS_CMD cmd;
+    TARGET_STATS *pStats = &ar->arTargetStats;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+    if (copy_from_user(&cmd, rq->ifr_data, sizeof(cmd))) {
+        return -EFAULT;
+    }
+    if (down_interruptible(&ar->arSem)) {
+        return -ERESTARTSYS;
+    }
+
+    ar->statsUpdatePending = TRUE;
+
+    if(wmi_get_stats_cmd(ar->arWmi) != A_OK) {
+        up(&ar->arSem);
+        return -EIO;
+    }
+    
+    wait_event_interruptible_timeout(arEvent, ar->statsUpdatePending == FALSE, wmitimeout * HZ);
+
+    if (signal_pending(current)) {
+        ret = -EINTR;
+    }
+
+    if (!ret && copy_to_user(rq->ifr_data, pStats, sizeof(*pStats))) {
+        ret = -EFAULT;
+    }
+
+    if (cmd.clearStats == 1) {
+        ret = ar6000_clear_target_stats(dev);
+    }
+
+    up(&ar->arSem);
+
+    return ret;
+}
+
+static int
+ar6000_ioctl_set_access_params(struct net_device *dev, struct ifreq *rq)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_SET_ACCESS_PARAMS_CMD cmd;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (copy_from_user(&cmd, rq->ifr_data, sizeof(cmd))) {
+        return -EFAULT;
+    }
+
+    if (wmi_set_access_params_cmd(ar->arWmi, cmd.txop, cmd.eCWmin, cmd.eCWmax,
+                                  cmd.aifsn) == A_OK)
+    {
+        ret = 0;
+    } else {
+        ret = -EINVAL;
+    }
+
+    return (ret);
+}
+
+static int
+ar6000_ioctl_set_disconnect_timeout(struct net_device *dev, struct ifreq *rq)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_DISC_TIMEOUT_CMD cmd;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (copy_from_user(&cmd, rq->ifr_data, sizeof(cmd))) {
+        return -EFAULT;
+    }
+
+    if (wmi_disctimeout_cmd(ar->arWmi, cmd.disconnectTimeout) == A_OK)
+    {
+        ret = 0;
+    } else {
+        ret = -EINVAL;
+    }
+
+    return (ret);
+}
+
+static int
+ar6000_xioctl_set_voice_pkt_size(struct net_device *dev, char * userdata)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_SET_VOICE_PKT_SIZE_CMD cmd;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (copy_from_user(&cmd, userdata, sizeof(cmd))) {
+        return -EFAULT;
+    }
+
+    if (wmi_set_voice_pkt_size_cmd(ar->arWmi, cmd.voicePktSize) == A_OK)
+    {
+        ret = 0;
+    } else {
+        ret = -EINVAL;
+    }
+
+
+    return (ret);
+}
+
+static int
+ar6000_xioctl_set_max_sp_len(struct net_device *dev, char * userdata)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_SET_MAX_SP_LEN_CMD cmd;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (copy_from_user(&cmd, userdata, sizeof(cmd))) {
+        return -EFAULT;
+    }
+
+    if (wmi_set_max_sp_len_cmd(ar->arWmi, cmd.maxSPLen) == A_OK)
+    {
+        ret = 0;
+    } else {
+        ret = -EINVAL;
+    }
+
+    return (ret);
+}
+
+
+static int
+ar6000_xioctl_set_bt_status_cmd(struct net_device *dev, char * userdata)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_SET_BT_STATUS_CMD cmd;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (copy_from_user(&cmd, userdata, sizeof(cmd))) {
+        return -EFAULT;
+    }
+
+    if (wmi_set_bt_status_cmd(ar->arWmi, cmd.streamType, cmd.status) == A_OK)
+    {
+        ret = 0;
+    } else {
+        ret = -EINVAL;
+    }
+
+    return (ret);
+}
+
+static int
+ar6000_xioctl_set_bt_params_cmd(struct net_device *dev, char * userdata)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    WMI_SET_BT_PARAMS_CMD cmd;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (copy_from_user(&cmd, userdata, sizeof(cmd))) {
+        return -EFAULT;
+    }
+
+    if (wmi_set_bt_params_cmd(ar->arWmi, &cmd) == A_OK)
+    {
+        ret = 0;
+    } else {
+        ret = -EINVAL;
+    }
+
+    return (ret);
+}
+
+#ifdef CONFIG_HOST_GPIO_SUPPORT
+struct ar6000_gpio_intr_wait_cmd_s  gpio_intr_results;
+/* gpio_reg_results and gpio_data_available are protected by arSem */
+static struct ar6000_gpio_register_cmd_s gpio_reg_results;
+static A_BOOL gpio_data_available; /* Requested GPIO data available */
+static A_BOOL gpio_intr_available; /* GPIO interrupt info available */
+static A_BOOL gpio_ack_received;   /* GPIO ack was received */
+
+/* Host-side initialization for General Purpose I/O support */
+void ar6000_gpio_init(void)
+{
+    gpio_intr_available = FALSE;
+    gpio_data_available = FALSE;
+    gpio_ack_received   = FALSE;
+}
+
+/*
+ * Called when a GPIO interrupt is received from the Target.
+ * intr_values shows which GPIO pins have interrupted.
+ * input_values shows a recent value of GPIO pins.
+ */
+void
+ar6000_gpio_intr_rx(A_UINT32 intr_mask, A_UINT32 input_values)
+{
+    gpio_intr_results.intr_mask = intr_mask;
+    gpio_intr_results.input_values = input_values;
+    *((volatile A_BOOL *)&gpio_intr_available) = TRUE;
+    wake_up(&arEvent);
+}
+
+/*
+ * This is called when a response is received from the Target
+ * for a previous or ar6000_gpio_input_get or ar6000_gpio_register_get
+ * call.
+ */
+void
+ar6000_gpio_data_rx(A_UINT32 reg_id, A_UINT32 value)
+{
+    gpio_reg_results.gpioreg_id = reg_id;
+    gpio_reg_results.value = value;
+    *((volatile A_BOOL *)&gpio_data_available) = TRUE;
+    wake_up(&arEvent);
+}
+
+/*
+ * This is called when an acknowledgement is received from the Target
+ * for a previous or ar6000_gpio_output_set or ar6000_gpio_register_set
+ * call.
+ */
+void
+ar6000_gpio_ack_rx(void)
+{
+    gpio_ack_received = TRUE;
+    wake_up(&arEvent);
+}
+
+A_STATUS
+ar6000_gpio_output_set(struct net_device *dev,
+                       A_UINT32 set_mask,
+                       A_UINT32 clear_mask,
+                       A_UINT32 enable_mask,
+                       A_UINT32 disable_mask)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    gpio_ack_received = FALSE;
+    return wmi_gpio_output_set(ar->arWmi,
+                set_mask, clear_mask, enable_mask, disable_mask);
+}
+
+static A_STATUS
+ar6000_gpio_input_get(struct net_device *dev)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    *((volatile A_BOOL *)&gpio_data_available) = FALSE;
+    return wmi_gpio_input_get(ar->arWmi);
+}
+
+static A_STATUS
+ar6000_gpio_register_set(struct net_device *dev,
+                         A_UINT32 gpioreg_id,
+                         A_UINT32 value)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    gpio_ack_received = FALSE;
+    return wmi_gpio_register_set(ar->arWmi, gpioreg_id, value);
+}
+
+static A_STATUS
+ar6000_gpio_register_get(struct net_device *dev,
+                         A_UINT32 gpioreg_id)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    *((volatile A_BOOL *)&gpio_data_available) = FALSE;
+    return wmi_gpio_register_get(ar->arWmi, gpioreg_id);
+}
+
+static A_STATUS
+ar6000_gpio_intr_ack(struct net_device *dev,
+                     A_UINT32 ack_mask)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    gpio_intr_available = FALSE;
+    return wmi_gpio_intr_ack(ar->arWmi, ack_mask);
+}
+#endif /* CONFIG_HOST_GPIO_SUPPORT */
+
+/* This would basically hold all the private ioctls that are not related to
+   WLAN operation */
+#ifdef __ATH_CENTRAL_IOCTL_DISPATCHER___
+int ar6000_ioctl_dispatcher(struct net_device *dev, struct ifreq *rq, int cmd)
+{
+    int ret;
+    
+    /* We need to find out what IOCTL is this.
+     * This is non-prive IOCTL, which is called by
+     * kernel, every second. This will mess up and confuse
+     * the scope instrumentation(for time calculation)
+     */
+    if(cmd == 35142)
+        return -EOPNOTSUPP;
+
+    ath_external_trigger(1);
+    ret = ar6000_ioctl(dev, rq,cmd);
+    /* Some calls are way too fast. Add a fixed delay
+     * to all by 5ms. This will be clear on scope
+     */
+    if (allow_trace_signal) {
+        /* Add some (fixed) delay for scope viewing */
+        udelay(5000);
+    }
+    ath_external_trigger(0);
+    return ret;
+}
+#endif /* __ATH_CENTRAL_IOCTL_DISPATCHER___ */
+
+int ar6000_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    HIF_DEVICE *hifDevice = ar->arHifDevice;
+    int ret, param, param2;
+    unsigned int address = 0;
+    unsigned int length = 0;
+    unsigned char *buffer;
+    char *userdata;
+    A_UINT32 connectCtrlFlags;
+
+
+    static WMI_SCAN_PARAMS_CMD scParams = {0, 0, 0, 0, 0, 
+                                           WMI_SHORTSCANRATIO_DEFAULT,
+                                           DEFAULT_SCAN_CTRL_FLAGS,
+                                           0};
+    WMI_SET_AKMP_PARAMS_CMD  akmpParams;
+    WMI_SET_PMKID_LIST_CMD   pmkidInfo;
+
+    if (cmd == AR6000_IOCTL_EXTENDED)
+    {
+        /*
+         * This allows for many more wireless ioctls than would otherwise
+         * be available.  Applications embed the actual ioctl command in
+         * the first word of the parameter block, and use the command
+         * AR6000_IOCTL_EXTENDED_CMD on the ioctl call.
+         */
+        get_user(cmd, (int *)rq->ifr_data);
+        userdata = (char *)(((unsigned int *)rq->ifr_data)+1);
+    }
+    else
+    {
+        userdata = (char *)rq->ifr_data;
+    }
+
+    if ((ar->arWlanState == WLAN_DISABLED) && 
+        ((cmd != AR6000_XIOCTRL_WMI_SET_WLAN_STATE) &&
+         (cmd != AR6000_XIOCTL_DIAG_READ) &&
+         (cmd != AR6000_XIOCTL_DIAG_WRITE)))
+    {
+        return -EIO;
+    }
+
+    ret = 0;
+    switch(cmd)
+    {
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+        case AR6000_XIOCTL_TCMD_CONT_TX:
+            {
+                TCMD_CONT_TX txCmd;
+
+                if (ar->tcmdPm == TCMD_PM_SLEEP) {
+                    A_PRINTF("Can NOT send tx tcmd when target is asleep! \n");
+                    return -EFAULT;
+                }
+
+                if(copy_from_user(&txCmd, userdata, sizeof(TCMD_CONT_TX)))
+                    return -EFAULT;
+                wmi_test_cmd(ar->arWmi,(A_UINT8 *)&txCmd, sizeof(TCMD_CONT_TX));
+            }
+            break;
+        case AR6000_XIOCTL_TCMD_CONT_RX:
+            {
+                TCMD_CONT_RX rxCmd;
+
+                if (ar->tcmdPm == TCMD_PM_SLEEP) {
+                    A_PRINTF("Can NOT send rx tcmd when target is asleep! \n");
+                    return -EFAULT;
+                }
+                if(copy_from_user(&rxCmd, userdata, sizeof(TCMD_CONT_RX)))
+                    return -EFAULT;
+                switch(rxCmd.act)
+                {
+                    case TCMD_CONT_RX_PROMIS:
+                    case TCMD_CONT_RX_FILTER:
+                    case TCMD_CONT_RX_SETMAC:
+                         wmi_test_cmd(ar->arWmi,(A_UINT8 *)&rxCmd,
+                                                sizeof(TCMD_CONT_RX));
+                         break;
+                    case TCMD_CONT_RX_REPORT:
+                         ar6000_ioctl_tcmd_get_rx_report(dev, rq,
+                         (A_UINT8 *)&rxCmd, sizeof(TCMD_CONT_RX));
+                         break;
+                    default:
+                         A_PRINTF("Unknown Cont Rx mode: %d\n",rxCmd.act);
+                         return -EINVAL;
+                }
+            }
+            break;
+        case AR6000_XIOCTL_TCMD_PM:
+            {
+                TCMD_PM pmCmd;
+
+                if(copy_from_user(&pmCmd, userdata, sizeof(TCMD_PM)))
+                    return -EFAULT;
+                ar->tcmdPm = pmCmd.mode;
+                wmi_test_cmd(ar->arWmi, (A_UINT8*)&pmCmd, sizeof(TCMD_PM));
+            }
+            break;
+#endif /* CONFIG_HOST_TCMD_SUPPORT */
+
+        case AR6000_XIOCTL_BMI_DONE:
+            if(bmienable)
+            {
+                ret = ar6000_init(dev); 
+            }
+            else
+            {
+                ret = BMIDone(hifDevice);
+            }
+            break;
+
+        case AR6000_XIOCTL_BMI_READ_MEMORY:
+            get_user(address, (unsigned int *)userdata); 
+            get_user(length, (unsigned int *)userdata + 1); 
+            AR_DEBUG_PRINTF("Read Memory (address: 0x%x, length: %d)\n", 
+                             address, length);
+            if ((buffer = (unsigned char *)A_MALLOC(length)) != NULL) {
+                A_MEMZERO(buffer, length);
+                ret = BMIReadMemory(hifDevice, address, buffer, length);
+                if (copy_to_user(rq->ifr_data, buffer, length)) {
+                    ret = -EFAULT;
+                }
+                A_FREE(buffer);
+            } else {
+                ret = -ENOMEM;
+            }
+            break;
+
+        case AR6000_XIOCTL_BMI_WRITE_MEMORY:
+            get_user(address, (unsigned int *)userdata); 
+            get_user(length, (unsigned int *)userdata + 1); 
+            AR_DEBUG_PRINTF("Write Memory (address: 0x%x, length: %d)\n", 
+                             address, length);
+            if ((buffer = (unsigned char *)A_MALLOC(length)) != NULL) {
+                A_MEMZERO(buffer, length);
+                if (copy_from_user(buffer, &userdata[sizeof(address) + 
+                                   sizeof(length)], length))
+                {
+                    ret = -EFAULT;
+                } else {
+                    ret = BMIWriteMemory(hifDevice, address, buffer, length);
+                }
+                A_FREE(buffer);
+            } else {
+                ret = -ENOMEM;
+            }
+            break;
+
+        case AR6000_XIOCTL_BMI_TEST:
+           AR_DEBUG_PRINTF("No longer supported\n");
+           ret = -EOPNOTSUPP;
+           break;
+
+        case AR6000_XIOCTL_BMI_EXECUTE:
+            get_user(address, (unsigned int *)userdata); 
+            get_user(param, (unsigned int *)userdata + 1); 
+            AR_DEBUG_PRINTF("Execute (address: 0x%x, param: %d)\n", 
+                             address, param);
+            ret = BMIExecute(hifDevice, address, &param);
+            put_user(param, (unsigned int *)rq->ifr_data); /* return value */
+            break;
+
+        case AR6000_XIOCTL_BMI_SET_APP_START:
+            get_user(address, (unsigned int *)userdata); 
+            AR_DEBUG_PRINTF("Set App Start (address: 0x%x)\n", address);
+            ret = BMISetAppStart(hifDevice, address);
+            break;
+
+        case AR6000_XIOCTL_BMI_READ_SOC_REGISTER:
+            get_user(address, (unsigned int *)userdata);
+            ret = BMIReadSOCRegister(hifDevice, address, &param);
+            put_user(param, (unsigned int *)rq->ifr_data); /* return value */
+            break;
+
+        case AR6000_XIOCTL_BMI_WRITE_SOC_REGISTER:
+            get_user(address, (unsigned int *)userdata); 
+            get_user(param, (unsigned int *)userdata + 1); 
+            ret = BMIWriteSOCRegister(hifDevice, address, param);
+            break;
+
+#ifdef HTC_RAW_INTERFACE
+        case AR6000_XIOCTL_HTC_RAW_OPEN:
+            ret = A_OK;
+            if (!arRawIfEnabled(ar)) {
+                /* make sure block size is set in case the target was reset since last
+                  * BMI phase (i.e. flashup downloads) */
+                ret = ar6000_SetHTCBlockSize(ar);                
+                if (A_FAILED(ret)) {
+                    break;    
+                }    
+                /* Terminate the BMI phase */
+                ret = BMIDone(hifDevice);
+                if (ret == A_OK) {
+                    ret = ar6000_htc_raw_open(ar);
+                }
+            }
+            break;
+
+        case AR6000_XIOCTL_HTC_RAW_CLOSE:
+            if (arRawIfEnabled(ar)) {
+                ret = ar6000_htc_raw_close(ar);
+                arRawIfEnabled(ar) = FALSE;
+            } else {
+                ret = A_ERROR;
+            }
+            break;
+
+        case AR6000_XIOCTL_HTC_RAW_READ:
+            if (arRawIfEnabled(ar)) {
+                unsigned int streamID;
+                get_user(streamID, (unsigned int *)userdata); 
+                get_user(length, (unsigned int *)userdata + 1);
+                buffer = rq->ifr_data + sizeof(length); 
+                ret = ar6000_htc_raw_read(ar, (HTC_RAW_STREAM_ID)streamID, 
+                                          buffer, length);
+                put_user(ret, (unsigned int *)rq->ifr_data);
+            } else {
+                ret = A_ERROR;
+            }
+            break;
+
+        case AR6000_XIOCTL_HTC_RAW_WRITE:
+            if (arRawIfEnabled(ar)) {
+                unsigned int streamID;
+                get_user(streamID, (unsigned int *)userdata); 
+                get_user(length, (unsigned int *)userdata + 1);
+                buffer = userdata + sizeof(streamID) + sizeof(length); 
+                ret = ar6000_htc_raw_write(ar, (HTC_RAW_STREAM_ID)streamID, 
+                                           buffer, length);
+                put_user(ret, (unsigned int *)rq->ifr_data);
+            } else {
+                ret = A_ERROR;
+            }
+            break;
+#endif /* HTC_RAW_INTERFACE */
+
+        case AR6000_IOCTL_WMI_GETREV:
+        {
+            if (copy_to_user(rq->ifr_data, &ar->arVersion,
+                             sizeof(ar->arVersion)))
+            {
+                ret = -EFAULT;
+            }
+            break;
+        }
+        case AR6000_IOCTL_WMI_SETPWR:
+        {
+            WMI_POWER_MODE_CMD pwrModeCmd;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&pwrModeCmd, userdata,
+                                   sizeof(pwrModeCmd)))
+            {
+                ret = -EFAULT;
+            } else {
+                if (wmi_powermode_cmd(ar->arWmi, pwrModeCmd.powerMode)
+                       != A_OK)
+                {
+                    ret = -EIO;
+                }
+            }
+            break;
+        }
+        case AR6000_IOCTL_WMI_SET_IBSS_PM_CAPS:
+        {
+            WMI_IBSS_PM_CAPS_CMD ibssPmCaps;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&ibssPmCaps, userdata,
+                                   sizeof(ibssPmCaps)))
+            {
+                ret = -EFAULT;
+            } else {
+                if (wmi_ibsspmcaps_cmd(ar->arWmi, ibssPmCaps.power_saving, ibssPmCaps.ttl,
+                    ibssPmCaps.atim_windows, ibssPmCaps.timeout_value) != A_OK)
+                {
+                    ret = -EIO;
+                }                
+                AR6000_SPIN_LOCK(&ar->arLock, 0);
+                ar->arIbssPsEnable = ibssPmCaps.power_saving;
+                AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+            }
+            break;
+        }
+        case AR6000_IOCTL_WMI_SET_PMPARAMS:
+        {
+            WMI_POWER_PARAMS_CMD pmParams;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&pmParams, userdata,
+                                      sizeof(pmParams)))
+            {
+                ret = -EFAULT;
+            } else {
+                if (wmi_pmparams_cmd(ar->arWmi, pmParams.idle_period,
+                                     pmParams.pspoll_number,
+                                     pmParams.dtim_policy) != A_OK)
+                {
+                    ret = -EIO;
+                }
+            }
+            break;
+        }
+        case AR6000_IOCTL_WMI_SETSCAN:
+        {
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&scParams, userdata,
+                                      sizeof(scParams)))
+            {
+                ret = -EFAULT;
+            } else {
+                if (CAN_SCAN_IN_CONNECT(scParams.scanCtrlFlags)) {
+                    ar->arSkipScan = FALSE;
+                } else {
+                    ar->arSkipScan = TRUE;
+                }
+
+                if (wmi_scanparams_cmd(ar->arWmi, scParams.fg_start_period,
+                                       scParams.fg_end_period,
+                                       scParams.bg_period,
+                                       scParams.minact_chdwell_time,
+                                       scParams.maxact_chdwell_time,
+                                       scParams.pas_chdwell_time,
+                                       scParams.shortScanRatio,
+                                       scParams.scanCtrlFlags,
+                                       scParams.max_dfsch_act_time) != A_OK)
+                {
+                    ret = -EIO;
+                }
+            }
+            break;
+        }
+        case AR6000_IOCTL_WMI_SETLISTENINT:
+        {
+            WMI_LISTEN_INT_CMD listenCmd;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&listenCmd, userdata,
+                                      sizeof(listenCmd)))
+            {
+                ret = -EFAULT;
+            } else {
+                    if (wmi_listeninterval_cmd(ar->arWmi, listenCmd.listenInterval, listenCmd.numBeacons) != A_OK) {
+                        ret = -EIO;
+                    } else {
+                        AR6000_SPIN_LOCK(&ar->arLock, 0);
+                        ar->arListenInterval = param;
+                        AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+                    }
+                    
+                }
+            break;
+        }
+        case AR6000_IOCTL_WMI_SET_BMISS_TIME:
+        {
+            WMI_BMISS_TIME_CMD bmissCmd;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&bmissCmd, userdata,
+                                      sizeof(bmissCmd)))
+            {
+                ret = -EFAULT;
+            } else {
+                if (wmi_bmisstime_cmd(ar->arWmi, bmissCmd.bmissTime, bmissCmd.numBeacons) != A_OK) {
+                    ret = -EIO;
+                }
+            }
+            break;
+        }
+        case AR6000_IOCTL_WMI_SETBSSFILTER:
+        {
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else {
+                get_user(param, (unsigned char *)userdata);
+                get_user(param2, (unsigned int *)(userdata + 1));
+                if (wmi_bssfilter_cmd(ar->arWmi, param, param2) != A_OK) {
+                    ret = -EIO;
+                }
+            }
+            break;
+        }
+        case AR6000_IOCTL_WMI_SET_SNRTHRESHOLD:
+        {
+            ret = ar6000_ioctl_set_snr_threshold(dev, rq);
+            break;
+        }
+        case AR6000_XIOCTL_WMI_SET_RSSITHRESHOLD:
+        {
+            ret = ar6000_ioctl_set_rssi_threshold(dev, rq);
+            break;
+        }
+        case AR6000_XIOCTL_WMI_CLR_RSSISNR:
+        {
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            }
+            ret = wmi_clr_rssi_snr(ar->arWmi);
+            break;
+        }
+        case AR6000_XIOCTL_WMI_SET_LQTHRESHOLD:
+        {
+            ret = ar6000_ioctl_set_lq_threshold(dev, rq);
+            break;
+        }
+        case AR6000_XIOCTL_WMI_SET_LPREAMBLE:
+        {
+            WMI_SET_LPREAMBLE_CMD setLpreambleCmd;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&setLpreambleCmd, userdata,
+                                   sizeof(setLpreambleCmd)))
+            {
+                ret = -EFAULT;
+            } else {
+                if (wmi_set_lpreamble_cmd(ar->arWmi, setLpreambleCmd.status)
+                       != A_OK)
+                {
+                    ret = -EIO;
+                }
+            }
+
+            break;
+        }
+        case AR6000_XIOCTL_WMI_SET_RTS:
+        {
+            WMI_SET_RTS_CMD rtsCmd;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&rtsCmd, userdata,
+                                   sizeof(rtsCmd)))
+            {
+                ret = -EFAULT;
+            } else {
+                if (wmi_set_rts_cmd(ar->arWmi, rtsCmd.threshold)
+                       != A_OK)
+                {
+                    ret = -EIO;
+                }
+            }
+
+            break;
+        }
+        case AR6000_XIOCTL_WMI_SET_WMM:
+        {
+            ret = ar6000_ioctl_set_wmm(dev, rq);
+            break;
+        }
+        case AR6000_XIOCTL_WMI_SET_TXOP:
+        {
+            ret = ar6000_ioctl_set_txop(dev, rq);
+            break;
+        }
+        case AR6000_XIOCTL_WMI_GET_RD:
+        {
+            ret = ar6000_ioctl_get_rd(dev, rq);
+            break;
+        }
+        case AR6000_IOCTL_WMI_SET_CHANNELPARAMS:
+        {
+            ret = ar6000_ioctl_set_channelParams(dev, rq);
+            break;
+        }
+        case AR6000_IOCTL_WMI_SET_PROBEDSSID:
+        {
+            ret = ar6000_ioctl_set_probedSsid(dev, rq);
+            break;
+        }
+        case AR6000_IOCTL_WMI_SET_BADAP:
+        {
+            ret = ar6000_ioctl_set_badAp(dev, rq);
+            break;
+        }
+        case AR6000_IOCTL_WMI_CREATE_QOS:
+        {
+            ret = ar6000_ioctl_create_qos(dev, rq);
+            break;
+        }
+        case AR6000_IOCTL_WMI_DELETE_QOS:
+        {
+            ret = ar6000_ioctl_delete_qos(dev, rq);
+            break;
+        }
+        case AR6000_IOCTL_WMI_GET_QOS_QUEUE:
+        {
+            ret = ar6000_ioctl_get_qos_queue(dev, rq);
+            break;
+        }
+        case AR6000_IOCTL_WMI_GET_TARGET_STATS:
+        {
+            ret = ar6000_ioctl_get_target_stats(dev, rq);
+            break;
+        }
+        case AR6000_IOCTL_WMI_SET_ERROR_REPORT_BITMASK:
+        {
+            ret = ar6000_ioctl_set_error_report_bitmask(dev, rq);
+            break;
+        }
+        case AR6000_IOCTL_WMI_SET_ASSOC_INFO:
+        {
+            WMI_SET_ASSOC_INFO_CMD cmd;
+            A_UINT8 assocInfo[WMI_MAX_ASSOC_INFO_LEN];
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else {
+                get_user(cmd.ieType, userdata);
+                if (cmd.ieType >= WMI_MAX_ASSOC_INFO_TYPE) {
+                    ret = -EIO;
+                } else {
+                    get_user(cmd.bufferSize, userdata + 1);
+                    if (cmd.bufferSize > WMI_MAX_ASSOC_INFO_LEN) {
+                        ret = -EFAULT;
+                        break;
+                    }
+                    if (copy_from_user(assocInfo, userdata + 2,
+                                       cmd.bufferSize))
+                    {
+                        ret = -EFAULT;
+                    } else {
+                        if (wmi_associnfo_cmd(ar->arWmi, cmd.ieType,
+                                                 cmd.bufferSize,
+                                                 assocInfo) != A_OK)
+                        {
+                            ret = -EIO;
+                        }
+                    }
+                }
+            }
+            break;
+        }
+        case AR6000_IOCTL_WMI_SET_ACCESS_PARAMS:
+        {
+            ret = ar6000_ioctl_set_access_params(dev, rq);
+            break;
+        }
+        case AR6000_IOCTL_WMI_SET_DISC_TIMEOUT:
+        {
+            ret = ar6000_ioctl_set_disconnect_timeout(dev, rq);
+            break;
+        }
+        case AR6000_XIOCTL_FORCE_TARGET_RESET:
+        {
+            if (ar->arHtcTarget)
+            {
+//                HTCForceReset(htcTarget);
+            }
+            else
+            {
+                AR_DEBUG_PRINTF("ar6000_ioctl cannot attempt reset.\n");
+            }
+            break;
+        }
+        case AR6000_XIOCTL_TARGET_INFO:
+        case AR6000_XIOCTL_CHECK_TARGET_READY: /* backwards compatibility */
+        {
+            /* If we made it to here, then the Target exists and is ready. */
+
+            if (cmd == AR6000_XIOCTL_TARGET_INFO) {
+                if (copy_to_user((A_UINT32 *)rq->ifr_data, &ar->arVersion.target_ver,
+                                 sizeof(ar->arVersion.target_ver)))
+                {
+                    ret = -EFAULT;
+                }
+                if (copy_to_user(((A_UINT32 *)rq->ifr_data)+1, &ar->arTargetType,
+                                 sizeof(ar->arTargetType)))
+                {
+                    ret = -EFAULT;
+                }
+            }
+            break;
+        }
+        case AR6000_XIOCTL_WMI_SET_HB_CHALLENGE_RESP_PARAMS:
+        {
+            WMI_SET_HB_CHALLENGE_RESP_PARAMS_CMD hbparam;
+
+            if (copy_from_user(&hbparam, userdata, sizeof(hbparam)))
+            {
+                ret = -EFAULT;
+            } else {
+                AR6000_SPIN_LOCK(&ar->arLock, 0);
+                /* Start a cyclic timer with the parameters provided. */
+                if (hbparam.frequency) {
+                    ar->arHBChallengeResp.frequency = hbparam.frequency;
+                }
+                if (hbparam.threshold) {
+                    ar->arHBChallengeResp.missThres = hbparam.threshold;
+                }
+    
+                /* Delete the pending timer and start a new one */
+                if (timer_pending(&ar->arHBChallengeResp.timer)) {
+                    A_UNTIMEOUT(&ar->arHBChallengeResp.timer);
+                }
+                A_TIMEOUT_MS(&ar->arHBChallengeResp.timer, ar->arHBChallengeResp.frequency * 1000, 0);
+                AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+            }
+            break;
+        }
+        case AR6000_XIOCTL_WMI_GET_HB_CHALLENGE_RESP:
+        {
+            A_UINT32 cookie;
+
+            if (copy_from_user(&cookie, userdata, sizeof(cookie))) {
+                return -EFAULT;
+            }
+        
+            /* Send the challenge on the control channel */
+            if (wmi_get_challenge_resp_cmd(ar->arWmi, cookie, APP_HB_CHALLENGE) != A_OK) {
+                return -EIO;
+            }
+            break;
+        }
+#ifdef USER_KEYS
+        case AR6000_XIOCTL_USER_SETKEYS:
+        {
+
+            ar->user_savedkeys_stat = USER_SAVEDKEYS_STAT_RUN;
+
+            if (copy_from_user(&ar->user_key_ctrl, userdata, 
+                               sizeof(ar->user_key_ctrl))) 
+            {
+                return -EFAULT;
+            }
+        
+            A_PRINTF("ar6000 USER set key %x\n", ar->user_key_ctrl);
+            break;
+        }
+#endif /* USER_KEYS */
+
+#ifdef CONFIG_HOST_GPIO_SUPPORT
+        case AR6000_XIOCTL_GPIO_OUTPUT_SET:
+        {
+            struct ar6000_gpio_output_set_cmd_s gpio_output_set_cmd;
+
+            if (ar->arWmiReady == FALSE) {
+                return -EIO;
+            }
+            if (down_interruptible(&ar->arSem)) {
+                return -ERESTARTSYS;
+            }
+
+            if (copy_from_user(&gpio_output_set_cmd, userdata,
+                                sizeof(gpio_output_set_cmd)))
+            {
+                ret = -EFAULT;
+            } else {
+                ret = ar6000_gpio_output_set(dev,
+                                             gpio_output_set_cmd.set_mask,
+                                             gpio_output_set_cmd.clear_mask,
+                                             gpio_output_set_cmd.enable_mask,
+                                             gpio_output_set_cmd.disable_mask);
+                if (ret != A_OK) {
+                    ret = EIO;
+                }
+            }
+            up(&ar->arSem);
+            break;
+        }
+        case AR6000_XIOCTL_GPIO_INPUT_GET:
+        {
+            if (ar->arWmiReady == FALSE) {
+                return -EIO;
+            }
+            if (down_interruptible(&ar->arSem)) {
+                return -ERESTARTSYS;
+            }
+
+            ret = ar6000_gpio_input_get(dev);
+            if (ret != A_OK) {
+                up(&ar->arSem);
+                return -EIO;
+            }
+
+            /* Wait for Target to respond. */
+            wait_event_interruptible(arEvent, gpio_data_available);
+            if (signal_pending(current)) {
+                ret = -EINTR;
+            } else {
+                A_ASSERT(gpio_reg_results.gpioreg_id == GPIO_ID_NONE);
+
+                if (copy_to_user(userdata, &gpio_reg_results.value,
+                                 sizeof(gpio_reg_results.value)))
+                {
+                    ret = -EFAULT;
+                }
+            }
+            up(&ar->arSem);
+            break;
+        }
+        case AR6000_XIOCTL_GPIO_REGISTER_SET:
+        {
+            struct ar6000_gpio_register_cmd_s gpio_register_cmd;
+
+            if (ar->arWmiReady == FALSE) {
+                return -EIO;
+            }
+            if (down_interruptible(&ar->arSem)) {
+                return -ERESTARTSYS;
+            }
+
+            if (copy_from_user(&gpio_register_cmd, userdata,
+                                sizeof(gpio_register_cmd)))
+            {
+                ret = -EFAULT;
+            } else {
+                ret = ar6000_gpio_register_set(dev,
+                                               gpio_register_cmd.gpioreg_id,
+                                               gpio_register_cmd.value);
+                if (ret != A_OK) {
+                    ret = EIO;
+                }
+
+                /* Wait for acknowledgement from Target */
+                wait_event_interruptible(arEvent, gpio_ack_received);
+                if (signal_pending(current)) {
+                    ret = -EINTR;
+                } 
+            }
+            up(&ar->arSem);
+            break;
+        }
+        case AR6000_XIOCTL_GPIO_REGISTER_GET:
+        {
+            struct ar6000_gpio_register_cmd_s gpio_register_cmd;
+
+            if (ar->arWmiReady == FALSE) {
+                return -EIO;
+            }
+            if (down_interruptible(&ar->arSem)) {
+                return -ERESTARTSYS;
+            }
+
+            if (copy_from_user(&gpio_register_cmd, userdata,
+                                sizeof(gpio_register_cmd)))
+            {
+                ret = -EFAULT;
+            } else {
+                ret = ar6000_gpio_register_get(dev, gpio_register_cmd.gpioreg_id);
+                if (ret != A_OK) {
+                    up(&ar->arSem);
+                    return -EIO;
+                }
+
+                /* Wait for Target to respond. */
+                wait_event_interruptible(arEvent, gpio_data_available);
+                if (signal_pending(current)) {
+                    ret = -EINTR;
+                } else {
+                    A_ASSERT(gpio_register_cmd.gpioreg_id == gpio_reg_results.gpioreg_id);
+                    if (copy_to_user(userdata, &gpio_reg_results,
+                                     sizeof(gpio_reg_results)))
+                    {
+                        ret = -EFAULT;
+                    }
+                }
+            }
+            up(&ar->arSem);
+            break;
+        }
+        case AR6000_XIOCTL_GPIO_INTR_ACK:
+        {
+            struct ar6000_gpio_intr_ack_cmd_s gpio_intr_ack_cmd;
+
+            if (ar->arWmiReady == FALSE) {
+                return -EIO;
+            }
+            if (down_interruptible(&ar->arSem)) {
+                return -ERESTARTSYS;
+            }
+
+            if (copy_from_user(&gpio_intr_ack_cmd, userdata,
+                                sizeof(gpio_intr_ack_cmd)))
+            {
+                ret = -EFAULT;
+            } else {
+                ret = ar6000_gpio_intr_ack(dev, gpio_intr_ack_cmd.ack_mask);
+                if (ret != A_OK) {
+                    ret = EIO;
+                }
+            }
+            up(&ar->arSem);
+            break;
+        }
+        case AR6000_XIOCTL_GPIO_INTR_WAIT:
+        {
+            /* Wait for Target to report an interrupt. */
+            dev_hold(dev);
+            rtnl_unlock();
+            wait_event_interruptible(arEvent, gpio_intr_available);
+            rtnl_lock();
+            __dev_put(dev);
+
+            if (signal_pending(current)) {
+                ret = -EINTR;
+            } else {
+                if (copy_to_user(userdata, &gpio_intr_results,
+                                 sizeof(gpio_intr_results)))
+                {
+                    ret = -EFAULT;
+                }
+            }
+            break;
+        }
+#endif /* CONFIG_HOST_GPIO_SUPPORT */
+
+        case AR6000_XIOCTL_DBGLOG_CFG_MODULE:
+        {
+            struct ar6000_dbglog_module_config_s config;
+
+            if (copy_from_user(&config, userdata, sizeof(config))) {
+                return -EFAULT;
+            }
+
+            /* Send the challenge on the control channel */
+            if (wmi_config_debug_module_cmd(ar->arWmi, config.mmask,
+                                            config.tsr, config.rep, 
+                                            config.size, config.valid) != A_OK)
+            {
+                return -EIO;
+            }
+            break;
+        }
+
+        case AR6000_XIOCTL_DBGLOG_GET_DEBUG_LOGS:
+        {
+            /* Send the challenge on the control channel */
+            if (ar6000_dbglog_get_debug_logs(ar) != A_OK)
+            {
+                return -EIO;
+            }
+            break;
+        }
+
+        case AR6000_XIOCTL_SET_ADHOC_BSSID:
+        {
+            WMI_SET_ADHOC_BSSID_CMD adhocBssid;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&adhocBssid, userdata,
+                                      sizeof(adhocBssid)))
+            {
+                ret = -EFAULT;
+            } else if (A_MEMCMP(adhocBssid.bssid, bcast_mac,
+                                AR6000_ETH_ADDR_LEN) == 0)
+            {
+                ret = -EFAULT;
+            } else {
+
+                A_MEMCPY(ar->arReqBssid, adhocBssid.bssid, sizeof(ar->arReqBssid));
+        }
+            break;
+        }
+
+        case AR6000_XIOCTL_SET_OPT_MODE:
+        {
+        WMI_SET_OPT_MODE_CMD optModeCmd;
+            AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&optModeCmd, userdata,
+                                      sizeof(optModeCmd)))
+            {
+                ret = -EFAULT;
+            } else if (ar->arConnected && optModeCmd.optMode == SPECIAL_ON) {
+                ret = -EFAULT;
+
+            } else if (wmi_set_opt_mode_cmd(ar->arWmi, optModeCmd.optMode)
+                       != A_OK)
+            {
+                ret = -EIO;
+            }
+            break;
+        }
+
+        case AR6000_XIOCTL_OPT_SEND_FRAME:
+        {
+        WMI_OPT_TX_FRAME_CMD optTxFrmCmd;
+            A_UINT8 data[MAX_OPT_DATA_LEN];
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&optTxFrmCmd, userdata,
+                                      sizeof(optTxFrmCmd))) 
+            {
+                ret = -EFAULT;
+            } else if (copy_from_user(data,
+                                      userdata+sizeof(WMI_OPT_TX_FRAME_CMD)-1, 
+                                      optTxFrmCmd.optIEDataLen))
+            {
+                ret = -EFAULT;
+            } else {
+                ret = wmi_opt_tx_frame_cmd(ar->arWmi,
+                                           optTxFrmCmd.frmType,
+                                           optTxFrmCmd.dstAddr,
+                                           optTxFrmCmd.bssid,
+                                           optTxFrmCmd.optIEDataLen,
+                                           data);
+            }
+ 
+            break;
+        }
+        case AR6000_XIOCTL_WMI_SETRETRYLIMITS:
+        {
+            WMI_SET_RETRY_LIMITS_CMD setRetryParams;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&setRetryParams, userdata,
+                                      sizeof(setRetryParams)))
+            {
+                ret = -EFAULT;
+            } else {
+                if (wmi_set_retry_limits_cmd(ar->arWmi, setRetryParams.frameType,
+                                          setRetryParams.trafficClass,
+                                          setRetryParams.maxRetries,
+                                          setRetryParams.enableNotify) != A_OK)
+                {
+                    ret = -EIO;
+                }                
+                AR6000_SPIN_LOCK(&ar->arLock, 0);
+                ar->arMaxRetries = setRetryParams.maxRetries;
+                AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+            }
+            break;
+        }
+
+        case AR6000_XIOCTL_SET_ADHOC_BEACON_INTVAL:
+        {
+            WMI_BEACON_INT_CMD bIntvlCmd;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&bIntvlCmd, userdata,
+                       sizeof(bIntvlCmd)))
+            {
+                ret = -EFAULT;
+            } else if (wmi_set_adhoc_bconIntvl_cmd(ar->arWmi, bIntvlCmd.beaconInterval)
+                        != A_OK)
+            {
+                ret = -EIO;
+            }
+            break;
+        }
+        case IEEE80211_IOCTL_SETAUTHALG:
+        {
+            AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+            struct ieee80211req_authalg req; 
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&req, userdata,
+                       sizeof(struct ieee80211req_authalg)))
+            {
+                ret = -EFAULT;
+            } else if (req.auth_alg == AUTH_ALG_OPEN_SYSTEM) {
+                ar->arDot11AuthMode  = OPEN_AUTH;
+                ar->arPairwiseCrypto  = NONE_CRYPT;
+                ar->arGroupCrypto     = NONE_CRYPT;
+            } else if (req.auth_alg == AUTH_ALG_LEAP) {
+                ar->arDot11AuthMode   = LEAP_AUTH;
+            } else {
+                ret = -EIO;
+            }
+            break;
+        }
+
+        case AR6000_XIOCTL_SET_VOICE_PKT_SIZE:
+            ret = ar6000_xioctl_set_voice_pkt_size(dev, userdata);
+            break;
+
+        case AR6000_XIOCTL_SET_MAX_SP:
+            ret = ar6000_xioctl_set_max_sp_len(dev, userdata);
+            break;
+
+        case AR6000_XIOCTL_WMI_GET_ROAM_TBL:
+            ret = ar6000_ioctl_get_roam_tbl(dev, rq);
+            break;
+        case AR6000_XIOCTL_WMI_SET_ROAM_CTRL:
+            ret = ar6000_ioctl_set_roam_ctrl(dev, userdata);
+            break;
+        case AR6000_XIOCTRL_WMI_SET_POWERSAVE_TIMERS:
+            ret = ar6000_ioctl_set_powersave_timers(dev, userdata);
+            break;
+        case AR6000_XIOCTRL_WMI_GET_POWER_MODE:
+            ret = ar6000_ioctl_get_power_mode(dev, rq);
+            break;
+        case AR6000_XIOCTRL_WMI_SET_WLAN_STATE:
+            get_user(ar->arWlanState, (unsigned int *)userdata);
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+                break;
+            }
+
+            if (ar->arWlanState == WLAN_ENABLED) {
+                /* Enable foreground scanning */
+                if (wmi_scanparams_cmd(ar->arWmi, scParams.fg_start_period,
+                                       scParams.fg_end_period,
+                                       scParams.bg_period,
+                                       scParams.minact_chdwell_time,
+                                       scParams.maxact_chdwell_time,
+                                       scParams.pas_chdwell_time,
+                                       scParams.shortScanRatio,
+                                       scParams.scanCtrlFlags, 
+                                       scParams.max_dfsch_act_time) != A_OK)
+                {
+                    ret = -EIO;
+                }
+                if (ar->arSsidLen) {
+                    ar->arConnectPending = TRUE;
+                    if (wmi_connect_cmd(ar->arWmi, ar->arNetworkType, 
+                                        ar->arDot11AuthMode, ar->arAuthMode,
+                                        ar->arPairwiseCrypto, 
+                                        ar->arPairwiseCryptoLen,
+                                        ar->arGroupCrypto, ar->arGroupCryptoLen,
+                                        ar->arSsidLen, ar->arSsid,
+                                        ar->arReqBssid, ar->arChannelHint, 
+                                        ar->arConnectCtrlFlags) != A_OK)
+                    {
+                        ret = -EIO;
+                        ar->arConnectPending = FALSE;
+                    }
+                }
+            } else {
+                /* Disconnect from the AP and disable foreground scanning */
+                AR6000_SPIN_LOCK(&ar->arLock, 0);
+                if (ar->arConnected == TRUE || ar->arConnectPending == TRUE) {
+                    AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+                    wmi_disconnect_cmd(ar->arWmi);
+                } else {
+                    AR6000_SPIN_UNLOCK(&ar->arLock, 0);    
+                }
+                
+                if (wmi_scanparams_cmd(ar->arWmi, 0xFFFF, 0, 0, 0, 0, 0, 0, 0xFF, 0) != A_OK)
+                {
+                    ret = -EIO;
+                }
+            }
+            break;
+        case AR6000_XIOCTL_WMI_GET_ROAM_DATA:
+            ret = ar6000_ioctl_get_roam_data(dev, rq);
+            break;
+        case AR6000_XIOCTL_WMI_SET_BT_STATUS:
+            ret = ar6000_xioctl_set_bt_status_cmd(dev, userdata);
+            break;
+        case AR6000_XIOCTL_WMI_SET_BT_PARAMS:
+            ret = ar6000_xioctl_set_bt_params_cmd(dev, userdata);
+            break;
+        case AR6000_XIOCTL_WMI_STARTSCAN:
+        {
+            WMI_START_SCAN_CMD setStartScanCmd;
+
+            if (ar->arWmiReady == FALSE) {
+                    ret = -EIO;
+                } else if (copy_from_user(&setStartScanCmd, userdata,
+                                          sizeof(setStartScanCmd)))
+                {
+                    ret = -EFAULT;
+                } else {
+                    if (wmi_startscan_cmd(ar->arWmi, setStartScanCmd.scanType,
+                                    setStartScanCmd.forceFgScan,
+                                    setStartScanCmd.isLegacy,
+                                    setStartScanCmd.homeDwellTime,
+                                    setStartScanCmd.forceScanInterval) != A_OK)
+                    {
+                        ret = -EIO;
+                    }
+                }
+            break;
+        }
+        case AR6000_XIOCTL_WMI_SETFIXRATES:
+        {
+            WMI_FIX_RATES_CMD setFixRatesCmd;
+            A_STATUS returnStatus;
+
+            if (ar->arWmiReady == FALSE) {
+                    ret = -EIO;
+                } else if (copy_from_user(&setFixRatesCmd, userdata,
+                                          sizeof(setFixRatesCmd)))
+                {
+                    ret = -EFAULT;
+                } else {
+                    returnStatus = wmi_set_fixrates_cmd(ar->arWmi, setFixRatesCmd.fixRateMask);
+                    if (returnStatus == A_EINVAL) 
+                    {
+                        ret = -EINVAL;
+                    }
+                    else if(returnStatus != A_OK) {
+                        ret = -EIO;
+                    }
+                }
+            break;
+        }
+
+        case AR6000_XIOCTL_WMI_GETFIXRATES:
+        {
+            WMI_FIX_RATES_CMD getFixRatesCmd; 
+            AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+            int ret = 0;
+
+            if (ar->arWmiReady == FALSE) {
+                return -EIO;
+            }
+
+            if (down_interruptible(&ar->arSem)) {
+                return -ERESTARTSYS;
+            }
+            /* Used copy_from_user/copy_to_user to access user space data */
+            if (copy_from_user(&getFixRatesCmd, userdata, sizeof(getFixRatesCmd))) {
+                ret = -EFAULT;
+            } else {
+                ar->arRateMask = 0xFFFF;
+
+                if (wmi_get_ratemask_cmd(ar->arWmi) != A_OK) {
+                    up(&ar->arSem);
+                    return -EIO;
+                }
+            
+                wait_event_interruptible_timeout(arEvent, ar->arRateMask != 0xFFFF, wmitimeout * HZ);
+
+                if (signal_pending(current)) {
+                    ret = -EINTR;
+                }
+
+                if (!ret) {
+                    getFixRatesCmd.fixRateMask = ar->arRateMask;
+                }
+
+                if(copy_to_user(userdata, &getFixRatesCmd, sizeof(getFixRatesCmd))) {
+                   ret = -EFAULT;
+                }
+
+                up(&ar->arSem);
+            }
+            break;
+        }
+        case AR6000_XIOCTL_WMI_SET_AUTHMODE:
+        {
+            WMI_SET_AUTH_MODE_CMD setAuthMode;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&setAuthMode, userdata,
+                                      sizeof(setAuthMode)))
+            {
+                ret = -EFAULT;
+            } else {
+                if (wmi_set_authmode_cmd(ar->arWmi, setAuthMode.mode) != A_OK)
+                {
+                    ret = -EIO;
+                }
+            }
+            break;
+        }
+        case AR6000_XIOCTL_WMI_SET_REASSOCMODE:
+        {
+            WMI_SET_REASSOC_MODE_CMD setReassocMode;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&setReassocMode, userdata,
+                                      sizeof(setReassocMode)))
+            {
+                ret = -EFAULT;
+            } else {
+                if (wmi_set_reassocmode_cmd(ar->arWmi, setReassocMode.mode) != A_OK)
+                {
+                    ret = -EIO;
+                }
+            }
+            break;
+        }
+        case AR6000_XIOCTL_DIAG_READ:
+        {
+            A_UINT32 addr, data;
+            get_user(addr, (unsigned int *)userdata);
+            if (ar6000_ReadRegDiag(ar->arHifDevice, &addr, &data) != A_OK) {
+                ret = -EIO;
+            }
+            put_user(data, (unsigned int *)userdata + 1);
+            break;
+        }
+        case AR6000_XIOCTL_DIAG_WRITE:
+        {
+            A_UINT32 addr, data;
+            get_user(addr, (unsigned int *)userdata);
+            get_user(data, (unsigned int *)userdata + 1);
+            if (ar6000_WriteRegDiag(ar->arHifDevice, &addr, &data) != A_OK) {
+                ret = -EIO;
+            }
+            break;
+        }
+        case AR6000_XIOCTL_WMI_SET_KEEPALIVE:
+        {
+             WMI_SET_KEEPALIVE_CMD setKeepAlive;
+             if (ar->arWmiReady == FALSE) {
+                 return -EIO;
+             } else if (copy_from_user(&setKeepAlive, userdata,
+                        sizeof(setKeepAlive))){
+                 ret = -EFAULT;
+             } else {
+                 if (wmi_set_keepalive_cmd(ar->arWmi, setKeepAlive.keepaliveInterval) != A_OK) {
+                     ret = -EIO;
+               }
+             }
+             break;
+        }
+        case AR6000_XIOCTL_WMI_GET_KEEPALIVE:
+        {
+            AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+            WMI_GET_KEEPALIVE_CMD getKeepAlive;
+            int ret = 0;
+            if (ar->arWmiReady == FALSE) {
+               return -EIO;
+            }
+            if (down_interruptible(&ar->arSem)) {
+                return -ERESTARTSYS;
+            }
+            if (copy_from_user(&getKeepAlive, userdata,sizeof(getKeepAlive))) {
+               ret = -EFAULT;
+            } else {
+            getKeepAlive.keepaliveInterval = wmi_get_keepalive_cmd(ar->arWmi);
+            ar->arKeepaliveConfigured = 0xFF;
+            if (wmi_get_keepalive_configured(ar->arWmi) != A_OK){
+                up(&ar->arSem);
+                return -EIO;
+            }
+            wait_event_interruptible_timeout(arEvent, ar->arKeepaliveConfigured != 0xFF, wmitimeout * HZ);
+            if (signal_pending(current)) {
+                ret = -EINTR;
+            }
+
+            if (!ret) {
+                getKeepAlive.configured = ar->arKeepaliveConfigured;
+            }
+            if (copy_to_user(userdata, &getKeepAlive, sizeof(getKeepAlive))) {
+               ret = -EFAULT;
+            }
+            up(&ar->arSem);
+            }
+            break;
+        }
+        case AR6000_XIOCTL_WMI_SET_APPIE:
+        {
+            WMI_SET_APPIE_CMD appIEcmd;
+            A_UINT8           appIeInfo[IEEE80211_APPIE_FRAME_MAX_LEN];
+            A_UINT32            fType,ieLen;
+
+			if (ar->arWmiReady == FALSE) {
+				return -EIO;
+			}
+			get_user(fType, (A_UINT32 *)userdata);
+			appIEcmd.mgmtFrmType = fType;
+			if (appIEcmd.mgmtFrmType >= IEEE80211_APPIE_NUM_OF_FRAME) {
+				ret = -EIO;
+			} else {
+				get_user(ieLen, (A_UINT32 *)(userdata + 4));
+				appIEcmd.ieLen = ieLen;
+				if (appIEcmd.ieLen > IEEE80211_APPIE_FRAME_MAX_LEN) {
+					ret = -EIO;
+					break;
+				}
+				if (copy_from_user(appIeInfo, userdata + 8, appIEcmd.ieLen)) {
+					ret = -EFAULT;
+				} else {
+					if (wmi_set_appie_cmd(ar->arWmi, appIEcmd.mgmtFrmType,
+										  appIEcmd.ieLen,  appIeInfo) != A_OK)
+					{
+						ret = -EIO;
+					}
+				}
+            }
+            break;
+        }
+        case AR6000_XIOCTL_WMI_SET_MGMT_FRM_RX_FILTER:
+        {
+            WMI_BSS_FILTER_CMD cmd;
+            A_UINT32    filterType;
+
+            if (copy_from_user(&filterType, userdata, sizeof(A_UINT32))) 
+            {
+                return -EFAULT;
+            }
+            if (filterType & (IEEE80211_FILTER_TYPE_BEACON |
+                                    IEEE80211_FILTER_TYPE_PROBE_RESP))
+            {
+                cmd.bssFilter = ALL_BSS_FILTER;
+            } else {
+                cmd.bssFilter = NONE_BSS_FILTER;
+            }
+            if (wmi_bssfilter_cmd(ar->arWmi, cmd.bssFilter, 0) != A_OK) {
+                ret = -EIO;
+            }
+            
+            AR6000_SPIN_LOCK(&ar->arLock, 0);
+            ar->arMgmtFilter = filterType;
+            AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+            break;
+        }
+        case AR6000_XIOCTL_WMI_SET_WSC_STATUS:
+        {
+            A_UINT32    wsc_status;
+
+            if (copy_from_user(&wsc_status, userdata, sizeof(A_UINT32)))
+            {
+                return -EFAULT;
+            }
+            if (wmi_set_wsc_status_cmd(ar->arWmi, wsc_status) != A_OK) {
+                ret = -EIO;
+            }
+            break;
+        }
+        case AR6000_XIOCTL_BMI_ROMPATCH_INSTALL:
+        {
+            A_UINT32 ROM_addr;
+            A_UINT32 RAM_addr;
+            A_UINT32 nbytes;
+            A_UINT32 do_activate;
+            A_UINT32 rompatch_id;
+
+            get_user(ROM_addr, (A_UINT32 *)userdata); 
+            get_user(RAM_addr, (A_UINT32 *)userdata + 1); 
+            get_user(nbytes, (A_UINT32 *)userdata + 2); 
+            get_user(do_activate, (A_UINT32 *)userdata + 3); 
+            AR_DEBUG_PRINTF("Install rompatch from ROM: 0x%x to RAM: 0x%x  length: %d\n", 
+                             ROM_addr, RAM_addr, nbytes);
+            ret = BMIrompatchInstall(hifDevice, ROM_addr, RAM_addr,
+                                        nbytes, do_activate, &rompatch_id);
+            if (ret == A_OK) {
+                put_user(rompatch_id, (unsigned int *)rq->ifr_data); /* return value */
+            }
+            break;
+        }
+
+        case AR6000_XIOCTL_BMI_ROMPATCH_UNINSTALL:
+        {
+            A_UINT32 rompatch_id;
+
+            get_user(rompatch_id, (A_UINT32 *)userdata); 
+            AR_DEBUG_PRINTF("UNinstall rompatch_id %d\n", rompatch_id);
+            ret = BMIrompatchUninstall(hifDevice, rompatch_id);
+            break;
+        }
+
+        case AR6000_XIOCTL_BMI_ROMPATCH_ACTIVATE:
+        case AR6000_XIOCTL_BMI_ROMPATCH_DEACTIVATE:
+        {
+            A_UINT32 rompatch_count;
+
+            get_user(rompatch_count, (A_UINT32 *)userdata); 
+            AR_DEBUG_PRINTF("Change rompatch activation count=%d\n", rompatch_count);
+            length = sizeof(A_UINT32) * rompatch_count;
+            if ((buffer = (unsigned char *)A_MALLOC(length)) != NULL) {
+                A_MEMZERO(buffer, length);
+                if (copy_from_user(buffer, &userdata[sizeof(rompatch_count)], length))
+                {
+                    ret = -EFAULT;
+                } else {
+                    if (cmd == AR6000_XIOCTL_BMI_ROMPATCH_ACTIVATE) {
+                        ret = BMIrompatchActivate(hifDevice, rompatch_count, (A_UINT32 *)buffer);
+                    } else {
+                        ret = BMIrompatchDeactivate(hifDevice, rompatch_count, (A_UINT32 *)buffer);
+                    }
+                }
+                A_FREE(buffer);
+            } else {
+                ret = -ENOMEM;
+            }
+
+            break;
+        }
+        
+        case AR6000_XIOCTL_WMI_SET_HOST_SLEEP_MODE:
+        {
+            WMI_SET_HOST_SLEEP_MODE_CMD setHostSleepMode;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&setHostSleepMode, userdata,
+                                      sizeof(setHostSleepMode)))
+            {
+                ret = -EFAULT;
+            } else {
+                if (wmi_set_host_sleep_mode_cmd(ar->arWmi, 
+                                &setHostSleepMode) != A_OK)
+                {
+                    ret = -EIO;
+                }
+            }
+            break;
+        }
+        case AR6000_XIOCTL_WMI_SET_WOW_MODE:
+        {
+            WMI_SET_WOW_MODE_CMD setWowMode;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&setWowMode, userdata,
+                                      sizeof(setWowMode)))
+            {
+                ret = -EFAULT;
+            } else {
+                if (wmi_set_wow_mode_cmd(ar->arWmi, 
+                                &setWowMode) != A_OK)
+                {
+                    ret = -EIO;
+                }
+            }
+            break;
+        }
+        case AR6000_XIOCTL_WMI_GET_WOW_LIST:
+        {
+            WMI_GET_WOW_LIST_CMD getWowList;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&getWowList, userdata,
+                                      sizeof(getWowList)))
+            {
+                ret = -EFAULT;
+            } else {
+                if (wmi_get_wow_list_cmd(ar->arWmi, 
+                                &getWowList) != A_OK)
+                {
+                    ret = -EIO;
+                }
+            }
+            break;
+        }
+        case AR6000_XIOCTL_WMI_ADD_WOW_PATTERN:
+        {
+#define WOW_PATTERN_SIZE 64
+#define WOW_MASK_SIZE 64
+
+            WMI_ADD_WOW_PATTERN_CMD cmd;
+            A_UINT8 mask_data[WOW_PATTERN_SIZE]={0};
+            A_UINT8 pattern_data[WOW_PATTERN_SIZE]={0};
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else { 
+
+                if(copy_from_user(&cmd, userdata, 
+                            sizeof(WMI_ADD_WOW_PATTERN_CMD)))
+                      return -EFAULT;
+                if (copy_from_user(pattern_data,
+                                      userdata + 3,  
+                                      cmd.filter_size)){
+                        ret = -EFAULT;
+                        break;
+                }
+                if (copy_from_user(mask_data,
+                                      (userdata + 3 + cmd.filter_size), 
+                                      cmd.filter_size)){
+                        ret = -EFAULT;
+                        break;
+                } else {
+                    if (wmi_add_wow_pattern_cmd(ar->arWmi, 
+                                &cmd, pattern_data, mask_data, cmd.filter_size) != A_OK){
+                        ret = -EIO;
+                    }
+                }
+            }
+#undef WOW_PATTERN_SIZE
+#undef WOW_MASK_SIZE
+            break;
+        }
+        case AR6000_XIOCTL_WMI_DEL_WOW_PATTERN:
+        {
+            WMI_DEL_WOW_PATTERN_CMD delWowPattern;
+
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&delWowPattern, userdata,
+                                      sizeof(delWowPattern)))
+            {
+                ret = -EFAULT;
+            } else {
+                if (wmi_del_wow_pattern_cmd(ar->arWmi, 
+                                &delWowPattern) != A_OK)
+                {
+                    ret = -EIO;
+                }
+            }
+            break;
+        }
+        case AR6000_XIOCTL_DUMP_HTC_CREDIT_STATE:
+            if (ar->arHtcTarget != NULL) {
+                HTCDumpCreditStates(ar->arHtcTarget);
+            }
+            break;
+        case AR6000_XIOCTL_TRAFFIC_ACTIVITY_CHANGE:
+            if (ar->arHtcTarget != NULL) {
+                struct ar6000_traffic_activity_change data;
+                
+                if (copy_from_user(&data, userdata, sizeof(data)))
+                {
+                    return -EFAULT;
+                }
+                    /* note, this is used for testing (mbox ping testing), indicate activity
+                     * change using the stream ID as the traffic class */
+                ar6000_indicate_tx_activity(ar,
+                                            (A_UINT8)data.StreamID,
+                                            data.Active ? TRUE : FALSE);
+            }
+            break;
+        case AR6000_XIOCTL_WMI_SET_CONNECT_CTRL_FLAGS:
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&connectCtrlFlags, userdata, 
+                                      sizeof(connectCtrlFlags)))
+            {
+                ret = -EFAULT;
+            } else {
+                ar->arConnectCtrlFlags = connectCtrlFlags;
+            }
+            break;
+        case AR6000_XIOCTL_WMI_SET_AKMP_PARAMS:
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else if (copy_from_user(&akmpParams, userdata, 
+                                      sizeof(WMI_SET_AKMP_PARAMS_CMD)))
+            {
+                ret = -EFAULT;
+            } else {
+                if (wmi_set_akmp_params_cmd(ar->arWmi, &akmpParams) != A_OK) {
+                    ret = -EIO;
+                }
+            }
+            break;
+        case AR6000_XIOCTL_WMI_SET_PMKID_LIST:
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else {
+                if (copy_from_user(&pmkidInfo.numPMKID, userdata,
+                                      sizeof(pmkidInfo.numPMKID)))
+                {
+                    ret = -EFAULT;
+                    break;
+                }
+                if (copy_from_user(&pmkidInfo.pmkidList, 
+                                   userdata + sizeof(pmkidInfo.numPMKID),
+                                   pmkidInfo.numPMKID * sizeof(WMI_PMKID)))
+                {
+                    ret = -EFAULT;
+                    break;
+                }
+                if (wmi_set_pmkid_list_cmd(ar->arWmi, &pmkidInfo) != A_OK) {
+                    ret = -EIO;
+                }
+            }
+            break;
+        case AR6000_XIOCTL_WMI_GET_PMKID_LIST:
+            if (ar->arWmiReady == FALSE) {
+                ret = -EIO;
+            } else  {
+                if (wmi_get_pmkid_list_cmd(ar->arWmi) != A_OK) {
+                    ret = -EIO;
+                }
+            }
+            break;
+        default:
+            ret = -EOPNOTSUPP;
+    }
+    return ret;
+}
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/netbuf.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/netbuf.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/netbuf.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,225 @@
+
+/*
+ * 
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+#include <linux/kernel.h>
+#include <linux/skbuff.h>
+#include <a_config.h>
+#include "athdefs.h"
+#include "a_types.h"
+#include "a_osapi.h"
+#include "htc_packet.h"
+
+#define AR6000_DATA_OFFSET    64
+
+void a_netbuf_enqueue(A_NETBUF_QUEUE_T *q, void *pkt)
+{
+    skb_queue_tail((struct sk_buff_head *) q, (struct sk_buff *) pkt);
+}
+
+void a_netbuf_prequeue(A_NETBUF_QUEUE_T *q, void *pkt)
+{
+    skb_queue_head((struct sk_buff_head *) q, (struct sk_buff *) pkt);
+}
+
+void *a_netbuf_dequeue(A_NETBUF_QUEUE_T *q)
+{
+    return((void *) skb_dequeue((struct sk_buff_head *) q));
+}
+
+int a_netbuf_queue_size(A_NETBUF_QUEUE_T *q)
+{
+    return(skb_queue_len((struct sk_buff_head *) q));
+}
+
+int a_netbuf_queue_empty(A_NETBUF_QUEUE_T *q)
+{
+    return(skb_queue_empty((struct sk_buff_head *) q));
+}
+
+void a_netbuf_queue_init(A_NETBUF_QUEUE_T *q)
+{
+    skb_queue_head_init((struct sk_buff_head *) q);
+}
+
+void *
+a_netbuf_alloc(int size)
+{
+    struct sk_buff *skb;
+    skb = dev_alloc_skb(AR6000_DATA_OFFSET + sizeof(HTC_PACKET) + size);
+    skb_reserve(skb, AR6000_DATA_OFFSET + sizeof(HTC_PACKET));    
+    return ((void *)skb);
+}
+
+/*
+ * Allocate an SKB w.o. any encapsulation requirement.
+ */
+void *
+a_netbuf_alloc_raw(int size)
+{
+    struct sk_buff *skb;
+
+    skb = dev_alloc_skb(size);
+
+    return ((void *)skb);
+}
+
+void
+a_netbuf_free(void *bufPtr)
+{
+    struct sk_buff *skb = (struct sk_buff *)bufPtr;
+
+    dev_kfree_skb(skb);
+}
+
+A_UINT32
+a_netbuf_to_len(void *bufPtr)
+{
+    return (((struct sk_buff *)bufPtr)->len);
+}
+
+void *
+a_netbuf_to_data(void *bufPtr)
+{
+    return (((struct sk_buff *)bufPtr)->data);
+}
+
+/*
+ * Add len # of bytes to the beginning of the network buffer
+ * pointed to by bufPtr
+ */
+A_STATUS
+a_netbuf_push(void *bufPtr, A_INT32 len)
+{
+    skb_push((struct sk_buff *)bufPtr, len);
+
+    return A_OK;
+}
+
+/*
+ * Add len # of bytes to the beginning of the network buffer
+ * pointed to by bufPtr and also fill with data
+ */
+A_STATUS
+a_netbuf_push_data(void *bufPtr, char *srcPtr, A_INT32 len)
+{
+    skb_push((struct sk_buff *) bufPtr, len);
+    A_MEMCPY(((struct sk_buff *)bufPtr)->data, srcPtr, len);
+
+    return A_OK;
+}
+
+/*
+ * Add len # of bytes to the end of the network buffer
+ * pointed to by bufPtr
+ */
+A_STATUS
+a_netbuf_put(void *bufPtr, A_INT32 len)
+{
+    skb_put((struct sk_buff *)bufPtr, len);
+
+    return A_OK;
+}
+
+/*
+ * Add len # of bytes to the end of the network buffer
+ * pointed to by bufPtr and also fill with data
+ */
+A_STATUS
+a_netbuf_put_data(void *bufPtr, char *srcPtr, A_INT32 len)
+{
+    char *start = ((struct sk_buff *)bufPtr)->data +
+        ((struct sk_buff *)bufPtr)->len;
+    skb_put((struct sk_buff *)bufPtr, len);
+    A_MEMCPY(start, srcPtr, len);
+
+    return A_OK;
+}
+
+
+/*
+ * Trim the network buffer pointed to by bufPtr to len # of bytes 
+ */
+A_STATUS
+a_netbuf_setlen(void *bufPtr, A_INT32 len)
+{
+    skb_trim((struct sk_buff *)bufPtr, len);
+
+    return A_OK;
+}
+
+/*
+ * Chop of len # of bytes from the end of the buffer.
+ */
+A_STATUS
+a_netbuf_trim(void *bufPtr, A_INT32 len)
+{
+    skb_trim((struct sk_buff *)bufPtr, ((struct sk_buff *)bufPtr)->len - len);
+
+    return A_OK;
+}
+
+/*
+ * Chop of len # of bytes from the end of the buffer and return the data.
+ */
+A_STATUS
+a_netbuf_trim_data(void *bufPtr, char *dstPtr, A_INT32 len)
+{
+    char *start = ((struct sk_buff *)bufPtr)->data +
+        (((struct sk_buff *)bufPtr)->len - len);
+    
+    A_MEMCPY(dstPtr, start, len);
+    skb_trim((struct sk_buff *)bufPtr, ((struct sk_buff *)bufPtr)->len - len);
+
+    return A_OK;
+}
+
+
+/*
+ * Returns the number of bytes available to a a_netbuf_push()
+ */
+A_INT32
+a_netbuf_headroom(void *bufPtr)
+{
+    return (skb_headroom((struct sk_buff *)bufPtr));
+}
+
+/*
+ * Removes specified number of bytes from the beginning of the buffer
+ */
+A_STATUS
+a_netbuf_pull(void *bufPtr, A_INT32 len)
+{
+    skb_pull((struct sk_buff *)bufPtr, len);
+
+    return A_OK;
+}
+
+/*
+ * Removes specified number of bytes from the beginning of the buffer
+ * and return the data
+ */
+A_STATUS
+a_netbuf_pull_data(void *bufPtr, char *dstPtr, A_INT32 len)
+{
+    A_MEMCPY(dstPtr, ((struct sk_buff *)bufPtr)->data, len);
+    skb_pull((struct sk_buff *)bufPtr, len);
+
+    return A_OK;
+}
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/wireless_ext.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/wireless_ext.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/os/linux/wireless_ext.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,1855 @@
+/*
+ * 
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+
+#include "ar6000_drv.h"
+
+static A_UINT8 bcast_mac[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
+static void ar6000_set_quality(struct iw_quality *iq, A_INT8 rssi);
+extern unsigned int wmitimeout;
+extern A_WAITQUEUE_HEAD arEvent;
+
+#ifdef  __ATH_CENTRAL_IOCTL_DISPATCHER___ 
+extern int allow_trace_signal;
+static int ath_ioctl_dispatcher(struct net_device *dev,
+                struct iw_request_info *info, struct iw_point *erq, char *key);
+#endif
+
+
+#if WIRELESS_EXT > 14
+/*
+ * Encode a WPA or RSN information element as a custom
+ * element using the hostap format.
+ */
+static u_int
+encode_ie(void *buf, size_t bufsize,
+    const u_int8_t *ie, size_t ielen,
+    const char *leader, size_t leader_len)
+{
+    u_int8_t *p;
+    int i;
+
+    if (bufsize < leader_len)
+        return 0;
+    p = buf;
+    memcpy(p, leader, leader_len);
+    bufsize -= leader_len;
+    p += leader_len;
+    for (i = 0; i < ielen && bufsize > 2; i++)
+        p += sprintf(p, "%02x", ie[i]);
+    return (i == ielen ? p - (u_int8_t *)buf : 0);
+}
+#endif /* WIRELESS_EXT > 14 */
+
+void
+ar6000_scan_node(void *arg, bss_t *ni)
+{
+    struct iw_event iwe;
+#if WIRELESS_EXT > 14
+    char buf[64*2 + 30];
+#endif
+    struct ar_giwscan_param *param;
+    A_CHAR *current_ev;
+    A_CHAR *end_buf;
+    struct ieee80211_common_ie  *cie;
+
+    param = (struct ar_giwscan_param *)arg;
+
+    if (param->current_ev >= param->end_buf) {
+        return;
+    }
+    if ((param->firstPass == TRUE) && 
+        ((ni->ni_cie.ie_wpa == NULL) || (ni->ni_cie.ie_rsn == NULL))) { 
+        /*
+         * Only forward wpa bss's in first pass
+         */
+        return;
+    }
+    
+     if ((param->firstPass == FALSE) && 
+        ((ni->ni_cie.ie_wpa != NULL) || (ni->ni_cie.ie_rsn != NULL))) {
+        /*
+         * Only forward non-wpa bss's in 2nd pass
+         */
+        return;
+    }
+
+    current_ev = param->current_ev;
+    end_buf = param->end_buf;
+
+    cie = &ni->ni_cie;
+
+    A_MEMZERO(&iwe, sizeof(iwe));
+    iwe.cmd = SIOCGIWAP;
+    iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
+    A_MEMCPY(iwe.u.ap_addr.sa_data, ni->ni_macaddr, 6);
+    current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe,
+                                      IW_EV_ADDR_LEN);
+
+    A_MEMZERO(&iwe, sizeof(iwe));
+    iwe.cmd = SIOCGIWESSID;
+    iwe.u.data.flags = 1;
+    iwe.u.data.length = cie->ie_ssid[1];
+    current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe,
+                                      &cie->ie_ssid[2]);
+
+    if (cie->ie_capInfo & (IEEE80211_CAPINFO_ESS|IEEE80211_CAPINFO_IBSS)) {
+        A_MEMZERO(&iwe, sizeof(iwe));
+        iwe.cmd = SIOCGIWMODE;
+        iwe.u.mode = cie->ie_capInfo & IEEE80211_CAPINFO_ESS ?
+                IW_MODE_MASTER : IW_MODE_ADHOC;
+        current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe,
+                                          IW_EV_UINT_LEN);
+    }
+
+    A_MEMZERO(&iwe, sizeof(iwe));
+    iwe.cmd = SIOCGIWFREQ;
+    iwe.u.freq.m = cie->ie_chan * 100000;
+    iwe.u.freq.e = 1;
+    current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe,
+                                      IW_EV_FREQ_LEN);
+
+    A_MEMZERO(&iwe, sizeof(iwe));
+    iwe.cmd = IWEVQUAL;
+    ar6000_set_quality(&iwe.u.qual, ni->ni_snr);
+    current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe,
+                                      IW_EV_QUAL_LEN);
+
+    A_MEMZERO(&iwe, sizeof(iwe));
+    iwe.cmd = SIOCGIWENCODE;
+    if (cie->ie_capInfo & IEEE80211_CAPINFO_PRIVACY) {
+        iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
+    } else {
+        iwe.u.data.flags = IW_ENCODE_DISABLED;
+    }
+    iwe.u.data.length = 0;
+    current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe, "");
+
+#ifdef NOTYET
+    A_MEMZERO(&iwe, sizeof(iwe));
+    iwe.cmd = SIOCGIWRATE;
+    current_val = current_ev + IW_EV_LCP_LEN;
+    for (j = 0; j < ni->ni_rates.rs_nrates; j++) {
+            if (ni->ni_rates.rs_rates[j]) {
+                iwe.u.bitrate.value = ((ni->ni_rates.rs_rates[j] &
+                    IEEE80211_RATE_VAL) / 2) * 1000000;
+                current_val = iwe_stream_add_value(current_ev,
+                    current_val, end_buf, &iwe,
+                    IW_EV_PARAM_LEN);
+            }
+        }
+        /* remove fixed header if no rates were added */
+        if ((current_val - current_ev) > IW_EV_LCP_LEN)
+            current_ev = current_val;
+#endif /* NOTYET */
+
+#if WIRELESS_EXT > 14
+    A_MEMZERO(&iwe, sizeof(iwe));
+    iwe.cmd = IWEVCUSTOM;
+    snprintf(buf, sizeof(buf), "bcn_int=%d", cie->ie_beaconInt);
+    iwe.u.data.length = strlen(buf);
+    current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe, buf);
+
+    if (cie->ie_wpa != NULL) {
+        static const char wpa_leader[] = "wpa_ie=";
+
+        A_MEMZERO(&iwe, sizeof(iwe));
+        iwe.cmd = IWEVCUSTOM;
+        iwe.u.data.length = encode_ie(buf, sizeof(buf), cie->ie_wpa,
+                                      cie->ie_wpa[1]+2,
+                                      wpa_leader, sizeof(wpa_leader)-1);
+
+        if (iwe.u.data.length != 0) {
+            current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe, buf);
+        }
+    }
+
+    if (cie->ie_rsn != NULL && cie->ie_rsn[0] == IEEE80211_ELEMID_RSN) {
+        static const char rsn_leader[] = "rsn_ie=";
+        
+        A_MEMZERO(&iwe, sizeof(iwe));
+        iwe.cmd = IWEVCUSTOM;
+        iwe.u.data.length = encode_ie(buf, sizeof(buf), cie->ie_rsn,
+                                      cie->ie_rsn[1]+2,
+                                      rsn_leader, sizeof(rsn_leader)-1);
+
+        if (iwe.u.data.length != 0) {
+            current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe, buf);
+        }
+    }
+
+    if (cie->ie_wmm != NULL) {
+        static const char wmm_leader[] = "wmm_ie=";
+
+        A_MEMZERO(&iwe, sizeof(iwe));
+        iwe.cmd = IWEVCUSTOM;
+        iwe.u.data.length = encode_ie(buf, sizeof(buf), cie->ie_wmm,
+                                      cie->ie_wmm[1]+2,
+                                      wmm_leader, sizeof(wmm_leader)-1);
+        if (iwe.u.data.length != 0) {
+            current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe, buf);
+        }
+    }
+
+    if (cie->ie_ath != NULL) {
+        static const char ath_leader[] = "ath_ie=";
+
+        A_MEMZERO(&iwe, sizeof(iwe));
+        iwe.cmd = IWEVCUSTOM;
+        iwe.u.data.length = encode_ie(buf, sizeof(buf), cie->ie_ath,
+                                      cie->ie_ath[1]+2,
+                                      ath_leader, sizeof(ath_leader)-1);
+        if (iwe.u.data.length != 0) {
+            current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe, buf);
+        }
+    }
+#endif /* WIRELESS_EXT > 14 */
+
+    param->current_ev = current_ev;
+}
+
+int
+ar6000_ioctl_giwscan(struct net_device *dev,
+            struct iw_request_info *info,
+            struct iw_point *data, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    struct ar_giwscan_param param;
+    int i;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    param.current_ev = extra;
+    param.end_buf = extra + IW_SCAN_MAX_DATA;
+    param.firstPass = TRUE;
+
+    /*
+     * Do two passes to insure WPA scan candidates
+     * are sorted to the front.  This is a hack to deal with
+     * the wireless extensions capping scan results at
+     * IW_SCAN_MAX_DATA bytes.  In densely populated environments
+     * it's easy to overflow this buffer (especially with WPA/RSN
+     * information elements).  Note this sorting hack does not
+     * guarantee we won't overflow anyway.
+     */
+    for (i = 0; i < 2; i++) {
+        /*
+         * Translate data to WE format.
+         */
+        wmi_iterate_nodes(ar->arWmi, ar6000_scan_node, &param);
+        param.firstPass = FALSE;
+        if (param.current_ev >= param.end_buf) {
+            data->length = param.current_ev - extra;
+            return -E2BIG;
+        }
+    }
+
+    if(!(data->length = param.current_ev - extra))
+        return -EAGAIN;
+    return 0;
+}
+
+extern int reconnect_flag;
+/* SIOCSIWESSID */
+static int
+ar6000_ioctl_siwessid(struct net_device *dev,
+                     struct iw_request_info *info,
+                     struct iw_point *data, char *ssid)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    A_STATUS status;
+    A_UINT8     arNetworkType;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    /*
+     * iwconfig passes a null terminated string with length including this
+     * so we need to account for this
+     */
+    if (data->flags && (!data->length || (data->length == 1) ||
+        ((data->length - 1) > sizeof(ar->arSsid))))
+    {
+        /*
+         * ssid is invalid
+         */
+        return -EINVAL;
+    }
+    /* Added for bug 25178, return an IOCTL error instead of target returning 
+       Illegal parameter error when either the BSSID or channel is missing 
+       and we cannot scan during connect.
+     */
+    if (data->flags) {
+        if (ar->arSkipScan == TRUE &&
+            (ar->arChannelHint == 0 ||
+             (!ar->arReqBssid[0] && !ar->arReqBssid[1] && !ar->arReqBssid[2] &&
+              !ar->arReqBssid[3] && !ar->arReqBssid[4] && !ar->arReqBssid[5])))
+        {
+            return -EINVAL;
+        }
+    }
+
+    if (down_interruptible(&ar->arSem)) {
+        return -ERESTARTSYS;
+    }
+
+    if (ar->arTxPending[WMI_CONTROL_PRI]) {
+        /*
+         * sleep until the command queue drains
+         */
+        wait_event_interruptible_timeout(arEvent,
+            ar->arTxPending[WMI_CONTROL_PRI] == 0, wmitimeout * HZ);
+        if (signal_pending(current)) {
+            return -EINTR;
+        }
+    }
+
+    if (!data->flags) {
+        arNetworkType = ar->arNetworkType;
+        ar6000_init_profile_info(ar);
+        ar->arNetworkType = arNetworkType;
+    }
+
+    if ((ar->arSsidLen) || (!data->flags)) 
+    {
+        if ((!data->flags) ||
+            (A_MEMCMP(ar->arSsid, ssid, ar->arSsidLen) != 0) ||
+            (ar->arSsidLen != (data->length - 1)))
+        {
+            /*
+             * SSID set previously or essid off has been issued.
+             *
+             * Disconnect Command is issued in two cases after wmi is ready
+             * (1) ssid is different from the previous setting
+             * (2) essid off has been issued
+             * 
+             */
+            if (ar->arWmiReady == TRUE) {
+                reconnect_flag = 0;
+                status = wmi_disconnect_cmd(ar->arWmi);
+                A_MEMZERO(ar->arSsid, sizeof(ar->arSsid));
+                ar->arSsidLen = 0;
+                if (ar->arSkipScan == FALSE) {
+                    A_MEMZERO(ar->arReqBssid, sizeof(ar->arReqBssid));
+                }
+                if (!data->flags) {
+                    up(&ar->arSem);
+                    return 0;
+                }
+            } else {
+                 up(&ar->arSem);
+            }
+        }
+        else
+        {
+            /*
+             * SSID is same, so we assume profile hasn't changed.
+             * If the interface is up and wmi is ready, we issue 
+             * a reconnect cmd. Issue a reconnect only we are already
+             * connected.
+             */
+            if((ar->arConnected == TRUE) && (ar->arWmiReady == TRUE))
+            {
+                reconnect_flag = TRUE;
+                status = wmi_reconnect_cmd(ar->arWmi,ar->arReqBssid,
+                                           ar->arChannelHint);
+                up(&ar->arSem);
+                if (status != A_OK) {
+                    return -EIO;
+                }
+                return 0;
+            }
+            else{
+                /*
+                 * Dont return if connect is pending.
+                 */
+                if(!(ar->arConnectPending)) {
+                    up(&ar->arSem);
+                    return 0;
+                }
+            }
+        }
+    }
+
+    ar->arSsidLen = data->length - 1;
+    A_MEMCPY(ar->arSsid, ssid, ar->arSsidLen);
+    
+    /* The ssid length check prevents second "essid off" from the user, 
+       to be treated as a connect cmd. The second "essid off" is ignored.
+    */
+    if((ar->arWmiReady == TRUE) && (ar->arSsidLen > 0) )
+    {
+        AR6000_SPIN_LOCK(&ar->arLock, 0);
+        if (SHARED_AUTH == ar->arDot11AuthMode) {
+            ar6000_install_static_wep_keys(ar);
+        }
+        AR_DEBUG_PRINTF("Connect called with authmode %d dot11 auth %d"\
+                        " PW crypto %d PW crypto Len %d GRP crypto %d"\
+                        " GRP crypto Len %d\n", 
+                        ar->arAuthMode, ar->arDot11AuthMode,
+                        ar->arPairwiseCrypto, ar->arPairwiseCryptoLen,
+                        ar->arGroupCrypto, ar->arGroupCryptoLen);
+        reconnect_flag = 0;
+        AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+        status = wmi_connect_cmd(ar->arWmi, ar->arNetworkType, 
+                                 ar->arDot11AuthMode, ar->arAuthMode,
+                                 ar->arPairwiseCrypto, ar->arPairwiseCryptoLen,
+                                 ar->arGroupCrypto,ar->arGroupCryptoLen,
+                                 ar->arSsidLen, ar->arSsid,
+                                 ar->arReqBssid, ar->arChannelHint,
+                                 ar->arConnectCtrlFlags);
+        
+
+        up(&ar->arSem);
+
+        if (status != A_OK) {
+            return -EIO;
+        }
+        ar->arConnectPending = TRUE;
+    }else{
+      up(&ar->arSem);
+    }
+    return 0;
+}
+
+/* SIOCGIWESSID */
+static int
+ar6000_ioctl_giwessid(struct net_device *dev,
+                     struct iw_request_info *info,
+                     struct iw_point *data, char *essid)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    if (!ar->arSsidLen) {
+        return -EINVAL;
+    }
+
+    data->flags = 1;
+    data->length = ar->arSsidLen;
+    A_MEMCPY(essid, ar->arSsid, ar->arSsidLen);
+
+    return 0;
+}
+
+
+void ar6000_install_static_wep_keys(AR_SOFTC_T *ar)
+{
+    A_UINT8 index;
+    A_UINT8 keyUsage;
+
+    for (index = WMI_MIN_KEY_INDEX; index <= WMI_MAX_KEY_INDEX; index++) {
+        if (ar->arWepKeyList[index].arKeyLen) {
+            keyUsage = GROUP_USAGE;
+            if (index == ar->arDefTxKeyIndex) {
+                keyUsage |= TX_USAGE;
+            }
+            wmi_addKey_cmd(ar->arWmi, 
+                           index, 
+                           WEP_CRYPT, 
+                           keyUsage, 
+                           ar->arWepKeyList[index].arKeyLen, 
+                           NULL,
+                           ar->arWepKeyList[index].arKey, KEY_OP_INIT_VAL,
+                           NO_SYNC_WMIFLAG); 
+        }
+    }
+}
+
+int
+ar6000_ioctl_delkey(struct net_device *dev, struct iw_request_info *info,
+             void *w, char *extra)
+{
+    return 0;
+}
+
+int
+ar6000_ioctl_setmlme(struct net_device *dev, struct iw_request_info *info,
+             void *w, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    struct ieee80211req_mlme *mlme = (struct ieee80211req_mlme *)extra;
+
+    if ((ar->arWmiReady == FALSE) || (ar->arConnected != TRUE)) {
+        return -EIO;
+    }
+
+    switch (mlme->im_op) {
+        case IEEE80211_MLME_DISASSOC:
+        case IEEE80211_MLME_DEAUTH:
+            /* Not Supported */
+            break;
+        default:
+            break;
+    }
+    return 0;
+}
+
+
+int
+ar6000_ioctl_setwmmparams(struct net_device *dev, struct iw_request_info *info,
+             void *w, char *extra)
+{
+    return -EIO;            /* for now */
+}
+
+int
+ar6000_ioctl_getwmmparams(struct net_device *dev, struct iw_request_info *info,
+             void *w, char *extra)
+{
+    return -EIO;            /* for now */
+}
+
+int
+ar6000_ioctl_setoptie(struct net_device *dev, struct iw_request_info *info,
+             void *w, char *extra)
+{
+    return 0;
+}
+
+int
+ar6000_ioctl_setauthalg(struct net_device *dev, struct iw_request_info *info,
+             void *w, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    struct ieee80211req_authalg *req = (struct ieee80211req_authalg *)extra;
+    int ret = 0;
+    
+
+    AR6000_SPIN_LOCK(&ar->arLock, 0);
+
+    if (req->auth_alg == AUTH_ALG_OPEN_SYSTEM) {
+        ar->arDot11AuthMode  = OPEN_AUTH;
+    } else if (req->auth_alg == AUTH_ALG_LEAP) {
+        ar->arDot11AuthMode   = LEAP_AUTH;
+        ar->arPairwiseCrypto  = WEP_CRYPT;
+        ar->arGroupCrypto     = WEP_CRYPT;
+    } else {
+        ret = -EIO;
+    }
+
+    AR6000_SPIN_UNLOCK(&ar->arLock, 0);
+
+    return ret;
+}
+static int
+ar6000_ioctl_addpmkid(struct net_device *dev, struct iw_request_info *info,
+             void *w, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    struct ieee80211req_addpmkid  *req = (struct ieee80211req_addpmkid *)extra;
+    A_STATUS status;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    AR_DEBUG_PRINTF("Add pmkid for %2.2x:%2.2x:%2.2x:%2.2x:%2.2x:%2.2x en=%d\n",
+                    req->pi_bssid[0], req->pi_bssid[1], req->pi_bssid[2],
+                    req->pi_bssid[3], req->pi_bssid[4], req->pi_bssid[5],
+                    req->pi_enable);
+
+    status = wmi_setPmkid_cmd(ar->arWmi, req->pi_bssid, req->pi_pmkid,
+                              req->pi_enable);
+                              
+    if (status != A_OK) {
+        return -EIO;
+    }
+
+    return 0;
+}
+
+/*
+ * SIOCSIWRATE
+ */
+int
+ar6000_ioctl_siwrate(struct net_device *dev,
+            struct iw_request_info *info,
+            struct iw_param *rrq, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    A_UINT32  kbps;
+
+    if (rrq->fixed) {
+        kbps = rrq->value / 1000;           /* rrq->value is in bps */
+    } else {
+        kbps = -1;                          /* -1 indicates auto rate */
+    }
+    if(kbps != -1 && wmi_validate_bitrate(ar->arWmi, kbps) == A_EINVAL)
+    {
+        AR_DEBUG_PRINTF("BitRate is not Valid %d\n", kbps);
+        return -EINVAL;
+    }
+    ar->arBitRate = kbps;
+    if(ar->arWmiReady == TRUE)
+    {
+        if (wmi_set_bitrate_cmd(ar->arWmi, kbps) != A_OK) {
+            return -EINVAL;
+        }
+    }
+    return 0;
+}
+
+/*
+ * SIOCGIWRATE
+ */
+int
+ar6000_ioctl_giwrate(struct net_device *dev,
+            struct iw_request_info *info,
+            struct iw_param *rrq, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    int ret = 0;
+
+    if (down_interruptible(&ar->arSem)) {
+        return -ERESTARTSYS;
+    }
+    if(ar->arWmiReady == TRUE)
+    {
+        ar->arBitRate = 0xFFFF;
+        if (wmi_get_bitrate_cmd(ar->arWmi) != A_OK) {
+            up(&ar->arSem);
+            return -EIO;
+        }
+        wait_event_interruptible_timeout(arEvent, ar->arBitRate != 0xFFFF, wmitimeout * HZ);
+        if (signal_pending(current)) {
+            ret = -EINTR;
+        }
+    }
+    /* If the interface is down or wmi is not ready or the target is not
+       connected - return the value stored in the device structure */
+    if (!ret) {
+        if (ar->arBitRate == -1) {
+            rrq->fixed = TRUE;
+            rrq->value = 0;
+        } else {
+            rrq->value = ar->arBitRate * 1000;
+        }
+    }
+
+    up(&ar->arSem);
+
+    return ret;
+}
+
+/*
+ * SIOCSIWTXPOW
+ */
+static int
+ar6000_ioctl_siwtxpow(struct net_device *dev,
+             struct iw_request_info *info,
+             struct iw_param *rrq, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    A_UINT8 dbM;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    if (rrq->disabled) {
+        return -EOPNOTSUPP;
+    }
+
+    if (rrq->fixed) {
+        if (rrq->flags != IW_TXPOW_DBM) {
+            return -EOPNOTSUPP;
+        }
+        ar->arTxPwr= dbM = rrq->value;
+        ar->arTxPwrSet = TRUE;
+    } else {
+        ar->arTxPwr = dbM = 0;
+        ar->arTxPwrSet = FALSE;
+    }
+    if(ar->arWmiReady == TRUE)
+    {
+        AR_DEBUG_PRINTF("Set tx pwr cmd %d dbM\n", dbM);
+        wmi_set_txPwr_cmd(ar->arWmi, dbM);
+    }
+    return 0;
+}
+
+/*
+ * SIOCGIWTXPOW
+ */
+int
+ar6000_ioctl_giwtxpow(struct net_device *dev,
+            struct iw_request_info *info,
+            struct iw_param *rrq, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    int ret = 0;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    if (down_interruptible(&ar->arSem)) {
+        return -ERESTARTSYS;
+    }
+    if((ar->arWmiReady == TRUE) && (ar->arConnected == TRUE))
+    {
+        ar->arTxPwr = 0;
+
+        if (wmi_get_txPwr_cmd(ar->arWmi) != A_OK) {
+            up(&ar->arSem);
+            return -EIO;
+        }
+
+        wait_event_interruptible_timeout(arEvent, ar->arTxPwr != 0, wmitimeout * HZ);
+
+        if (signal_pending(current)) {
+            ret = -EINTR;
+         }
+    }
+   /* If the interace is down or wmi is not ready or target is not connected 
+      then return value stored in the device structure */
+
+    if (!ret) {
+         if (ar->arTxPwrSet == TRUE) {
+            rrq->fixed = TRUE;
+        }
+        rrq->value = ar->arTxPwr;
+        rrq->flags = IW_TXPOW_DBM;
+    }
+
+    up(&ar->arSem);
+
+    return ret;
+}
+
+/*
+ * SIOCSIWRETRY
+ * since iwconfig only provides us with one max retry value, we use it
+ * to apply to data frames of the BE traffic class.
+ */
+static int
+ar6000_ioctl_siwretry(struct net_device *dev,
+             struct iw_request_info *info,
+             struct iw_param *rrq, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    if (rrq->disabled) {
+        return -EOPNOTSUPP;
+    }
+
+    if ((rrq->flags & IW_RETRY_TYPE) != IW_RETRY_LIMIT) {
+        return -EOPNOTSUPP;
+    }
+
+    if ( !(rrq->value >= WMI_MIN_RETRIES) || !(rrq->value <= WMI_MAX_RETRIES)) {
+            return - EINVAL;
+    }
+    if(ar->arWmiReady == TRUE)
+    {
+        if (wmi_set_retry_limits_cmd(ar->arWmi, DATA_FRAMETYPE, WMM_AC_BE,
+                                     rrq->value, 0) != A_OK){
+            return -EINVAL;
+        }
+    }
+    ar->arMaxRetries = rrq->value;
+    return 0;
+}
+
+/*
+ * SIOCGIWRETRY
+ */
+static int
+ar6000_ioctl_giwretry(struct net_device *dev,
+             struct iw_request_info *info,
+             struct iw_param *rrq, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    rrq->disabled = 0;
+    switch (rrq->flags & IW_RETRY_TYPE) {
+    case IW_RETRY_LIFETIME:
+        return -EOPNOTSUPP;
+        break;
+    case IW_RETRY_LIMIT:
+        rrq->flags = IW_RETRY_LIMIT;
+        switch (rrq->flags & IW_RETRY_MODIFIER) {
+        case IW_RETRY_MIN:
+            rrq->flags |= IW_RETRY_MIN;
+            rrq->value = WMI_MIN_RETRIES;
+            break;
+        case IW_RETRY_MAX:
+            rrq->flags |= IW_RETRY_MAX;
+            rrq->value = ar->arMaxRetries;
+            break;
+        }
+        break;
+    }
+    return 0;
+}
+
+/*
+ * SIOCSIWENCODE
+ */
+static int
+ar6000_ioctl_siwencode(struct net_device *dev,
+              struct iw_request_info *info,
+              struct iw_point *erq, char *keybuf)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    int index;
+    A_INT32 auth = ar->arDot11AuthMode;
+    /*
+     *  Static WEP Keys should be configured before setting the SSID
+     */
+    if (ar->arSsidLen) {
+        return -EIO;
+    }
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    index = erq->flags & IW_ENCODE_INDEX;
+
+    if (index && (((index - 1) < WMI_MIN_KEY_INDEX) ||
+                  ((index - 1) > WMI_MAX_KEY_INDEX)))
+    {
+        return -EIO;
+    }
+
+    if (erq->flags & IW_ENCODE_DISABLED) {
+        /*
+         * Encryption disabled
+         */
+        if (index) {
+            /*
+             * If key index was specified then clear the specified key
+             */
+            index--;
+            A_MEMZERO(ar->arWepKeyList[index].arKey,
+                      sizeof(ar->arWepKeyList[index].arKey));
+            ar->arWepKeyList[index].arKeyLen = 0;
+        }
+        ar->arDot11AuthMode       = OPEN_AUTH;
+        ar->arPairwiseCrypto      = NONE_CRYPT;
+        ar->arGroupCrypto         = NONE_CRYPT;
+        ar->arAuthMode            = NONE_AUTH;
+    } else {
+        /*
+         * Enabling WEP encryption
+         */
+        if (index) {
+            index--;                /* keyindex is off base 1 in iwconfig */
+        }
+
+        if (erq->flags & IW_ENCODE_OPEN) {
+            auth = OPEN_AUTH;
+        } else if (erq->flags & IW_ENCODE_RESTRICTED) {
+            auth = SHARED_AUTH;
+        }
+
+        if (erq->length) {
+            if (!IEEE80211_IS_VALID_WEP_CIPHER_LEN(erq->length)) {
+                return -EIO;
+            }
+
+            A_MEMZERO(ar->arWepKeyList[index].arKey, 
+                      sizeof(ar->arWepKeyList[index].arKey));
+            A_MEMCPY(ar->arWepKeyList[index].arKey, keybuf, erq->length);
+            ar->arWepKeyList[index].arKeyLen = erq->length;
+        } else {
+            if (ar->arWepKeyList[index].arKeyLen == 0) {
+                return -EIO;
+            }
+            ar->arDefTxKeyIndex = index;
+        }
+
+        ar->arPairwiseCrypto      = WEP_CRYPT;
+        ar->arGroupCrypto         = WEP_CRYPT;
+        ar->arDot11AuthMode       = auth;
+        ar->arAuthMode            = NONE_AUTH;
+    }
+
+    /*
+     * profile has changed.  Erase ssid to signal change
+     */
+    A_MEMZERO(ar->arSsid, sizeof(ar->arSsid));
+
+    return 0;
+}
+
+static int
+ar6000_ioctl_giwencode(struct net_device *dev,
+              struct iw_request_info *info,
+              struct iw_point *erq, char *key)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    A_UINT8 keyIndex;
+    struct ar_wep_key *wk;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    if (ar->arPairwiseCrypto == NONE_CRYPT) {
+        erq->length = 0;
+        erq->flags = IW_ENCODE_DISABLED;
+    } else {
+        /* get the keyIndex */
+        keyIndex = erq->flags & IW_ENCODE_INDEX;
+        if (0 == keyIndex) {
+            keyIndex = ar->arDefTxKeyIndex;
+        } else if ((keyIndex - 1 < WMI_MIN_KEY_INDEX) || 
+                   (keyIndex - 1 > WMI_MAX_KEY_INDEX)) 
+        {
+            keyIndex = WMI_MIN_KEY_INDEX;
+        } else {
+            keyIndex--;
+        }
+        erq->flags = keyIndex + 1;
+        erq->flags |= IW_ENCODE_ENABLED;
+        wk = &ar->arWepKeyList[keyIndex];
+        if (erq->length > wk->arKeyLen) {
+            erq->length = wk->arKeyLen;
+        }
+        if (wk->arKeyLen) {
+            A_MEMCPY(key, wk->arKey, erq->length);
+        }
+        if (ar->arDot11AuthMode == OPEN_AUTH) {
+            erq->flags |= IW_ENCODE_OPEN;
+        } else if (ar->arDot11AuthMode == SHARED_AUTH) {
+            erq->flags |= IW_ENCODE_RESTRICTED;
+        }
+    }
+
+    return 0;
+}
+
+static int
+ar6000_ioctl_setparam(struct net_device *dev,
+                      struct iw_request_info *info,
+                      void *erq, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    int *i = (int *)extra;
+    int param = i[0];
+    int value = i[1];
+    int ret = 0;
+    A_BOOL profChanged = FALSE;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    switch (param) {
+        case IEEE80211_PARAM_WPA:
+            switch (value) {
+                case WPA_MODE_WPA1:
+                    ar->arAuthMode = WPA_AUTH;
+                    profChanged    = TRUE;
+                    break;
+                case WPA_MODE_WPA2:
+                    ar->arAuthMode = WPA2_AUTH;
+                    profChanged    = TRUE;
+                    break;            
+                case WPA_MODE_NONE:
+                    ar->arAuthMode = NONE_AUTH;
+                    profChanged    = TRUE;
+                    break;            
+            }
+            break;
+        case IEEE80211_PARAM_AUTHMODE:
+            switch(value) {
+                case IEEE80211_AUTH_WPA_PSK:
+                    if (WPA_AUTH == ar->arAuthMode) {
+                        ar->arAuthMode = WPA_PSK_AUTH;
+                        profChanged    = TRUE;
+                    } else if (WPA2_AUTH == ar->arAuthMode) {
+                        ar->arAuthMode = WPA2_PSK_AUTH;
+                        profChanged    = TRUE;
+                    } else {
+                        AR_DEBUG_PRINTF("Error -  Setting PSK mode when WPA "\
+                                        "param was set to %d\n", 
+                                        ar->arAuthMode);
+                        ret = -1;
+                    }
+                    break;
+                case IEEE80211_AUTH_WPA_CCKM:
+                    if (WPA2_AUTH == ar->arAuthMode) {
+                        ar->arAuthMode = WPA2_AUTH_CCKM;
+                    } else {
+                        ar->arAuthMode = WPA_AUTH_CCKM;
+                    }
+                    break;
+                default:
+                    break;
+            }
+            break;
+        case IEEE80211_PARAM_UCASTCIPHER:
+            switch (value) {
+                case IEEE80211_CIPHER_AES_CCM:
+                    ar->arPairwiseCrypto = AES_CRYPT;
+                    profChanged          = TRUE;
+                    break;
+                case IEEE80211_CIPHER_TKIP:
+                    ar->arPairwiseCrypto = TKIP_CRYPT;
+                    profChanged          = TRUE;
+                    break;
+                case IEEE80211_CIPHER_WEP:
+                    ar->arPairwiseCrypto = WEP_CRYPT;
+                    profChanged          = TRUE;
+                    break;
+                case IEEE80211_CIPHER_NONE:
+                    ar->arPairwiseCrypto = NONE_CRYPT;
+                    profChanged          = TRUE;
+                    break;
+            }
+            break;
+        case IEEE80211_PARAM_UCASTKEYLEN:
+            if (!IEEE80211_IS_VALID_WEP_CIPHER_LEN(value)) {
+                ret = -EIO;
+            } else {
+                ar->arPairwiseCryptoLen = value;
+            }
+            break;
+        case IEEE80211_PARAM_MCASTCIPHER:
+            switch (value) {
+                case IEEE80211_CIPHER_AES_CCM:
+                    ar->arGroupCrypto = AES_CRYPT;
+                    profChanged       = TRUE;
+                    break;
+                case IEEE80211_CIPHER_TKIP:
+                    ar->arGroupCrypto = TKIP_CRYPT;
+                    profChanged       = TRUE;
+                    break;
+                case IEEE80211_CIPHER_WEP:
+                    ar->arGroupCrypto = WEP_CRYPT;
+                    profChanged       = TRUE;
+                    break;
+                case IEEE80211_CIPHER_NONE:
+                    ar->arGroupCrypto = NONE_CRYPT;
+                    profChanged       = TRUE;
+                    break;
+            }
+            break;
+        case IEEE80211_PARAM_MCASTKEYLEN:
+            if (!IEEE80211_IS_VALID_WEP_CIPHER_LEN(value)) {
+                ret = -EIO;
+            } else {
+                ar->arGroupCryptoLen = value;
+            }
+            break;
+        case IEEE80211_PARAM_COUNTERMEASURES:
+            if (ar->arWmiReady == FALSE) {
+                return -EIO;
+            }
+            wmi_set_tkip_countermeasures_cmd(ar->arWmi, value);
+            break;
+        default:
+            break;
+    }
+
+    if (profChanged == TRUE) {
+        /*
+         * profile has changed.  Erase ssid to signal change
+         */
+        A_MEMZERO(ar->arSsid, sizeof(ar->arSsid));
+    }
+
+    return ret;
+}
+
+int
+ar6000_ioctl_getparam(struct net_device *dev, struct iw_request_info *info,
+            void *w, char *extra)
+{
+    return -EIO;            /* for now */
+}
+
+int
+ar6000_ioctl_setkey(struct net_device *dev, struct iw_request_info *info,
+             void *w, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    struct ieee80211req_key *ik = (struct ieee80211req_key *)extra;
+    KEY_USAGE keyUsage;
+    A_STATUS status;
+    CRYPTO_TYPE keyType = NONE_CRYPT;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    ar->user_saved_keys.keyOk = FALSE;
+
+    if ( 0 == memcmp(ik->ik_macaddr, "\x00\x00\x00\x00\x00\x00", 
+                     IEEE80211_ADDR_LEN)) {
+        keyUsage = GROUP_USAGE;
+        A_MEMCPY(&ar->user_saved_keys.bcast_ik, ik, 
+                 sizeof(struct ieee80211req_key));
+    } else {
+        keyUsage = PAIRWISE_USAGE;
+        A_MEMCPY(&ar->user_saved_keys.ucast_ik, ik, 
+                 sizeof(struct ieee80211req_key));
+    }
+
+    switch (ik->ik_type) {
+        case IEEE80211_CIPHER_WEP:
+            keyType = WEP_CRYPT;
+            break;
+        case IEEE80211_CIPHER_TKIP:
+            keyType = TKIP_CRYPT;
+            break;
+        case IEEE80211_CIPHER_AES_CCM:
+            keyType = AES_CRYPT;
+            break;
+        default:
+            break;
+    }
+    ar->user_saved_keys.keyType = keyType;
+
+    if (IEEE80211_CIPHER_CCKM_KRK != ik->ik_type) {
+        if (NONE_CRYPT == keyType) {
+            return -EIO;
+        }
+
+        status = wmi_addKey_cmd(ar->arWmi, ik->ik_keyix, keyType, keyUsage,
+                                ik->ik_keylen, (A_UINT8 *)&ik->ik_keyrsc,
+                                ik->ik_keydata, KEY_OP_INIT_VAL,
+                                SYNC_BEFORE_WMIFLAG);
+
+        if (status != A_OK) {
+            return -EIO;
+        }
+    } else {
+        status = wmi_add_krk_cmd(ar->arWmi, ik->ik_keydata);
+    }
+
+    ar->user_saved_keys.keyOk = TRUE;
+
+    return 0;
+}
+
+
+/*
+ * SIOCGIWNAME
+ */
+int
+ar6000_ioctl_giwname(struct net_device *dev,
+           struct iw_request_info *info,
+           char *name, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    switch (ar->arPhyCapability) {
+    case (WMI_11A_CAPABILITY):
+        strncpy(name, "AR6000 802.11a", IFNAMSIZ);
+        break;
+    case (WMI_11G_CAPABILITY):
+        strncpy(name, "AR6000 802.11g", IFNAMSIZ);
+        break;
+    case (WMI_11AG_CAPABILITY):
+        strncpy(name, "AR6000 802.11ag", IFNAMSIZ);
+        break;
+    default:
+        strncpy(name, "AR6000 802.11", IFNAMSIZ);
+        break;
+    }
+
+    return 0;
+}
+
+/*
+ * SIOCSIWFREQ
+ */
+int
+ar6000_ioctl_siwfreq(struct net_device *dev,
+            struct iw_request_info *info,
+            struct iw_freq *freq, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    /*
+     * We support limiting the channels via wmiconfig.
+     *
+     * We use this command to configure the channel hint for the connect cmd
+     * so it is possible the target will end up connecting to a different
+     * channel.
+     */
+    if (freq->e > 1) {
+        return -EINVAL;
+    } else if (freq->e == 1) {
+        ar->arChannelHint = freq->m / 100000;
+    } else {
+        ar->arChannelHint = wlan_ieee2freq(freq->m);
+    }
+
+    A_PRINTF("channel hint set to %d\n", ar->arChannelHint);
+    return 0;
+}
+
+/*
+ * SIOCGIWFREQ
+ */
+int
+ar6000_ioctl_giwfreq(struct net_device *dev,
+                struct iw_request_info *info,
+                struct iw_freq *freq, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    if (ar->arConnected != TRUE) {
+        return -EINVAL;
+    }
+
+    freq->m = ar->arBssChannel * 100000;
+    freq->e = 1;
+
+    return 0;
+}
+
+/*
+ * SIOCSIWMODE
+ */
+int
+ar6000_ioctl_siwmode(struct net_device *dev,
+            struct iw_request_info *info,
+            __u32 *mode, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    switch (*mode) {
+    case IW_MODE_INFRA:
+        ar->arNetworkType = INFRA_NETWORK;
+        break;
+    case IW_MODE_ADHOC:
+        ar->arNetworkType = ADHOC_NETWORK;
+        break;
+    default:
+        return -EINVAL;
+    }
+
+    return 0;
+}
+
+/*
+ * SIOCGIWMODE
+ */
+int
+ar6000_ioctl_giwmode(struct net_device *dev,
+            struct iw_request_info *info,
+            __u32 *mode, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    switch (ar->arNetworkType) {
+    case INFRA_NETWORK:
+        *mode = IW_MODE_INFRA;
+        break;
+    case ADHOC_NETWORK:
+        *mode = IW_MODE_ADHOC;
+        break;
+    default:
+        return -EIO;
+    }
+    return 0;
+}
+
+/*
+ * SIOCSIWSENS
+ */
+int
+ar6000_ioctl_siwsens(struct net_device *dev,
+            struct iw_request_info *info,
+            struct iw_param *sens, char *extra)
+{
+    return 0;
+}
+
+/*
+ * SIOCGIWSENS
+ */
+int
+ar6000_ioctl_giwsens(struct net_device *dev,
+            struct iw_request_info *info,
+            struct iw_param *sens, char *extra)
+{
+    sens->value = 0;
+    sens->fixed = 1;
+
+    return 0;
+}
+
+/*
+ * SIOCGIWRANGE
+ */
+int
+ar6000_ioctl_giwrange(struct net_device *dev,
+             struct iw_request_info *info,
+             struct iw_point *data, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    struct iw_range *range = (struct iw_range *) extra;
+    int i, ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    if (down_interruptible(&ar->arSem)) {
+        return -ERESTARTSYS;
+    }
+    ar->arNumChannels = -1;
+    A_MEMZERO(ar->arChannelList, sizeof (ar->arChannelList));
+
+    if (wmi_get_channelList_cmd(ar->arWmi) != A_OK) {
+        up(&ar->arSem);
+        return -EIO;
+    }
+
+    wait_event_interruptible_timeout(arEvent, ar->arNumChannels != -1, wmitimeout * HZ);
+
+    if (signal_pending(current)) {
+        up(&ar->arSem);
+        return -EINTR;
+    }
+
+    data->length = sizeof(struct iw_range);
+    A_MEMZERO(range, sizeof(struct iw_range));
+
+    range->txpower_capa = 0;
+
+    range->min_pmp = 1 * 1024;
+    range->max_pmp = 65535 * 1024;
+    range->min_pmt = 1 * 1024;
+    range->max_pmt = 1000 * 1024;
+    range->pmp_flags = IW_POWER_PERIOD;
+    range->pmt_flags = IW_POWER_TIMEOUT;
+    range->pm_capa = 0;
+
+    range->we_version_compiled = WIRELESS_EXT;
+    range->we_version_source = 13;
+
+    range->retry_capa = IW_RETRY_LIMIT;
+    range->retry_flags = IW_RETRY_LIMIT;
+    range->min_retry = 0;
+    range->max_retry = 255;
+
+    range->num_frequency = range->num_channels = ar->arNumChannels;
+    for (i = 0; i < ar->arNumChannels; i++) {
+        range->freq[i].i = wlan_freq2ieee(ar->arChannelList[i]);
+        range->freq[i].m = ar->arChannelList[i] * 100000;
+        range->freq[i].e = 1;
+         /*
+         * Linux supports max of 32 channels, bail out once you
+         * reach the max.
+         */
+        if (i == IW_MAX_FREQUENCIES) {
+            break;
+        }
+    }
+
+    /* Max quality is max field value minus noise floor */
+    range->max_qual.qual  = 0xff - 161;
+
+    /*
+     * In order to use dBm measurements, 'level' must be lower
+     * than any possible measurement (see iw_print_stats() in
+     * wireless tools).  It's unclear how this is meant to be
+     * done, but setting zero in these values forces dBm and
+     * the actual numbers are not used.
+     */
+    range->max_qual.level = 0;
+    range->max_qual.noise = 0;
+
+    range->sensitivity = 3;
+
+    range->max_encoding_tokens = 4;
+    /* XXX query driver to find out supported key sizes */
+    range->num_encoding_sizes = 3;
+    range->encoding_size[0] = 5;        /* 40-bit */
+    range->encoding_size[1] = 13;       /* 104-bit */
+    range->encoding_size[2] = 16;       /* 128-bit */
+
+    range->num_bitrates = 0;
+
+    /* estimated maximum TCP throughput values (bps) */
+    range->throughput = 22000000;
+
+    range->min_rts = 0;
+    range->max_rts = 2347;
+    range->min_frag = 256;
+    range->max_frag = 2346;
+
+    up(&ar->arSem);
+
+    return ret;
+}
+
+
+/*
+ * SIOCSIWAP
+ * This ioctl is used to set the desired bssid for the connect command.
+ */
+int
+ar6000_ioctl_siwap(struct net_device *dev,
+              struct iw_request_info *info,
+              struct sockaddr *ap_addr, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    if (ap_addr->sa_family != ARPHRD_ETHER) {
+        return -EIO;
+    }
+
+    if (A_MEMCMP(&ap_addr->sa_data, bcast_mac, AR6000_ETH_ADDR_LEN) == 0) {
+        A_MEMZERO(ar->arReqBssid, sizeof(ar->arReqBssid));
+    } else {
+        A_MEMCPY(ar->arReqBssid, &ap_addr->sa_data,  sizeof(ar->arReqBssid));
+    }
+
+    return 0;
+}
+
+/*
+ * SIOCGIWAP
+ */
+int
+ar6000_ioctl_giwap(struct net_device *dev,
+              struct iw_request_info *info,
+              struct sockaddr *ap_addr, char *extra)
+{
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    if (ar->arConnected != TRUE) {
+        return -EINVAL;
+    }
+
+    A_MEMCPY(&ap_addr->sa_data, ar->arBssid, sizeof(ar->arBssid));
+    ap_addr->sa_family = ARPHRD_ETHER;
+
+    return 0;
+}
+
+/*
+ * SIOCGIWAPLIST
+ */
+int
+ar6000_ioctl_iwaplist(struct net_device *dev,
+            struct iw_request_info *info,
+            struct iw_point *data, char *extra)
+{
+    return -EIO;            /* for now */
+}
+
+/*
+ * SIOCGIWSCAN
+ */
+int
+ar6000_ioctl_siwscan(struct net_device *dev,
+                     struct iw_request_info *info,
+                     struct iw_point *data, char *extra)
+{
+#define ACT_DWELLTIME_DEFAULT   105
+#define HOME_TXDRAIN_TIME       100
+#define SCAN_INT                HOME_TXDRAIN_TIME + ACT_DWELLTIME_DEFAULT
+    AR_SOFTC_T *ar = (AR_SOFTC_T *)dev->priv;
+    int ret = 0;
+
+    if (ar->arWmiReady == FALSE) {
+        return -EIO;
+    }
+
+    if (ar->arWlanState == WLAN_DISABLED) {
+        return -EIO;
+    }
+
+    if (wmi_startscan_cmd(ar->arWmi, WMI_LONG_SCAN, FALSE, FALSE, \
+                          HOME_TXDRAIN_TIME, SCAN_INT) != A_OK) {
+        ret = -EIO;
+    }
+
+    return ret;
+#undef  ACT_DWELLTIME_DEFAULT
+#undef HOME_TXDRAIN_TIME
+#undef SCAN_INT
+}
+
+
+/*
+ * Units are in db above the noise floor. That means the
+ * rssi values reported in the tx/rx descriptors in the
+ * driver are the SNR expressed in db.
+ *
+ * If you assume that the noise floor is -95, which is an
+ * excellent assumption 99.5 % of the time, then you can
+ * derive the absolute signal level (i.e. -95 + rssi). 
+ * There are some other slight factors to take into account
+ * depending on whether the rssi measurement is from 11b,
+ * 11g, or 11a.   These differences are at most 2db and
+ * can be documented.
+ *
+ * NB: various calculations are based on the orinoco/wavelan
+ *     drivers for compatibility
+ */
+static void
+ar6000_set_quality(struct iw_quality *iq, A_INT8 rssi)
+{
+    if (rssi < 0) {
+        iq->qual = 0;
+    } else {
+        iq->qual = rssi;
+    }
+
+    /* NB: max is 94 because noise is hardcoded to 161 */
+    if (iq->qual > 94)
+        iq->qual = 94;
+
+    iq->noise = 161;        /* -95dBm */
+    iq->level = iq->noise + iq->qual;
+    iq->updated = 7;
+}
+
+
+/* Structures to export the Wireless Handlers */
+static const iw_handler ath_handlers[] = {
+    (iw_handler) NULL,                          /* SIOCSIWCOMMIT */
+    (iw_handler) ar6000_ioctl_giwname,          /* SIOCGIWNAME */
+    (iw_handler) NULL,                          /* SIOCSIWNWID */
+    (iw_handler) NULL,                          /* SIOCGIWNWID */
+    (iw_handler) ar6000_ioctl_siwfreq,          /* SIOCSIWFREQ */
+    (iw_handler) ar6000_ioctl_giwfreq,          /* SIOCGIWFREQ */
+    (iw_handler) ar6000_ioctl_siwmode,          /* SIOCSIWMODE */
+    (iw_handler) ar6000_ioctl_giwmode,          /* SIOCGIWMODE */
+    (iw_handler) ar6000_ioctl_siwsens,          /* SIOCSIWSENS */
+    (iw_handler) ar6000_ioctl_giwsens,          /* SIOCGIWSENS */
+    (iw_handler) NULL /* not _used */,          /* SIOCSIWRANGE */
+    (iw_handler) ar6000_ioctl_giwrange,         /* SIOCGIWRANGE */
+    (iw_handler) NULL /* not used */,           /* SIOCSIWPRIV */
+    (iw_handler) NULL /* kernel code */,        /* SIOCGIWPRIV */
+    (iw_handler) NULL /* not used */,           /* SIOCSIWSTATS */
+    (iw_handler) NULL /* kernel code */,        /* SIOCGIWSTATS */
+    (iw_handler) NULL,                          /* SIOCSIWSPY */
+    (iw_handler) NULL,                          /* SIOCGIWSPY */
+    (iw_handler) NULL,                          /* SIOCSIWTHRSPY */
+    (iw_handler) NULL,                          /* SIOCGIWTHRSPY */
+    (iw_handler) ar6000_ioctl_siwap,            /* SIOCSIWAP */
+    (iw_handler) ar6000_ioctl_giwap,            /* SIOCGIWAP */
+    (iw_handler) NULL,                          /* -- hole -- */
+    (iw_handler) ar6000_ioctl_iwaplist,         /* SIOCGIWAPLIST */
+    (iw_handler) ar6000_ioctl_siwscan,          /* SIOCSIWSCAN */
+    (iw_handler) ar6000_ioctl_giwscan,          /* SIOCGIWSCAN */
+    (iw_handler) ar6000_ioctl_siwessid,         /* SIOCSIWESSID */
+    (iw_handler) ar6000_ioctl_giwessid,         /* SIOCGIWESSID */
+    (iw_handler) NULL,                          /* SIOCSIWNICKN */
+    (iw_handler) NULL,                          /* SIOCGIWNICKN */
+    (iw_handler) NULL,                          /* -- hole -- */
+    (iw_handler) NULL,                          /* -- hole -- */
+    (iw_handler) ar6000_ioctl_siwrate,          /* SIOCSIWRATE */
+    (iw_handler) ar6000_ioctl_giwrate,          /* SIOCGIWRATE */
+#ifdef NOTYET
+    (iw_handler) ar6000_ioctl_siwrts,           /* SIOCSIWRTS */
+    (iw_handler) ar6000_ioctl_giwrts,           /* SIOCGIWRTS */
+    (iw_handler) ar6000_ioctl_siwfrag,          /* SIOCSIWFRAG */
+    (iw_handler) ar6000_ioctl_giwfrag,          /* SIOCGIWFRAG */
+    (iw_handler) ar6000_ioctl_siwtxpow,         /* SIOCSIWTXPOW */
+    (iw_handler) ar6000_ioctl_giwtxpow,         /* SIOCGIWTXPOW */
+    (iw_handler) ar6000_ioctl_siwretry,         /* SIOCSIWRETRY */
+    (iw_handler) ar6000_ioctl_giwretry,         /* SIOCGIWRETRY */
+    (iw_handler) ar6000_ioctl_siwencode,        /* SIOCSIWENCODE */
+    (iw_handler) ar6000_ioctl_giwencode,        /* SIOCGIWENCODE */
+    (iw_handler) ar6000_ioctl_siwpower,         /* SIOCSIWPOWER */
+    (iw_handler) ar6000_ioctl_giwpower,         /* SIOCGIWPOWER */
+#else
+    (iw_handler) NULL,           /* SIOCSIWRTS */
+    (iw_handler) NULL,           /* SIOCGIWRTS */
+    (iw_handler) NULL,          /* SIOCSIWFRAG */
+    (iw_handler) NULL,          /* SIOCGIWFRAG */
+    (iw_handler) ar6000_ioctl_siwtxpow,         /* SIOCSIWTXPOW */
+    (iw_handler) ar6000_ioctl_giwtxpow,         /* SIOCGIWTXPOW */
+    (iw_handler) ar6000_ioctl_siwretry,         /* SIOCSIWRETRY */
+    (iw_handler) ar6000_ioctl_giwretry,         /* SIOCGIWRETRY */
+    (iw_handler) ar6000_ioctl_siwencode,        /* SIOCSIWENCODE */
+    (iw_handler) ar6000_ioctl_giwencode,        /* SIOCGIWENCODE */
+    (iw_handler) NULL,         /* SIOCSIWPOWER */
+    (iw_handler) NULL,         /* SIOCGIWPOWER */
+#endif  /* NOTYET */
+};
+
+static const iw_handler ath_priv_handlers[] = {
+    (iw_handler) ar6000_ioctl_setparam,         /* SIOCWFIRSTPRIV+0 */
+    (iw_handler) ar6000_ioctl_getparam,         /* SIOCWFIRSTPRIV+1 */
+    (iw_handler) ar6000_ioctl_setkey,           /* SIOCWFIRSTPRIV+2 */
+    (iw_handler) ar6000_ioctl_setwmmparams,     /* SIOCWFIRSTPRIV+3 */
+    (iw_handler) ar6000_ioctl_delkey,           /* SIOCWFIRSTPRIV+4 */
+    (iw_handler) ar6000_ioctl_getwmmparams,     /* SIOCWFIRSTPRIV+5 */
+    (iw_handler) NULL,                          /* SIOCWFIRSTPRIV+6 */
+    (iw_handler) NULL,                          /* SIOCWFIRSTPRIV+7 */
+    (iw_handler) ar6000_ioctl_addpmkid,         /* SIOCWFIRSTPRIV+8 */
+    (iw_handler) NULL,                          /* SIOCWFIRSTPRIV+9 */
+#ifdef NOT_YET
+    (iw_handler) ar6000_ioctl_setauthalg,       /* SIOCWFIRSTPRIV+10 */
+#endif
+};
+
+
+#ifdef __ATH_CENTRAL_IOCTL_DISPATCHER___
+/* Structures to export the Wireless Handlers */
+static const iw_handler ath_central_public_ioctl_handler[] = {
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWCOMMIT */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWNAME */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWNWID */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWNWID */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWFREQ */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWFREQ */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWMODE */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWMODE */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWSENS */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWSENS */
+    (iw_handler) ath_ioctl_dispatcher,          /* not _used */          /* SIOCSIWRANGE */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWRANGE */
+    (iw_handler) ath_ioctl_dispatcher,          /* not used */           /* SIOCSIWPRIV */
+    (iw_handler) ath_ioctl_dispatcher,          /* kernel code */        /* SIOCGIWPRIV */
+    (iw_handler) ath_ioctl_dispatcher,          /* not used */           /* SIOCSIWSTATS */
+    (iw_handler) ath_ioctl_dispatcher,          /* kernel code */        /* SIOCGIWSTATS */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWSPY */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWSPY */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWTHRSPY */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWTHRSPY */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWAP */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWAP */
+    (iw_handler) ath_ioctl_dispatcher,          /* -- hole -- */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWAPLIST */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWSCAN */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWSCAN */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWESSID */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWESSID */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWNICKN */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWNICKN */
+    (iw_handler) ath_ioctl_dispatcher,          /* -- hole -- */
+    (iw_handler) ath_ioctl_dispatcher,          /* -- hole -- */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWRATE */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWRATE */
+#ifdef NOTYET
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWRTS */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWRTS */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWFRAG */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWFRAG */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWTXPOW */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWTXPOW */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWRETRY */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWRETRY */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWENCODE */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWENCODE */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWPOWER */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWPOWER */
+#else
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWRTS */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWRTS */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWFRAG */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWFRAG */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWTXPOW */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWTXPOW */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWRETRY */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWRETRY */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWENCODE */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWENCODE */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCSIWPOWER */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCGIWPOWER */
+#endif  /* NOTYET */
+};
+
+static const iw_handler ath_central_priv_ioctl_handler[] = {
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCWFIRSTPRIV+0 */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCWFIRSTPRIV+1 */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCWFIRSTPRIV+2 */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCWFIRSTPRIV+3 */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCWFIRSTPRIV+4 */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCWFIRSTPRIV+5 */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCWFIRSTPRIV+6 */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCWFIRSTPRIV+7 */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCWFIRSTPRIV+8 */
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCWFIRSTPRIV+9 */
+#ifdef NOT_YET
+    (iw_handler) ath_ioctl_dispatcher,          /* SIOCWFIRSTPRIV+10 */
+#endif
+};
+
+#endif /* __ATH_CENTRAL_IOCTL_DISPATCHER___ */
+
+
+#define IW_PRIV_TYPE_KEY \
+    (IW_PRIV_TYPE_BYTE | sizeof(struct ieee80211req_key))
+#define IW_PRIV_TYPE_DELKEY \
+    (IW_PRIV_TYPE_BYTE | sizeof(struct ieee80211req_del_key))
+#define IW_PRIV_TYPE_MLME \
+    (IW_PRIV_TYPE_BYTE | sizeof(struct ieee80211req_mlme))
+#define IW_PRIV_TYPE_ADDPMKID \
+    (IW_PRIV_TYPE_BYTE | sizeof(struct ieee80211req_addpmkid))
+
+static const struct iw_priv_args ar6000_priv_args[] = {
+    { IEEE80211_IOCTL_SETKEY,
+      IW_PRIV_TYPE_KEY | IW_PRIV_SIZE_FIXED, 0,       "setkey"},
+    { IEEE80211_IOCTL_DELKEY,
+      IW_PRIV_TYPE_DELKEY | IW_PRIV_SIZE_FIXED, 0,    "delkey"},
+    { IEEE80211_IOCTL_SETPARAM,
+      IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0,   "setparam"},
+    { IEEE80211_IOCTL_GETPARAM,
+      IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
+      IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,      "getparam"},
+    { IEEE80211_IOCTL_SETWMMPARAMS,
+      IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 4, 0,   "setwmmparams"},
+    { IEEE80211_IOCTL_GETWMMPARAMS,
+      IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 3,
+      IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,      "getwmmparams"},
+    { IEEE80211_IOCTL_ADDPMKID,
+      IW_PRIV_TYPE_ADDPMKID | IW_PRIV_SIZE_FIXED, 0,  "addpmkid"},
+};
+
+void ar6000_ioctl_iwsetup(struct iw_handler_def *def)
+{
+#define N(a) (sizeof(a) / sizeof(a[0]))
+    def->private_args = (struct iw_priv_args *)ar6000_priv_args;
+    def->num_private_args = N(ar6000_priv_args);
+#undef N
+}
+
+struct iw_handler_def ath_iw_handler_def = {
+#define N(a) (sizeof (a) / sizeof (a[0]))
+#ifdef  __ATH_CENTRAL_IOCTL_DISPATCHER___ 
+    .standard         = (iw_handler *)ath_central_public_ioctl_handler,
+    .num_standard     = N(ath_central_public_ioctl_handler),
+    .private          = (iw_handler *)ath_central_priv_ioctl_handler,
+    .num_private      = N(ath_central_priv_ioctl_handler),
+#else
+    .standard         = (iw_handler *)ath_handlers,
+    .num_standard     = N(ath_handlers),
+    .private          = (iw_handler *)ath_priv_handlers,
+    .num_private      = N(ath_priv_handlers),
+#endif /* __ATH_CENTRAL_IOCTL_DISPATCHER___ */
+#undef N
+};
+
+#ifdef __ATH_CENTRAL_IOCTL_DISPATCHER___
+/* When this function is required on some platform other IBM-PC, 
+ * porting is required for that platform
+ */
+void
+ath_external_trigger(int val)
+{
+#ifdef CONFIG_X86
+    unsigned short iobase = 0x3f8; /* COM1 */
+    unsigned short offset = 0x4;   /* Modem Control Register */
+    unsigned char reg = 0;
+    
+    if (!allow_trace_signal) {
+            /* the setting of DTR can actually affect some terminal console programs (like TeraTerm)
+             * provide a way to bypass this incase this is on by default */
+        return;    
+    }
+    
+    /* Bit 0 is DTR. Drive DTR */
+    reg |= (val) ? 0x1 : 0;
+    
+    outb(reg, iobase+offset);
+#endif  /* CONFIG_X86 */
+}
+
+static int
+ath_ioctl_dispatcher(struct net_device *dev,
+              struct iw_request_info *info,
+              struct iw_point *erq, char *key)
+{
+    unsigned int index;
+    int ret = -EOPNOTSUPP;
+    const iw_handler *handlers;
+
+    if (info->cmd >= SIOCIWFIRSTPRIV && info->cmd <= SIOCIWLASTPRIV) {
+        handlers = ath_priv_handlers;
+        index = info->cmd - SIOCIWFIRSTPRIV;
+    } else {
+        handlers = ath_handlers;
+        index = info->cmd - SIOCIWFIRST;
+    }
+
+    if (handlers[index]) {
+        ath_external_trigger(1);
+        ret =  (handlers[index](dev, info, (union iwreq_data *)erq, key));
+        if (allow_trace_signal) {
+            /* Add some (fixed) delay for scope viewing */
+            udelay(5000);
+        }
+        ath_external_trigger(0);
+    }
+
+    return ret;
+}
+#endif /* __ATH_CENTRAL_IOCTL_DISPATCHER___ */
+
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/armfnld.scr
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/armfnld.scr	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/armfnld.scr	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,21 @@
+#!/bin/sh
+#create the sdio function driver nodes
+#uses development directory structure
+function="sdiofn0"
+mode="664"
+
+# remove stale nodes
+busybox rm -f /dev/$(function)
+
+#major=`awk "\\$2==\"sdiofn\" {print \\$1}" /proc/devices`
+major=`sed -n -e 's,\([0-9]\) sdiofn,\1,p' /proc/devices`
+busybox echo Function major:$major
+busybox mknod /dev/$(function) c $major 0
+  
+# give appropriate group/permissions, and change the group.
+# Not all distributions have staff; some have "wheel" instead.
+group="staff"
+busybox grep '^staff:' /etc/group > /dev/null || group="wheel"
+
+busybox chgrp $group /dev/$(function)
+busybox chmod $mode /dev/$(function)

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/armld.scr
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/armld.scr	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/armld.scr	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,30 @@
+#!/bin/sh
+#load sdio stack on local machine
+#uses current directory
+
+modulehcd="../src/hcd/pxa255/sdio_pxa255hcd"
+modulebus="../src/busdriver/sdio_busdriver"
+modulefunction="../src/function/generic/sdio_generic_fd"
+device="sdiobd0"
+mode="664"
+
+# invoke insmod with all arguments we were passed
+# and use a pathname, as newer modutils don't look in . by default
+./insmod -f $modulebus.ko $* || exit 1
+./insmod -f $modulehcd.ko $* || exit 1
+./insmod -f $modulefunction.ko $* || exit 1
+
+# remove stale nodes
+rm -f /dev/${device}
+
+#major=`awk "\\$2==\"$device\" {print \\$1}" /proc/devices`
+major=`sed -n -e 's,\([0-9]\) sdiobd,\1,p' /proc/devices`
+busybox echo Busdriver major:$major
+busybox mknod /dev/${device} c $major 0
+
+# give appropriate group/permissions, and change the group.
+group="staff"
+busybox grep '^staff:' /etc/group > /dev/null || group="wheel"
+
+busybox chgrp $group /dev/${device}
+busybox chmod $mode /dev/${device}

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/armload.txt
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/armload.txt	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/armload.txt	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,32 @@
+Put onto the mmc card:
+insmod
+rmmod
+lsmod
+sdio_busdriver.ko
+sdio_local_bus.ko
+sdio_generic_function.ko
+bdtest
+armld.scr
+armunld.scr
+armfnld.scr
+
+
+Boot the system, log in and switch to
+#cd /mnt/mmc
+Load the modules using
+#./armld.scr
+You should get a few messages, like the major number displayed. 
+To debug messages use:
+#dmesg
+You'll get lots of debug, with our stuff at the end. You can use this at anytime.
+To force a card inseration, you can use the test application. 
+This will send IOCTL to the local bus driver telling it to announce the arrival of a certain card.
+The bus driver will then look for a function driver and find sdio_generic_functiom has refistered for this card.
+The bus driver will call the function drivers probe. This function will acept the card.
+#bdtest -i
+
+Do a dmesg and you'll see what went on.
+
+This should give you enough to excercise the infrastructure.
+
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/armunld.scr
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/armunld.scr	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/armunld.scr	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,12 @@
+#!/bin/sh
+#unload sdio stack on local machine
+#uses current directory 
+modulehcd="../src/hcd/pxa255/sdio_pxa255hcd"
+modulebus="../src/busdriver/sdio_busdriver"
+modulefunction="../src/function/generic/sdio_generic_fd"
+
+
+./rmmod $modulefunction.ko 
+./rmmod $modulehcd.ko 
+./rmmod $modulebus.ko 
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/bldemsdio.scr
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/bldemsdio.scr	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/bldemsdio.scr	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,352 @@
+#!/bin/sh
+# automated build scripts for EMSDIO
+#  bldemsdio [output path] [cvs branch rev] [image base name] [optional platform name]
+# Example:
+#    ./bldemsdio /usr/dev/builds HEAD EMSDIO
+#                  - or -
+#    ./bldemsdio /usr/dev/builds HEAD EMSDIO LOCAL_X86
+#
+#  The output path (/usr/local/emsdio_builds) must contain the following directories:
+#         drops/     - assembled PDK and HDK 
+#         install/   - final tar'd and zipped PDK and HDK
+#         scratch/   - temp location for source
+#  
+#  The 3rd argument is the image directory name that will appear on the user's machine
+#  for example EMSDIO/ is typicall used.
+#
+#  Copyright 2004-2006 Atheros Communications, Inc.
+#
+
+split_date()
+{
+	## Assign defaults when no variable names are given on the command line
+	sd_1=${2:-SD_YEAR}
+	sd_2=${3:-SD_MONTH}
+	sd_3=${4:-SD_DAY}
+	oldIFS=$IFS ## save current value of field separator
+	IFS='-/. $TAB$NL' ## new value allows date to be supplied in other formats
+		set -- $1 ## place the date into the positional parameters
+	IFS=$oldIFS ## restore IFS
+	[ $# -lt 3 ] && return 1 ## The date must have 3 fields
+	## Remove leading zeroes and assign to variables
+	eval "$sd_1=\"${1#0}\" $sd_2=\"${2#0}\" $sd_3=\"${3#0}\""
+}
+
+date2julian()
+{
+    split_date `date +%Y-%m-%d` d2j_year d2j_month d2j_day || return 2
+	## Since leap years add a day at the end of February,
+	## calculations are done from 1 March 0000 (a fictional year)
+	d2j_tmpmonth=$((12 * $d2j_year + $d2j_month - 3))
+	## If it is not yet March, the year is changed to the previous year
+	d2j_tmpyear=$(( $d2j_tmpmonth / 12))
+	## The number of days from 1 March 0000 is calculated
+	## and the number of days from 1 Jan. 4713BC is added
+	_DATE2JULIAN=$((
+		(734 * $d2j_tmpmonth + 15) / 24 - 2 * $d2j_tmpyear + $d2j_tmpyear/4
+		- $d2j_tmpyear/100 + $d2j_tmpyear/400 + $d2j_day + 1721119 ))
+}
+
+
+SOURCE_BASE_PATH=$1/scratch/$2
+DROP_BASE_PATH=$1/drops
+OUTPUT_BASE_PATH=$DROP_BASE_PATH/$2
+BRANCH_LEVEL=$2
+IMAGE_OUT_PDK=$3_PDK
+IMAGE_OUT_HDK=$3_HDK
+mext=ko
+INSTALL_LOCATION=$1/install
+
+if [ -z "$1" ]; then
+	echo "missing build path"
+	exit
+fi
+
+if [ -z "$2" ]; then
+	echo "CVS branch"
+	exit
+fi
+
+if [ -z "$3" ]; then
+	echo "missing image dir"
+	exit
+fi
+
+BASE_IN_FILES_DIR=$SOURCE_BASE_PATH/EMSDIO
+BASE_IN_SRC_DIR=$SOURCE_BASE_PATH/EMSDIO/src
+BASE_OUT_HDK_FILE_DIR=$OUTPUT_BASE_PATH/HDK/$IMAGE_OUT_HDK
+BASE_OUT_PDK_FILE_DIR=$OUTPUT_BASE_PATH/PDK/$IMAGE_OUT_PDK
+BASE_OUT_HDK_SRC_DIR=$BASE_OUT_HDK_FILE_DIR/src
+BASE_OUT_PDK_SRC_DIR=$BASE_OUT_PDK_FILE_DIR/src
+BASE_OUT_ADDON_FILE_DIR=$OUTPUT_BASE_PATH/ADDON
+
+export CVSROOT=seungyi at codetserv:/usr/local/cvsroot
+
+cleanup() {
+	if [ -d $SOURCE_BASE_PATH ]; then
+		echo cleaning up $SOURCE_BASE_PATH ...
+		rm -f -r $SOURCE_BASE_PATH
+#		rmdir $1
+	fi
+	if [ -d $OUTPUT_BASE_PATH ]; then
+		echo cleaning up $OUTPUT_BASE_PATH ....
+		rm -f -r $OUTPUT_BASE_PATH
+#		rmdir $2
+	fi
+
+}
+
+getcvsdir() {
+	cvs -Q -d :pserver:$CVSROOT export -r $BRANCH_LEVEL EMSDIO/$1
+}
+
+copysrccode_linux() {
+  mkdir --parents $2/$1/linux
+  cp  -r $BASE_IN_SRC_DIR/$1/linux $2/$1
+  cp  $BASE_IN_SRC_DIR/$1/*   $2/$1
+}
+
+setupcommonstuff()
+{
+  copysrccode_linux include $1
+  copysrccode_linux function/bluetooth $1
+  copysrccode_linux function/sample $1
+  cp $BASE_IN_SRC_DIR/function/Makefile    $1/function
+  cp $BASE_IN_SRC_DIR/Makefile $1
+  cp $BASE_IN_SRC_DIR/localmake.linux.inc $1
+  cp $BASE_IN_FILES_DIR/scripts/loadsdiosample.scr  $2
+  cp $BASE_IN_FILES_DIR/scripts/makesdiosampledev.scr  $2
+  cp $BASE_IN_FILES_DIR/doc/readme.txt $2
+  cp $BASE_IN_FILES_DIR/doc/addon_readme.txt $2
+}
+
+setupHDKsrc() {
+   setupcommonstuff $BASE_OUT_HDK_SRC_DIR $BASE_OUT_HDK_FILE_DIR 
+   rm -f $BASE_OUT_HDK_SRC_DIR/include/sdio_hcd_defs_pdk.h
+   copysrccode_linux hcd/pci_ellen $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux hcd/stdhost  $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux hcd/pxa255   $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux hcd/pxa270   $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux hcd/omap     $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux hcd/mx21     $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux hcd/omap_2420  $BASE_OUT_HDK_SRC_DIR
+   cp $BASE_IN_SRC_DIR/hcd/Makefile $BASE_OUT_HDK_SRC_DIR/hcd
+   cp $BASE_IN_FILES_DIR/scripts/build.scr.hdk    $BASE_OUT_HDK_SRC_DIR/build.scr
+   pushd .   
+   cd $BASE_OUT_HDK_FILE_DIR
+   if [ -f $DROP_BASE_PATH/OVERRIDES/help_hdk.tar  ]; then
+       tar -xf $DROP_BASE_PATH/OVERRIDES/help_hdk.tar 
+   else 
+       tar -xf $BASE_IN_FILES_DIR/doc/Help-PostProcessed/help_hdk.tar 
+   fi
+   
+   popd
+   chmod 777 -R $BASE_OUT_HDK_FILE_DIR/doc
+}
+
+setupPDKsrc() {
+   setupcommonstuff $BASE_OUT_PDK_SRC_DIR $BASE_OUT_PDK_FILE_DIR 
+   rm -f $BASE_OUT_PDK_SRC_DIR/include/sdio_hcd_defs.h
+   mv $BASE_OUT_PDK_SRC_DIR/include/sdio_hcd_defs_pdk.h $BASE_OUT_PDK_SRC_DIR/include/sdio_hcd_defs.h
+   cp $BASE_IN_FILES_DIR/scripts/build.scr.pdk    $BASE_OUT_PDK_SRC_DIR/build.scr
+   pushd .
+   cd $BASE_OUT_PDK_FILE_DIR
+   if [ -f $DROP_BASE_PATH/OVERRIDES/help_pdk.tar   ]; then
+        tar -xf $DROP_BASE_PATH/OVERRIDES/help_pdk.tar 
+   else 
+        tar -xf $BASE_IN_FILES_DIR/doc/Help-PostProcessed/help_pdk.tar 
+   fi
+   
+   popd
+   chmod 777 -R $BASE_OUT_PDK_FILE_DIR/doc
+}
+
+preparedirectories() { 
+	echo preparing directories...
+	mkdir $SOURCE_BASE_PATH
+	mkdir $OUTPUT_BASE_PATH
+	mkdir --parents $BASE_OUT_HDK_FILE_DIR/modules
+    mkdir --parents $BASE_OUT_HDK_FILE_DIR/doc
+	mkdir --parents $BASE_OUT_PDK_FILE_DIR/modules
+    mkdir --parents $BASE_OUT_PDK_FILE_DIR/doc
+    mkdir --parents $BASE_OUT_ADDON_FILE_DIR
+	echo getting source from cvs..
+	pushd .
+	cd $SOURCE_BASE_PATH
+	cvs -d :pserver:$CVSROOT login
+	getcvsdir src
+	getcvsdir doc
+	getcvsdir scripts
+	setupPDKsrc
+	setupHDKsrc
+	if [ -f $DROP_BASE_PATH/OVERRIDES/localmake.linux.inc ]; then
+	    echo overriding makefile includes .....
+        cp -f $DROP_BASE_PATH/OVERRIDES/localmake.linux.inc $BASE_OUT_PDK_FILE_DIR/src
+        cp -f $DROP_BASE_PATH/OVERRIDES/localmake.linux.inc $BASE_OUT_HDK_FILE_DIR/src
+    fi
+	popd
+}
+
+createmodulespath() {
+	mkdir --parents $BASE_OUT_HDK_FILE_DIR/modules/$1
+	mkdir --parents $BASE_OUT_PDK_FILE_DIR/modules/$1
+}
+
+build_apps() {
+	pushd .
+	rm -f $4/testcmd
+	rm -f $3src/function/sample/linux/testapp/testcmd
+	cd $3/src/function/sample/linux/testapp
+	make
+	cp -v $3/src/function/sample/linux/testapp/testcmd $4/testcmd
+	popd
+}
+
+build_modules() {
+    createmodulespath $3
+	pushd . 
+	cd $BASE_IN_SRC_DIR
+	make ALL_BUILD=1 CT_OS_TYPE=linux CT_BUILD_TYPE=$1 CT_CPU_EXTENSION=$2 clean 
+	make ALL_BUILD=1 CT_OS_TYPE=linux CT_BUILD_TYPE=$1 CT_CPU_EXTENSION=$2 default CT_SRC_BASE=$BASE_IN_SRC_DIR
+	getmodulesbits $BASE_IN_SRC_DIR $BASE_OUT_PDK_FILE_DIR/modules/$3
+    getmodulesbits $BASE_IN_SRC_DIR $BASE_OUT_HDK_FILE_DIR/modules/$3
+    #make ALL_BUILD=1 CT_OS_TYPE=linux CT_BUILD_TYPE=$1 CT_CPU_EXTENSION=$2 clean 
+	popd
+}
+
+checkandcopy()
+{
+  if [ -f $1/$2/$3 ]; then
+	 cp -v $1/$2/$3 $4/$3
+     if [ -f $1/$2/$2_readme.txt ]; then
+          cp -v $1/$2/$2_readme.txt $4/$2_readme.txt
+     fi
+  fi  
+}
+ 
+getmodulesbits() {	
+    checkandcopy $1          busdriver sdio_busdriver.$mext    $2
+	checkandcopy $1          lib       sdio_lib.$mext          $2
+	checkandcopy $1/function bluetooth sdio_bluetooth_fd.$mext $2
+	checkandcopy $1/function memory    sdio_memory_fd.$mext    $2
+	checkandcopy $1/function gps       sdio_gps_fd.$mext       $2
+	checkandcopy $1/function sample    sdio_sample_fd.$mext    $2
+	
+    checkandcopy $1/hcd pci_ellen    sdio_pciellen_hcd.$mext $2
+    checkandcopy $1/hcd pci_std      sdio_pcistd_hcd.$mext   $2
+	checkandcopy $1/hcd pxa255       sdio_pxa255hcd.$mext    $2
+    checkandcopy $1/hcd pxa270       sdio_pxa270hcd.$mext    $2
+	checkandcopy $1/hcd omap_raw_spi sdio_omap_raw_spi_hcd.$mext $2
+    checkandcopy $1/hcd omap         sdio_omap_hcd.$mext     $2
+    checkandcopy $1/hcd mx21         sdio_mx21_hcd.$mext     $2
+    checkandcopy $1/hcd omap_2420    sdio_omap_hcd.$mext     $2
+}
+
+
+outputarchive()
+{
+pushd .
+cd $1
+cd ..
+tar -cf $3.tar $2
+gzip $3.tar
+popd
+}
+ 
+buildkit()
+{
+mext=ko
+case $1 in
+    LOCAL_i686)  
+	build_modules LOCAL_i686  i686   FC3/i686
+    ;;
+    LOCAL_i586) 
+	build_modules LOCAL_i586  i586   FC3/i586  
+    ;;
+    LOCAL_i686_ATHEROS) 
+	build_modules LOCAL_i686_ATHEROS  i686   FC3-ATH/i686
+    ;;
+    GUMSTIX_ARM)
+	build_modules GUMSTIX_ARM     xscale  GUMSTIX_2.6.9/pxa255
+    ;;
+    OMAP1610_ARM)
+    build_modules OMAP1610_ARM    arm     OMAP_2.6.9/1610H2
+    ;;
+    MV_OMAP5912_ATHEROS)
+    mext=o
+    build_modules MV_OMAP5912_ATHEROS arm     OMAP_2.4.20/5912
+    ;;
+    MV_OMAP5912_ARM)
+    mext=o
+    build_modules MV_OMAP5912_ARM arm     OMAP_2.4.20/5912
+    ;;
+    MV_OMAP1610_ARM) 
+    mext=o
+    build_modules MV_OMAP1610_ARM arm    OMAP_2.4.20/1610H2 
+    ;;
+    SANDGATEII_ARM)
+    build_modules SANDGATEII_ARM  arm    SANDGATE_IIP_2.6.9/pxa270
+    ;;
+    MX21_ARM)
+    mext=o
+    MX21_MODULE_PATH=iMX21ADS_2.4.20/mx21
+    build_modules MX21_ARM  arm  $MX21_MODULE_PATH
+    ;;
+    OMAP2420_ARM)
+    mext=ko
+    OMAP2420_MODULE_PATH=OMAP_2.6.10/2420
+    build_modules OMAP2420_ARM  arm  $OMAP2420_MODULE_PATH
+    ;;
+    *)
+    echo "Invalid build type" 
+    exit
+    ;;
+esac
+}
+
+
+###########################################################################################
+### stuff starts to happen below this line
+#########################################################################################
+date2julian
+echo $_DATE2JULIAN
+cleanup 
+
+PDK_TAR=$INSTALL_LOCATION/EMSDIO_PDK.$BRANCH_LEVEL.$_DATE2JULIAN
+HDK_TAR=$INSTALL_LOCATION/EMSDIO_HDK.$BRANCH_LEVEL.$_DATE2JULIAN
+
+rm -f $PDK_TAR.*
+rm -f $HDK_TAR.*          
+preparedirectories 
+
+
+# special platforms:  
+#     LOCAL_i686_ATHEROS  - Atheros locked HDK 
+if [ -n "$4" ]; then
+	echo "Building Special Platform"
+	buildkit $4
+	   # output the kit archives
+    outputarchive $BASE_OUT_PDK_FILE_DIR $IMAGE_OUT_PDK $PDK_TAR
+    outputarchive $BASE_OUT_HDK_FILE_DIR $IMAGE_OUT_HDK $HDK_TAR
+    exit
+fi
+
+if [ -z "$4" ]; then
+	echo "Building Standard Kits"	
+    for PLAT in LOCAL_i686 LOCAL_i586 GUMSTIX_ARM MV_OMAP1610_ARM OMAP1610_ARM SANDGATEII_ARM MX21_ARM
+    do
+        buildkit $PLAT
+    done
+    
+    # output the standard kit archives
+    outputarchive $BASE_OUT_PDK_FILE_DIR $IMAGE_OUT_PDK $PDK_TAR
+    outputarchive $BASE_OUT_HDK_FILE_DIR $IMAGE_OUT_HDK $HDK_TAR
+    exit
+fi
+
+
+
+#build_apps    LOCAL_X86 i686 $SOURCE_BASE_PATH $OUTPUT_BASE_PATH/bin/x86
+
+ 
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/build.scr.all
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/build.scr.all	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/build.scr.all	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,29 @@
+#!/bin/sh
+# build the linux SDIO stack and optionally a user supplied directory
+# Usage:
+#        ./build.scr.all [make target] [build type] [optional "project path"]
+#
+# Arguments: 
+#        make target  : "default" or "clean"
+#        build type   : LOCAL_i686, LOCAL_i586, GUMSTIX_ARM  etc...
+#        project path : optional path to compile user created host or 
+#                       function drivers
+#
+# Example:
+#        /build.scr.all default LOCAL_i686 $HOME/SDIOProjects/MySDIODriver
+#
+# If [project path] is ommitted the build operation will build sample drivers only
+
+if [ -z "$1" ]; then
+	echo "missing make target, must be 'default' or 'clean' "
+	exit
+fi
+
+if [ -z "$2" ]; then
+	echo "missing build type, see localmake.linux.inc for valid types"
+	exit
+fi
+
+make ALL_BUILD=1 CT_OS_TYPE=linux CT_BUILD_TYPE=$2 CT_BUILD_SUB_PROJ=$3 CT_SRC_BASE=$PWD $1
+
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/build.scr.hdk
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/build.scr.hdk	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/build.scr.hdk	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,29 @@
+#!/bin/sh
+# build the linux SDIO HDK sample drivers and optionally a user supplied directory
+# Usage:
+#        ./build.scr [make target] [build type] [optional "project path"]
+#
+# Arguments: 
+#        make target  : "default" or "clean"
+#        build type   : LOCAL_i686, LOCAL_i586, GUMSTIX_ARM  etc...
+#        project path : optional path to compile user created host or 
+#                       function drivers
+#
+# Example:
+#        /build.scr default LOCAL_i686 $HOME/SDIOProjects/MySDIODriver
+#
+# If [project path] is ommitted the build operation will build sample drivers only
+
+if [ -z "$1" ]; then
+	echo "missing make target, must be 'default' or 'clean' "
+	exit
+fi
+
+if [ -z "$2" ]; then
+	echo "missing build type, see localmake.linux.inc for valid types"
+	exit
+fi
+
+make HDK_BUILD=1 CT_OS_TYPE=linux CT_BUILD_TYPE=$2 CT_BUILD_SUB_PROJ=$3 CT_SRC_BASE=$PWD $1
+
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/build.scr.pdk
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/build.scr.pdk	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/build.scr.pdk	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,28 @@
+#!/bin/sh
+# build the linux SDIO HDK sample drivers and optionally a user supplied directory
+# Usage:
+#        ./build.scr [make target] [build type] [optional "project path"]
+#
+# Arguments: 
+#        make target  : "default" or "clean"
+#        build type   : LOCAL_i686, LOCAL_i586, GUMSTIX_ARM  etc...
+#        project path : optional path to compile user created host or 
+#                       function drivers
+#
+# Example:
+#        /build.scr default LOCAL_i686 $HOME/SDIOProjects/MySDIODriver
+#
+# If [project path] is ommitted the build operation will build sample drivers only
+
+if [ -z "$1" ]; then
+	echo "missing make target, must be 'default' or 'clean' "
+	exit
+fi
+
+if [ -z "$2" ]; then
+	echo "missing build type, see localmake.linux.inc for valid types"
+	exit
+fi
+
+make PDK_BUILD=1 CT_OS_TYPE=linux CT_BUILD_TYPE=$2 CT_BUILD_SUB_PROJ=$3 CT_SRC_BASE=$PWD $1
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/getobjects.scr
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/getobjects.scr	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/getobjects.scr	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,40 @@
+#!/bin/sh
+#  
+#  script to collect linux binary modules
+#  Copyright 2004-2006 Atheros Communications, Inc.
+#
+
+SOURCE_BASE_PATH=$1
+OUTPUT_BASE_PATH=$2
+mext=$3
+
+checkandcopy()
+{
+  if [ -f $1/$2/$3 ]; then
+	 cp -f -v $1/$2/$3 $4/$3
+     if [ -f $1/$2/$2_readme.txt ]; then
+          cp -f -v $1/$2/$2_readme.txt $4/$2_readme.txt
+     fi
+  fi  
+}
+
+checkandcopy $SOURCE_BASE_PATH          busdriver sdio_busdriver.$mext    $OUTPUT_BASE_PATH
+checkandcopy $SOURCE_BASE_PATH          lib       sdio_lib.$mext          $OUTPUT_BASE_PATH
+checkandcopy $SOURCE_BASE_PATH/function bluetooth sdio_bluetooth_fd.$mext $OUTPUT_BASE_PATH
+checkandcopy $SOURCE_BASE_PATH/function memory    sdio_memory_fd.$mext    $OUTPUT_BASE_PATH
+checkandcopy $SOURCE_BASE_PATH/function gps       sdio_gps_fd.$mext       $OUTPUT_BASE_PATH
+checkandcopy $SOURCE_BASE_PATH/function sample    sdio_sample_fd.$mext    $OUTPUT_BASE_PATH
+checkandcopy $SOURCE_BASE_PATH/function bench     sdio_bench_fd.$mext    $OUTPUT_BASE_PATH
+checkandcopy $SOURCE_BASE_PATH/hcd pci_ellen    sdio_pciellen_hcd.$mext $OUTPUT_BASE_PATH
+checkandcopy $SOURCE_BASE_PATH/hcd pci_std      sdio_pcistd_hcd.$mext   $OUTPUT_BASE_PATH
+checkandcopy $SOURCE_BASE_PATH/hcd pxa255       sdio_pxa255hcd.$mext    $OUTPUT_BASE_PATH
+checkandcopy $SOURCE_BASE_PATH/hcd pxa270       sdio_pxa270hcd.$mext    $OUTPUT_BASE_PATH
+checkandcopy $SOURCE_BASE_PATH/hcd omap_raw_spi sdio_omap_raw_spi_hcd.$mext $OUTPUT_BASE_PATH
+checkandcopy $SOURCE_BASE_PATH/hcd omap         sdio_omap_hcd.$mext     $OUTPUT_BASE_PATH
+checkandcopy $SOURCE_BASE_PATH/hcd mx21         sdio_mx21_hcd.$mext     $OUTPUT_BASE_PATH
+checkandcopy $SOURCE_BASE_PATH/hcd omap_2420    sdio_omap_hcd.$mext     $OUTPUT_BASE_PATH
+checkandcopy $SOURCE_BASE_PATH/hcd omap2420_raw_spi sdio_omap_raw_spi_hcd.$mext $OUTPUT_BASE_PATH
+checkandcopy $SOURCE_BASE_PATH/hcd omap2420_spi2 athspi_omap2420_hcd.$mext $OUTPUT_BASE_PATH
+
+
+


Property changes on: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/getobjects.scr
___________________________________________________________________
Name: svn:executable
   + *

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/gmmodld.scr
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/gmmodld.scr	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/gmmodld.scr	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,16 @@
+#!/bin/sh
+#load sdio stack on local machine
+# loads modules for modulized gumstix build
+#uses current directory
+
+modprobe vfat
+modprobe nls_cp437
+modprobe nls_iso8859-1
+modprobe unix
+
+
+insmod sdio_lib.ko
+insmod sdio_busdriver.ko
+insmod sdio_pxa255hcd.ko
+
+#load function driver next
\ No newline at end of file

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/loadsdiobd.scr
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/loadsdiobd.scr	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/loadsdiobd.scr	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,30 @@
+#!/bin/sh
+#load sdio stack on local machine
+#uses development directory structure
+modulehcd="../src/hcd/pxa255/sdio_pxa255hcd"
+modulebus="../src/busdriver/sdio_busdriver"
+modulefunction="../src/function/generic/sdio_generic_fd"
+device="sdiobd0"
+mode="664"
+
+# invoke insmod with all arguments we were passed
+# and use a pathname, as newer modutils don't look in . by default
+/sbin/insmod -f $modulebus.ko $* || exit 1
+/sbin/insmod -f $modulehcd.ko $* || exit 1
+/sbin/insmod -f $modulefunction.ko $* || exit 1
+
+# remove stale nodes
+rm -f /dev/${device}
+
+major=`awk "\\$2==\"$device\" {print \\$1}" /proc/devices`
+echo Busdriver major:$major
+mknod /dev/${device} c $major 0
+
+# give appropriate group/permissions, and change the group.
+# Not all distributions have staff; some have "wheel" instead.
+group="staff"
+grep '^staff:' /etc/group > /dev/null || group="wheel"
+
+chgrp $group /dev/${device}
+chmod $mode /dev/${device}
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/loadsdiofn.scr
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/loadsdiofn.scr	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/loadsdiofn.scr	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,21 @@
+#!/bin/sh
+#create the sdio function driver nodes
+#uses development directory structure
+function="sdiofn0"
+mode="664"
+
+
+# remove stale nodes
+rm -f /dev/${function}
+
+major=`awk "\\$2==\"$function\" {print \\$1}" /proc/devices`
+echo Function major:$major
+mknod /dev/${function} c $major 0
+
+# give appropriate group/permissions, and change the group.
+# Not all distributions have staff; some have "wheel" instead.
+group="staff"
+grep '^staff:' /etc/group > /dev/null || group="wheel"
+
+chgrp $group /dev/${function}
+chmod $mode /dev/${function}

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/loadsdiosample.scr
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/loadsdiosample.scr	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/loadsdiosample.scr	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,44 @@
+#!/bin/sh
+#create the sdio function driver nodes
+#uses development directory structure
+
+HCD_DRIVER=xxxx
+
+# *** NOTE **** 
+# For Linux 2.4 the file extension for insmod/rmmod has to be altered.
+#   When using insmod, use the .o file extension.
+#   When using rmmod, ommit the extension entirely.
+
+case $1 in
+    pxa255 ) 
+    HCD_DRIVER=sdio_pxa255hcd.ko
+    ;;
+    pci_ellen )
+    HCD_DRIVER=sdio_pciellen_hcd.ko
+    ;;
+    *)
+    echo "Invalid HCD Driver (requires pci_ellen or pxa255)" 
+    exit
+    ;;
+esac
+
+case $2 in
+    unloadall ) 
+    echo "..unloading all"
+    /sbin/rmmod  modules/sdio_sample_fd.ko
+    /sbin/rmmod  modules/sdio_memory_fd.ko
+    /sbin/rmmod  modules/$HCD_DRIVER
+    /sbin/rmmod  modules/sdio_busdriver.ko
+    /sbin/rmmod  modules/sdio_lib.ko
+    ;;
+    * ) 
+    /sbin/insmod modules/sdio_lib.ko
+    /sbin/insmod modules/sdio_busdriver.ko
+    /sbin/insmod modules/$HCD_DRIVER
+    /sbin/insmod modules/sdio_sample_fd.ko debuglevel=7
+    /sbin/insmod modules/sdio_memory_fd.ko
+    ;;
+esac
+
+  
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/makesdiosampledev.scr
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/makesdiosampledev.scr	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/makesdiosampledev.scr	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,23 @@
+#!/bin/sh
+#create the sdio function driver nodes
+# use this script when udev is not available
+# this script should only be run when the sdio card is installed
+# and claimed by the function driver
+
+function="sdiosam0"
+mode="664"
+
+    #below items can be done automatically via udev
+    # remove stale nodes
+    rm -f /dev/${function}
+    major=`awk "\\$2==\"$function\" {print \\$1}" /proc/devices`
+    echo Function major:$major
+    mknod /dev/${function} c $major 0
+    group="staff"
+    grep '^staff:' /etc/group > /dev/null || group="wheel"
+    chgrp $group /dev/${function}
+    chmod $mode /dev/${function}
+    
+
+  
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/package_linux_src.scr
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/package_linux_src.scr	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/package_linux_src.scr	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,105 @@
+#!/bin/sh
+#  automated packaging script for SDIO Stack on Linux
+#  
+#  usage:
+#      package_linux_src.scr [output directory]
+#  
+#  example:
+#     ./package_linux_src.scr $HOME/Output/SDIOSrc
+#
+#  Copyright 2004-2006 Atheros Communications, Inc.
+#
+
+SOURCE_BASE_PATH=$(pwd)/../..
+OUTPUT_BASE_PATH=$1
+
+if [ -z "$1" ]; then
+	echo "missing output directory"
+	exit
+fi
+
+BASE_IN_FILES_DIR=$SOURCE_BASE_PATH/sdiostack
+BASE_IN_SRC_DIR=$BASE_IN_FILES_DIR/src
+BASE_OUT_HDK_FILE_DIR=$OUTPUT_BASE_PATH/sdiostack
+BASE_OUT_HDK_SRC_DIR=$BASE_OUT_HDK_FILE_DIR/src
+
+cleanup() {
+	if [ -d $OUTPUT_BASE_PATH ]; then
+		echo cleaning up $OUTPUT_BASE_PATH ....
+		rm -f -R $OUTPUT_BASE_PATH
+	fi
+}
+
+copysrccode_linux() {
+  mkdir --parents $2/$1/linux
+  cp  -r $BASE_IN_SRC_DIR/$1/linux  $2/$1
+  cp  $BASE_IN_SRC_DIR/$1/*.*       $2/$1
+  if [ -f $BASE_IN_SRC_DIR/$1/Makefile ]; then
+      cp  $BASE_IN_SRC_DIR/$1/Makefile  $2/$1
+  fi
+  
+}
+
+setupsrc() {
+   copysrccode_linux include $BASE_OUT_HDK_SRC_DIR
+   rm -f $BASE_OUT_HDK_SRC_DIR/include/sdio_hcd_defs_pdk.h
+   copysrccode_linux busdriver $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux lib $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux function/memory $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux function/gps $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux function/bench/common $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux function/bench/emsdio $BASE_OUT_HDK_SRC_DIR
+   cp $BASE_IN_SRC_DIR/function/bench/Makefile $BASE_OUT_HDK_SRC_DIR/function/bench/Makefile 
+   copysrccode_linux function/bluetooth $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux function/sample $BASE_OUT_HDK_SRC_DIR
+   cp $BASE_IN_SRC_DIR/function/Makefile    $BASE_OUT_HDK_SRC_DIR/function
+   cp $BASE_IN_SRC_DIR/Makefile $BASE_OUT_HDK_SRC_DIR
+   cp $BASE_IN_SRC_DIR/localmake.linux.inc $BASE_OUT_HDK_SRC_DIR
+   cp $BASE_IN_FILES_DIR/scripts/loadsdiosample.scr  $BASE_OUT_HDK_FILE_DIR
+   cp $BASE_IN_FILES_DIR/doc/readme.txt $BASE_OUT_HDK_FILE_DIR
+   cp $BASE_IN_FILES_DIR/scripts/getobjects.scr  $BASE_OUT_HDK_FILE_DIR/scripts
+   copysrccode_linux hcd/pci_ellen $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux hcd/stdhost  $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux hcd/pci_std  $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux hcd/pxa255   $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux hcd/pxa270   $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux hcd/omap     $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux hcd/mx21     $BASE_OUT_HDK_SRC_DIR
+   copysrccode_linux hcd/omap_2420  $BASE_OUT_HDK_SRC_DIR
+   #copysrccode_linux hcd/omap_raw_spi      $BASE_OUT_HDK_SRC_DIR
+   #copysrccode_linux hcd/omap2420_raw_spi  $BASE_OUT_HDK_SRC_DIR
+   cp $BASE_IN_SRC_DIR/hcd/Makefile $BASE_OUT_HDK_SRC_DIR/hcd
+   cp $BASE_IN_FILES_DIR/scripts/build.scr.all    $BASE_OUT_HDK_SRC_DIR/build.scr.all
+   pushd .   
+   cd $BASE_OUT_HDK_FILE_DIR
+   tar -xf $BASE_IN_FILES_DIR/doc/Help-PostProcessed/help_hdk.tar 
+   popd
+   chmod 777 -R $BASE_OUT_HDK_FILE_DIR/doc
+}
+
+preparedirectories() { 
+	echo preparing directories...
+	mkdir --parents $OUTPUT_BASE_PATH
+	mkdir --parents $BASE_OUT_HDK_SRC_DIR
+    mkdir --parents $BASE_OUT_HDK_FILE_DIR/doc
+    mkdir --parents $BASE_OUT_HDK_FILE_DIR/scripts
+	setupsrc
+}
+
+
+outputarchive()
+{
+pushd .
+cd $1
+cd ..
+tar -czf $3.tgz $2
+popd
+}
+
+cleanup       
+preparedirectories 
+outputarchive $BASE_OUT_HDK_FILE_DIR sdiostack emsdio_src
+
+
+ 
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/sdioload.scr
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/sdioload.scr	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/sdioload.scr	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,19 @@
+#!/bin/sh
+#load sdio stack on local machine
+#uses current directory
+
+modulelib="sdio_lib"
+modulehcd="sdio_pciellen_hcd" 
+modulebus="sdio_busdriver"
+
+
+# invoke insmod with all arguments we were passed
+# and use a pathname, as newer modutils don't look in
+#
+/sbin/insmod -f $modulelib.ko debuglevel=3 
+/sbin/insmod -f $modulebus.ko debuglevel=3  
+/sbin/insmod -f sdio_memory_fd.ko debuglevel=3  
+/sbin/insmod -f sdio_generic_fd.ko debuglevel=3 
+/sbin/insmod -f sdio_bluetooth_fd.ko debuglevel=3 
+/sbin/insmod -f sdio_gps_fd.ko debuglevel=3 
+/sbin/insmod -f $modulehcd.ko debuglevel=3 
\ No newline at end of file

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/sdiounload.scr
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/sdiounload.scr	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/sdiounload.scr	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,14 @@
+#!/bin/sh
+#unload sdio stack on local machine
+#uses current directory
+modulelib="sdio_lib"
+modulehcd="sdio_pciellen_hcd"
+modulebus="sdio_busdriver"
+
+/sbin/rmmod -f sdio_generic_fd.ko $* 
+/sbin/rmmod -f sdio_memory_fd.ko $*
+/sbin/rmmod -f sdio_bluetooth_fd.ko $*
+/sbin/rmmod -f sdio_gps_fd.ko $*
+/sbin/rmmod -f $modulehcd.ko $* 
+/sbin/rmmod -f $modulebus.ko $* 
+/sbin/rmmod -f $modulelib.ko $* 
\ No newline at end of file

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/testmemory.scr
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/testmemory.scr	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/testmemory.scr	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,14 @@
+#!/bin/sh
+rm /dev/sdio0p1
+mknod /dev/sdio0p1 b $1 1
+mount -t vfat /dev/sdio0p1 /mnt/mmc 
+while [ 1 ]
+do
+   echo "reading file.."
+   cat /mnt/mmc/$2 > /dev/null
+   echo "read done.."
+   umount /mnt/mmc
+   mount -t vfat /dev/sdio0p1 /mnt/mmc 
+done
+
+ 
\ No newline at end of file

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/testsample.scr
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/testsample.scr	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/testsample.scr	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,9 @@
+#!/bin/sh
+
+while [ 1 ]
+do
+ ./testapp -w 19 -i2 
+
+done
+
+ 
\ No newline at end of file

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/unloadsdiobd.scr
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/unloadsdiobd.scr	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/scripts/unloadsdiobd.scr	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,13 @@
+#!/bin/sh
+#unload sdio stack on local machine
+#uses development directory structure
+modulehcd="../src/hcd/pxa255/sdio_pxa255hcd"
+modulebus="../src/busdriver/sdio_busdriver"
+modulefunction="../src/function/generic/sdio_generic_fd"
+
+
+/sbin/rmmod $modulefunction.ko 
+/sbin/rmmod $modulehcd.ko 
+/sbin/rmmod $modulebus.ko 
+
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/Makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/Makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/Makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,189 @@
+# EMSDIO master make file
+# Copyright 2004-2006 Atheros Communications, Inc.
+#
+# Minimal build invocation:
+#
+#   make ALL_BUILD=1 CT_BUILD_TYPE=<build type> CT_OS_TYPE=<Operating System> default | clean
+#
+# Notes:
+#     1. This makefile must be invoked from the host/ directory
+#     2. The <build type> must match an entry in localmake.$(CT_OS_TYPE).inc.
+#     3. The localmake.$(CT_OS_TYPE).inc can be overridden using an include file outside the build tree.
+#        This file (name and path) can be set via the CT_MAKE_INCLUDE_OVERRIDE variable.
+#        ** If CT_MAKE_INCLUDE_OVERRIDE is used, you can define all build variables in that file 
+#        instead of using command line arguments **.  This feature is provided for developers
+#        that may want to customize the build using a single include file.
+#
+#        For example :
+#             
+#            " make CT_MAKE_INCLUDE_OVERRIDE=$HOME/mymake.inc "
+#        
+#             could be used, as long as "mymake.inc" defines all the required variables (see below)
+  
+#  Required Variables:  
+#      
+#      CT_BUILD_TYPE  - build type defined in localmake.linux.inc, this variable is also used 
+#                       to build a path to hold compiled binaries.
+#      CT_OS_TYPE - operating system type (linux, etc...)
+#	   CT_OS_SUB_TYPE - on linux, this must be "linux_2_4" for 2.4 kernels or left blank for 2.6 kernels.
+#      CT_LINUXPATH - linux kernel source path
+#      CT_CROSS_COMPILE_TYPE - optional cross compiler path 
+#      CT_ARCH_CPU_TYPE  - CPU architecture type
+#
+#      One of the following should be used to build the tree:
+#      ALL_BUILD=1 - build all source code
+#      HDK_BUILD=1 - build only HCD and sample function drivers
+#      PDK_BUILD=1 - build only the sample function drivers
+#      BUS_BUILD=1 - build bus driver, library and HCDs for use with built-in SDIO cards.
+#
+# Override variables:
+#
+#    CT_MAKE_INCLUDE_OVERRIDE - full path to include file which overrides the default
+#                               this file can contain other overrides specific to a developer's
+#                               workspace environment.
+#    CT_BUILD_OUTPUT_OVERRIDE - output path override for compiled binaries.
+#
+
+#include local variables
+
+ifdef CT_MAKE_INCLUDE_OVERRIDE
+-include $(CT_MAKE_INCLUDE_OVERRIDE)
+else
+-include localmake.$(CT_OS_TYPE).inc
+-include localmake.$(CT_OS_TYPE).private.inc
+endif
+
+export CT_OS_TYPE
+export CT_OS_SUB_TYPE
+export CT_OS_TOP_LEVEL_RULE 
+export CT_PASS_CFLAGS
+export CT_SRC_BASE
+export CT_BUILD_SUB_PROJ
+
+# this makefile can only be invoked from the /EMSDIO/src base
+CT_SRC_BASE :=$(shell pwd)
+ 
+# export flags for which HCDs to build. Set the hcd driver name in hcd/ in your localmake.*.inc file.
+export CT_HC_DRIVERS
+export PDK_BUILD
+export HDK_BUILD
+export ALL_BUILD
+export ATHRAW_FD_BUILD
+export BUS_BUILD
+
+# For Linux
+ifeq ($(CT_OS_TYPE),linux) 
+
+#make a copy for linux 2.4
+EXTRA_CFLAGS += -DLINUX -I$(CT_SRC_BASE)/include 
+ifneq ($(CT_RELEASE),1)
+EXTRA_CFLAGS += -DDEBUG
+endif  
+export EXTRA_CFLAGS 
+
+CT_SRC_OUTPUT :=$(CT_SRC_BASE)/../output
+
+ifdef CT_BUILD_OUTPUT_OVERRIDE
+_CT_COMPILED_OBJECTS_PATH :=$(CT_BUILD_OUTPUT_OVERRIDE)
+_MAKE_OUTPUT_DIR :=
+_CLEAN_OUTPUT_DIR :=
+else
+_CT_COMPILED_OBJECTS_PATH := $(CT_SRC_OUTPUT)/$(CT_BUILD_TYPE)
+_MAKE_OUTPUT_DIR := mkdir --parents $(_CT_COMPILED_OBJECTS_PATH)
+_CLEAN_OUTPUT_DIR := rm -R -f $(CT_SRC_OUTPUT)
+endif
+
+ifeq ($(CT_OS_SUB_TYPE),linux_2_4)
+
+CT_PASS_CFLAGS := $(EXTRA_CFLAGS)
+_CT_MOD_EXTENSION :=o
+ifeq ($(ALL_BUILD),1)
+subdir-m += busdriver/ lib/ hcd/ function/   
+else 
+ifeq ($(BUS_BUILD),1)
+subdir-m += busdriver/ lib/ hcd/
+else
+ifeq ($(PDK_BUILD),1)
+subdir-m += function/
+else
+ifeq ($(HDK_BUILD),1)
+subdir-m += hcd/ function/ 
+endif
+endif
+endif
+endif
+
+# add in rules to make modules
+CT_OS_TOP_LEVEL_RULE :=$(CT_LINUXPATH)/Rules.make
+include $(CT_OS_TOP_LEVEL_RULE)
+else
+#2.6+
+_CT_MOD_EXTENSION :=ko
+ifeq ($(ALL_BUILD),1)
+obj-m += busdriver/ lib/ hcd/ function/  
+else 
+ifeq ($(BUS_BUILD),1)
+obj-m += busdriver/ lib/ hcd/
+else 
+ifeq ($(PDK_BUILD),1)
+obj-m += function/
+else
+ifeq ($(HDK_BUILD),1)
+obj-m += hcd/ function/ 
+endif
+endif
+endif
+endif
+
+endif
+
+ifdef CT_BUILD_SUB_PROJ
+_CT_SUBDIRS=$(CT_BUILD_SUB_PROJ)
+else
+_CT_SUBDIRS=$(CT_SRC_BASE)
+endif
+
+ifdef CT_CROSS_COMPILE_TYPE 
+CT_MAKE_COMMAND_LINE=$(CT_OUTPUT_FLAGS) -C $(CT_LINUXPATH) SUBDIRS=$(_CT_SUBDIRS) ARCH=$(CT_ARCH_CPU_TYPE) CROSS_COMPILE=$(CT_CROSS_COMPILE_TYPE)
+else   
+CT_MAKE_COMMAND_LINE=$(CT_OUTPUT_FLAGS) -C $(CT_LINUXPATH) SUBDIRS=$(_CT_SUBDIRS)
+endif
+
+makeoutputdirs:
+	$(_MAKE_OUTPUT_DIR)
+    
+default: makeoutputdirs
+	$(MAKE) $(CT_MAKE_COMMAND_LINE) modules
+	$(CT_SRC_BASE)/../scripts/getobjects.scr $(CT_SRC_BASE) $(_CT_COMPILED_OBJECTS_PATH) $(_CT_MOD_EXTENSION)
+       
+ifeq ($(CT_OS_SUB_TYPE),linux_2_4)
+# on 2.4 we can't invoke the linux clean with SUBDIRS, it will just clean out the kernel
+clean:
+	find $(_CT_SUBDIRS) \( -name '*.[oas]' -o -name core -o -name '.*.flags' -o -name '.ko' -o -name '.*.cmd' \) -type f -print \
+		| grep -v lxdialog/ | xargs rm -f
+	$(_CLEAN_OUTPUT_DIR)
+else 
+clean:
+	$(MAKE) $(CT_MAKE_COMMAND_LINE) clean
+	find $(_CT_SUBDIRS) \( -name '*.[oas]' -o -name core -o -name '.*.flags' \) -type f -print \
+		| grep -v lxdialog/ | xargs rm -f
+	$(_CLEAN_OUTPUT_DIR)
+endif
+endif 
+
+# For QNX
+ifeq ($(CT_OS_TYPE),qnx)  
+LIST=VARIANT
+EARLY_DIRS=lib
+##ifndef QRECURSE
+QRECURSE=./recurse.mk
+##ifdef QCONFIG
+###QRDIR=$(dir $(QCONFIG))
+##endif
+##endif
+include $(QRDIR)$(QRECURSE)
+
+endif
+ 
+
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/Makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/Makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/Makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,35 @@
+ifeq ($(CT_OS_TYPE),linux)
+##LINUX
+ifneq ($(CT_OS_SUB_TYPE),linux_2_4)
+obj-m += sdio_busdriver.o
+sdio_busdriver-objs := sdio_bus.o sdio_function.o sdio_bus_misc.o sdio_bus_events.o linux/sdio_bus_os.o
+endif
+
+ifeq ($(CT_OS_SUB_TYPE),linux_2_4)
+# reset CFLAGs, for some reason on 2.4.20, the EXTRA_FLAGS is not propogated from our top-level makefile
+EXTRA_CFLAGS += $(CT_PASS_CFLAGS)
+O_TARGET := sdio_busdriver.o 
+# need export line for module export
+export-objs := linux/sdio_bus_os.o
+obj-y += sdio_bus.o sdio_function.o sdio_bus_misc.o sdio_bus_events.o sdio_bus_os.o
+obj-m += sdio_bus.o sdio_function.o sdio_bus_misc.o sdio_bus_events.o linux/sdio_bus_os.o sdio_busdriver.o
+include $(CT_OS_TOP_LEVEL_RULE)
+
+endif
+
+endif
+
+ifeq ($(CT_OS_TYPE),qnx)
+##QNX
+LIST=VARIANT
+ifndef QRECURSE
+QRECURSE=recurse.mk
+ifdef QCONFIG
+QRDIR=$(dir $(QCONFIG))
+endif
+endif
+include $(QRDIR)$(QRECURSE)
+endif
+
+
+  
\ No newline at end of file

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/_busdriver.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/_busdriver.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/_busdriver.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,466 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: _busdriver.h
+
+ at abstract: internal include file for busdriver
+ 
+ at notice: Copyright (c), 2004-2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifndef ___BUSDRIVER_H___
+#define ___BUSDRIVER_H___
+#include "../include/sdio_lib.h"
+
+#define SDIODBG_FUNC_IRQ  (SDDBG_TRACE + 1)
+#define SDIODBG_REQUESTS  (SDDBG_TRACE + 2)
+#define SDIODBG_CD_TIMER  (SDDBG_TRACE + 3)
+#define SDIODBG_HCD_EVENTS  (SDDBG_TRACE + 4)
+
+#define SDIOBUS_CD_TIMER_ID 0
+
+#define SDBUS_MAX_RETRY   3
+
+/* Notes on list linkages:
+ *  list heads are held in BDCONTEXT
+ *  HcdList - SDHCD
+ *          one per registered host controller
+ *          Next - links of all HCDs
+ *  DeviceList SDDEVICE  
+ *          one per inserted device
+ *          Next - links of all devices
+ *          DeviceListNext - links of all devices on a function
+ *          pFunction - ptr to Function supportting this device
+ *          pHcd - ptr to HCD with supporting this device
+ *  FunctionList SDFUNCTION
+ *          one per register function driver
+ *          Next - links of all functions
+ *          DeviceList - list of devices being support by this function
+ *                       uses DeviceListNext in SDDEVICE to link
+ * 
+ * 
+*/
+
+#define SDMMC_DEFAULT_CMD_RETRIES           1
+#define SDMMC_DEFAULT_CARD_READY_RETRIES    200 
+#define OCR_READY_CHECK_DELAY_MS            10 
+#define SDMMC_POWER_SETTLE_DELAY            400  /* in milliseconds */
+#define SDBUS_DEFAULT_REQ_LIST_SIZE         16
+#define SDBUS_DEFAULT_REQ_SIG_SIZE          8
+#define CARD_DETECT_PAUSE                   100
+#define SDBUS_DEFAULT_CD_POLLING_INTERVAL   1000  /* in milliseconds */
+#define MAX_CARD_DETECT_MSGS                16   
+#define SDMMC_DEFAULT_BYTES_PER_BLOCK       2048
+#define SDMMC_DEFAULT_BLOCKS_PER_TRANS      512
+#define SDMMC_CMD13_POLLING_MULTIPLIER      1000 /* per block multiplier */
+#define MAX_HCD_REQ_RECURSION               5 
+#define MAX_HCD_RECURSION_RUNAWAY           100
+
+    /* internal signalling item */
+typedef struct _SIGNAL_ITEM{
+    SDLIST       SDList;        /* list link*/
+    OS_SIGNAL    Signal;        /* signal */
+}SIGNAL_ITEM, *PSIGNAL_ITEM;
+
+typedef struct _HCD_EVENT_MESSAGE {
+    HCD_EVENT Event;    /* the event */
+    PSDHCD    pHcd;     /* hcd that generated the event */
+}HCD_EVENT_MESSAGE, *PHCD_EVENT_MESSAGE;
+
+/* internal data for bus driver */
+typedef struct _BDCONTEXT {
+   
+    /* list of SD requests and signalling semaphores and a semaphore to protect it */
+    SDLIST  RequestList;
+    SDLIST  SignalList;
+    OS_CRITICALSECTION RequestListCritSection;
+    /* list of host controller bus drivers, sempahore to protect it */
+    SDLIST HcdList;
+    OS_SEMAPHORE HcdListSem;
+    /* list of inserted devices, semaphore to protect it */
+    SDLIST DeviceList;
+    OS_SEMAPHORE DeviceListSem;
+    /* list of function drivers, semaphore to protect it */
+    SDLIST FunctionList;
+    OS_SEMAPHORE FunctionListSem;
+    INT              RequestListSize;        /* default request list */
+    INT              SignalSemListSize;      /* default signalling semaphore size */
+    INT              CurrentRequestAllocations; /*current count of allocated requests */
+    INT              CurrentSignalAllocations;   /* current count of signal allocations */
+    INT              MaxRequestAllocations;  /* max number of allocated requests to keep around*/
+    INT              MaxSignalAllocations;   /* max number of signal allocations to keep around*/
+    INT              RequestRetries;         /* cmd retries */
+    INT              CardReadyPollingRetry;  /* card ready polling retry count */
+    INT              PowerSettleDelay;       /* power settle delay */
+    INT              CMD13PollingMultiplier; /* CMD13 (GET STATUS) multiplier */
+    SD_BUSCLOCK_RATE DefaultOperClock;       /* default operation clock */
+    SD_BUSMODE_FLAGS DefaultBusMode;         /* default bus mode */ 
+    UINT16           DefaultOperBlockLen;    /* default operational block length per block */
+    UINT16           DefaultOperBlockCount;  /* default operational block count per transaction */
+    UINT32           CDPollingInterval;      /* card insert/removal polling interval */ 
+    UINT8            InitMask;               /* bus driver init mask */
+#define BD_TIMER_INIT    0x01
+#define HELPER_INIT      0x02
+#define RESOURCE_INIT    0x04
+    BOOL             CDTimerQueued;          /* card detect timer queued */ 
+    OSKERNEL_HELPER  CardDetectHelper;       /* card detect helper */ 
+    PSDMESSAGE_QUEUE pCardDetectMsgQueue;    /* card detect message queue */
+    ULONG            HcdInUseField;          /* bit field of in use HCD numbers*/
+    UINT32           ConfigFlags;            /* bus driver configuration flags */
+#define BD_CONFIG_SDREQ_FORCE_ALL_ASYNC 0x00000001
+    INT              MaxHcdRecursion;        /* max HCD recurion level */
+}BDCONTEXT, *PBDCONTEXT;
+
+#define BD_DEFAULT_CONFIG_FLAGS 0x00000000
+#define IsQueueBusy(pRequestQueue)      (pRequestQueue)->Busy 
+#define MarkQueueBusy(pRequestQueue)    (pRequestQueue)->Busy = TRUE   
+#define MarkQueueNotBusy(pRequestQueue) (pRequestQueue)->Busy = FALSE 
+
+#define CLEAR_INTERNAL_REQ_FLAGS(pReq) (pReq)->Flags &= ~(UINT)((SDREQ_FLAGS_RESP_SPI_CONVERTED | \
+                                                          SDREQ_FLAGS_FORCE_DEFERRED_COMPLETE))
+                                                          
+/* macros to insert request into the queue */
+#define QueueRequest(pReqQ,pReq) SDListInsertTail(&(pReqQ)->Queue,&(pReq)->SDList)
+#define QueueRequestToFront(pReqQ,pReq) SDListInsertHead(&(pReqQ)->Queue,&(pReq)->SDList)
+
+/* macros to remove an item from the head of the queue */
+static INLINE PSDREQUEST DequeueRequest(PSDREQUESTQUEUE pRequestQueue) {
+    PSDLIST pItem;
+    pItem = SDListRemoveItemFromHead(&pRequestQueue->Queue);
+    if (pItem != NULL) {
+        return CONTAINING_STRUCT(pItem, SDREQUEST, SDList);        
+    }
+    return NULL;
+};
+
+static INLINE SDIO_STATUS InitializeRequestQueue(PSDREQUESTQUEUE pRequestQueue) {
+    SDLIST_INIT(&pRequestQueue->Queue);  
+    MarkQueueNotBusy(pRequestQueue);
+    return SDIO_STATUS_SUCCESS;
+}
+
+static INLINE void CleanupRequestQueue(PSDREQUESTQUEUE pRequestQueue) {
+    
+}
+
+/* for bus driver internal use only */
+SDIO_STATUS _SDIO_BusDriverInitialize(void);
+SDIO_STATUS _SDIO_BusGetDefaultSettings(PBDCONTEXT pBdc);
+void _SDIO_BusDriverCleanup(void);
+SDIO_STATUS RemoveAllFunctions(void);
+SDIO_STATUS RemoveHcdFunctions(PSDHCD pHcd);
+PSDDEVICE AllocateDevice(PSDHCD pHcd);
+BOOL AddDeviceToList(PSDDEVICE pDevice);
+SDIO_STATUS DeleteDevices(PSDHCD pHcd);
+SDIO_STATUS NotifyDeviceRemove(PSDDEVICE pDevice);
+extern PBDCONTEXT pBusContext;
+extern const CT_VERSION_CODE g_Version;
+SDIO_STATUS _SDIO_RegisterHostController(PSDHCD pHcd);
+SDIO_STATUS _SDIO_UnregisterHostController(PSDHCD pHcd);
+SDIO_STATUS _SDIO_HandleHcdEvent(PSDHCD pHcd, HCD_EVENT Event);
+SDIO_STATUS _SDIO_RegisterFunction(PSDFUNCTION pFunction);
+SDIO_STATUS _SDIO_UnregisterFunction(PSDFUNCTION pFunction);
+SDIO_STATUS _SDIO_CheckResponse(PSDHCD pHcd, PSDREQUEST pReq, SDHCD_RESPONSE_CHECK_MODE CheckMode);
+SDIO_STATUS ProbeForFunction(PSDDEVICE pDevice, PSDHCD pHcd);
+SDIO_STATUS SDInitializeCard(PSDHCD pHcd);
+SDIO_STATUS SDQuerySDMMCInfo(PSDDEVICE pDevice);
+SDIO_STATUS SDQuerySDIOInfo(PSDDEVICE pDevice);
+SDIO_STATUS SDEnableFunction(PSDDEVICE pDevice, PSDCONFIG_FUNC_ENABLE_DISABLE_DATA pEnData);
+SDIO_STATUS SDAllocFreeSlotCurrent(PSDDEVICE pDevice, BOOL Allocate, PSDCONFIG_FUNC_SLOT_CURRENT_DATA pData);
+SDIO_STATUS SDMaskUnmaskFunctionIRQ(PSDDEVICE pDevice, BOOL Mask);
+SDIO_STATUS SDFunctionAckInterrupt(PSDDEVICE pDevice);
+SDIO_STATUS SDSPIModeEnableDisableCRC(PSDDEVICE pDevice,BOOL Enable);
+SDIO_STATUS IssueBusConfig(PSDDEVICE pDev, PSDCONFIG pConfig);
+SDIO_STATUS IssueBusRequest(PSDDEVICE pDev, PSDREQUEST pReq);
+PSDREQUEST IssueAllocRequest(PSDDEVICE pDev);
+void IssueFreeRequest(PSDDEVICE pDev, PSDREQUEST pReq);
+PSDREQUEST AllocateRequest(void);
+void FreeRequest(PSDREQUEST pReq);
+PSIGNAL_ITEM AllocateSignal(void);
+void FreeSignal(PSIGNAL_ITEM pSignal);
+SDIO_STATUS InitializeTimers(void);
+SDIO_STATUS CleanupTimers(void);
+SDIO_STATUS QueueTimer(INT TimerID, UINT32 TimeOut);
+SDIO_STATUS DeviceAttach(PSDHCD pHcd); 
+SDIO_STATUS DeviceDetach(PSDHCD pHcd);
+SDIO_STATUS DeviceInterrupt(PSDHCD pHcd);
+SDIO_STATUS CardInitSetup(PSDHCD pHcd);
+void RunCardDetect(void);
+void SDIO_NotifyTimerTriggered(INT TimerID);
+SDIO_STATUS TestPresence(PSDHCD          pHcd, 
+                         CARD_INFO_FLAGS TestType,
+                         PSDREQUEST      pReq);              
+#define _IssueSimpleBusRequest(pHcd,Cmd,Arg,Flags,pReqToUse) \
+          _IssueBusRequestBd((pHcd),(Cmd),(Arg),(Flags),(pReqToUse),NULL,0) 
+
+SDIO_STATUS Do_OS_IncHcdReference(PSDHCD pHcd);
+SDIO_STATUS Do_OS_DecHcdReference(PSDHCD pHcd);
+SDIO_STATUS TryNoIrqPendingCheck(PSDDEVICE pDev);
+
+    /* check API version compatibility of an HCD or function driver to a stack major/minor version
+     if the driver version is greater than the major number, we are compatible
+     if the driver version is equal, then we check if the minor is greater than or equal
+     we don't have to check for the less than major, because the bus driver never loads
+     drivers with different major numbers ...
+     if the busdriver compiled version major is greater than the major version being checked this
+     macro will resolved to ALWAYS true thus optimizing the code to not check the HCD since
+     as a rule we never load an HCD with a lower major number */
+#define CHECK_API_VERSION_COMPAT(p,major,minor)       \
+     ((CT_SDIO_STACK_VERSION_MAJOR(CT_SDIO_STACK_VERSION_CODE) > (major)) || \
+      (GET_SDIO_STACK_VERSION_MINOR((p)) >= (minor)))
+
+static INLINE SDIO_STATUS OS_IncHcdReference(PSDHCD pHcd) {
+        /* this API was added in version 2.3 which requires access to a field in the HCD structure */
+    if (CHECK_API_VERSION_COMPAT(pHcd,2,3)) {
+            /* we can safely call the OS-dependent function */
+        return Do_OS_IncHcdReference(pHcd);
+    }
+    return SDIO_STATUS_SUCCESS;
+}
+
+static INLINE SDIO_STATUS OS_DecHcdReference(PSDHCD pHcd) {
+            /* this API was added in version 2.3 which requires access to a field in the HCD structure */
+    if (CHECK_API_VERSION_COMPAT(pHcd,2,3)) {
+            /* we can safely call the OS-dependent function */
+        return Do_OS_DecHcdReference(pHcd);
+    }
+    return SDIO_STATUS_SUCCESS;
+}
+
+SDIO_STATUS _IssueBusRequestBd(PSDHCD           pHcd,
+                               UINT8            Cmd,
+                               UINT32           Argument,
+                               SDREQUEST_FLAGS  Flags,
+                               PSDREQUEST       pReqToUse,
+                               PVOID            pData,
+                               INT              Length);
+                                           
+SDIO_STATUS IssueRequestToHCD(PSDHCD pHcd,PSDREQUEST pReq);
+                
+#define CALL_HCD_CONFIG(pHcd,pCfg) (pHcd)->pConfigure((pHcd),(pCfg))
+    /* macro to force all requests to be asynchronous in the HCD */
+static INLINE BOOL ForceAllRequestsAsync(void) {
+    return (pBusContext->ConfigFlags & BD_CONFIG_SDREQ_FORCE_ALL_ASYNC);
+}
+
+static INLINE SDIO_STATUS CallHcdRequest(PSDHCD pHcd) {
+    
+    if (pHcd->pCurrentRequest->Flags & SDREQ_FLAGS_PSEUDO) {
+        DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: PSEUDO Request 0x%X \n",
+                    (INT)pHcd->pCurrentRequest));   
+            /* return successful completion so that processing can finish */
+        return SDIO_STATUS_SUCCESS;
+    }
+    
+    if (ForceAllRequestsAsync()) {
+            /* all requests must be completed(indicated) in a separate context */
+        pHcd->pCurrentRequest->Flags |= SDREQ_FLAGS_FORCE_DEFERRED_COMPLETE;    
+    } else {
+            /* otherwise perform a test on flags in the HCD */
+        if (!CHECK_API_VERSION_COMPAT(pHcd,2,6) && 
+            AtomicTest_Set(&pHcd->HcdFlags, HCD_REQUEST_CALL_BIT)) {
+
+            /* bit was already set, this is a recursive call, 
+             * we need to tell the HCD to complete the 
+             * request in a separate context */
+            DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: Recursive CallHcdRequest \n"));
+            pHcd->pCurrentRequest->Flags |= SDREQ_FLAGS_FORCE_DEFERRED_COMPLETE;
+        }
+    }
+ #if DEBUG
+    {       
+        SDIO_STATUS status;
+        BOOL forceDeferred;
+        forceDeferred = pHcd->pCurrentRequest->Flags & SDREQ_FLAGS_FORCE_DEFERRED_COMPLETE;
+        status = pHcd->pRequest(pHcd);    
+        if (forceDeferred) {
+                /* status better be pending... */
+            DBG_ASSERT(status == SDIO_STATUS_PENDING);
+        }
+        return status;  
+    }
+ #else 
+    return pHcd->pRequest(pHcd);
+ #endif
+    
+}
+
+/* note the caller of this macro must take the HCD lock to protect the count */
+#define CHECK_HCD_RECURSE(pHcd,pReq)   \
+{                                      \
+    (pHcd)->Recursion++;               \
+    DBG_ASSERT((pHcd)->Recursion < MAX_HCD_RECURSION_RUNAWAY); \
+    if ((pHcd)->Recursion > pBusContext->MaxHcdRecursion) {    \
+        DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: Recursive Request Count Exceeded (%d) \n",(pHcd)->Recursion)); \
+        (pReq)->Flags |= SDREQ_FLAGS_FORCE_DEFERRED_COMPLETE; \
+    }                                                         \
+}
+
+/* InternalFlags bit number settings */
+#define SDBD_INIT        1
+#define SDBD_PENDING    15
+#define SDBD_ALLOC_IRQ_SAFE     2
+
+#define SDBD_ALLOC_IRQ_SAFE_MASK (1 << SDBD_ALLOC_IRQ_SAFE)
+
+static void INLINE DoRequestCompletion(PSDREQUEST pReq, PSDHCD pHcd) {
+    CLEAR_INTERNAL_REQ_FLAGS(pReq);
+    if (pReq->pCompletion != NULL) {
+        DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: Calling completion on request:0x%X, CMD:%d \n",
+           (INT)pReq, pReq->Command));  
+            /* call completion routine, mark request reusable */
+        AtomicTest_Clear(&pReq->InternalFlags, SDBD_PENDING);
+        pReq->pCompletion(pReq);  
+    } else {
+            /* mark request reusable */
+        AtomicTest_Clear(&pReq->InternalFlags, SDBD_PENDING);
+    }
+}
+
+THREAD_RETURN CardDetectHelperFunction(POSKERNEL_HELPER pHelper);
+THREAD_RETURN SDIOIrqHelperFunction(POSKERNEL_HELPER pHelper);
+
+void ConvertSPI_Response(PSDREQUEST pReq, UINT8 *pRespBuffer);
+
+static INLINE SDIO_STATUS PostCardDetectEvent(PBDCONTEXT pSDB, HCD_EVENT Event, PSDHCD pHcd) {
+    HCD_EVENT_MESSAGE message;
+    SDIO_STATUS       status;
+    message.Event = Event;
+    message.pHcd = pHcd; 
+    
+    if (pHcd != NULL) {
+            /* increment HCD reference count to process this HCD message */
+        status = OS_IncHcdReference(pHcd);        
+        if (!SDIO_SUCCESS(status)) {
+            return status;    
+        }
+    }
+        /* post card detect message */
+    status = SDLIB_PostMessage(pSDB->pCardDetectMsgQueue, &message, sizeof(message));
+    if (!SDIO_SUCCESS(status)) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: PostCardDetectEvent error status %d\n",status));
+        if (pHcd != NULL) {
+                /* decrement count */
+            OS_DecHcdReference(pHcd);
+        }
+        return status;   
+    }
+        /* wake card detect helper */
+    DBG_PRINT(SDIODBG_HCD_EVENTS, ("SDIO Bus Driver: PostCardDetectEvent waking\n"));
+    return SD_WAKE_OS_HELPER(&pSDB->CardDetectHelper); 
+};
+
+/* initialize device fields */
+static INLINE void InitDeviceData(PSDHCD pHcd, PSDDEVICE pDevice) {
+    ZERO_POBJECT(pDevice);
+    SDLIST_INIT(&pDevice->SDList);
+    SDLIST_INIT(&pDevice->FuncListLink);
+    pDevice->pRequest = IssueBusRequest;
+    pDevice->pConfigure = IssueBusConfig;
+    pDevice->AllocRequest = IssueAllocRequest;
+    pDevice->FreeRequest = IssueFreeRequest;
+        /* set card flags in the ID */
+    pDevice->pId[0].CardFlags = pHcd->CardProperties.Flags;
+    pDevice->pFunction = NULL;
+    pDevice->pHcd = pHcd;   
+    SET_SDIO_STACK_VERSION(pDevice);
+}
+
+/* de-initialize device fields */
+static INLINE void DeinitDeviceData(PSDDEVICE pDevice) {
+}
+
+/* reset hcd state */
+static INLINE void ResetHcdState(PSDHCD pHcd) {
+    ZERO_POBJECT(&pHcd->CardProperties);  
+    pHcd->PendingHelperIrqs = 0;  
+    pHcd->PendingIrqAcks = 0;     
+    pHcd->IrqsEnabled = 0; 
+    pHcd->pCurrentRequest = NULL;
+    pHcd->IrqProcState = SDHCD_IDLE;
+        /* mark this device as special */
+    pHcd->pPseudoDev->pId[0].CardFlags = CARD_PSEUDO;
+    pHcd->SlotCurrentAllocated = 0;
+}
+
+static INLINE SDIO_STATUS _IssueConfig(PSDHCD           pHcd,
+                                       SDCONFIG_COMMAND Command,
+                                       PVOID            pData,
+                                       INT              Length){
+    SDCONFIG  configHdr; 
+    SET_SDCONFIG_CMD_INFO(&configHdr,Command,pData,Length);
+    return CALL_HCD_CONFIG(pHcd,&configHdr);
+}
+
+/* prototypes */
+#define _AcquireHcdLock(pHcd)CriticalSectionAcquireSyncIrq(&(pHcd)->HcdCritSection)
+#define _ReleaseHcdLock(pHcd)CriticalSectionReleaseSyncIrq(&(pHcd)->HcdCritSection)
+
+#define AcquireHcdLock(pDev) CriticalSectionAcquireSyncIrq(&(pDev)->pHcd->HcdCritSection)
+#define ReleaseHcdLock(pDev) CriticalSectionReleaseSyncIrq(&(pDev)->pHcd->HcdCritSection)
+
+SDIO_STATUS OS_AddDevice(PSDDEVICE pDevice, PSDFUNCTION pFunction);
+void OS_RemoveDevice(PSDDEVICE pDevice);
+SDIO_STATUS OS_InitializeDevice(PSDDEVICE pDevice, PSDFUNCTION pFunction);
+SDIO_STATUS SetOperationalBusMode(PSDDEVICE               pDevice, 
+                                  PSDCONFIG_BUS_MODE_DATA pBusMode); 
+void FreeDevice(PSDDEVICE pDevice);
+BOOL IsPotentialIdMatch(PSD_PNP_INFO pIdsDev, PSD_PNP_INFO pIdsFuncList);
+
+
+#define CHECK_FUNCTION_DRIVER_VERSION(pF) \
+    (GET_SDIO_STACK_VERSION_MAJOR((pF)) == CT_SDIO_STACK_VERSION_MAJOR(g_Version))   
+#define CHECK_HCD_DRIVER_VERSION(pH) \
+    (GET_SDIO_STACK_VERSION_MAJOR((pH)) == CT_SDIO_STACK_VERSION_MAJOR(g_Version))                                                       
+
+/* CLARIFICATION on SDREQ_FLAGS_PSEUDO and SDREQ_FLAGS_BARRIER flags :
+ * 
+ * A request marked as PSEUDO is synchronized with bus requests and is not a true request
+ * that is issued to an HCD.
+ * 
+ * A request marked with a BARRIER flag requires that the completion routine be called
+ * before the next bus request starts.  This is required for HCD requests that can change 
+ * bus or clock modes.  Changing the clock or bus mode while a bus request is pending 
+ * can cause problems.
+ * 
+ * 
+ * 
+ * */
+#define SD_PSEUDO_REQ_FLAGS \
+      (SDREQ_FLAGS_PSEUDO | SDREQ_FLAGS_BARRIER | SDREQ_FLAGS_TRANS_ASYNC)      
+                                 
+#endif /*___BUSDRIVER_H___*/

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/linux/sdio_bus_os.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/linux/sdio_bus_os.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/linux/sdio_bus_os.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,838 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_bus_os.c
+
+ at abstract: Linux implementation module
+
+#notes: includes module load and unload functions
+ 
+ at notice: Copyright (c), 2004-2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+/* debug level for this module*/
+#define DBG_DECLARE 3;
+
+#include "../../include/ctsystem.h"
+#include <linux/kernel.h> 
+#include <linux/module.h>
+#include <linux/version.h>
+#include <linux/init.h>
+#include <linux/workqueue.h>
+#include <linux/delay.h>
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)
+#include <linux/kthread.h>
+#include <linux/pnp.h>
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,15)
+void pnp_remove_device(struct pnp_dev *dev);
+#endif
+#endif
+#include "../../include/sdio_busdriver.h"
+#include "../../include/sdio_lib.h"
+#include "../_busdriver.h"
+
+#define DESCRIPTION "SDIO Bus Driver"
+#define AUTHOR "Atheros Communications, Inc."
+
+/* debug print parameter */
+module_param(debuglevel, int, 0644);
+MODULE_PARM_DESC(debuglevel, "debuglevel 0-7, controls debug prints");
+/* configuration and default parameters */
+static int RequestRetries = SDMMC_DEFAULT_CMD_RETRIES;
+module_param(RequestRetries, int, 0644);
+MODULE_PARM_DESC(RequestRetries, "number of command retries");
+static int CardReadyPollingRetry = SDMMC_DEFAULT_CARD_READY_RETRIES;
+module_param(CardReadyPollingRetry, int, 0644);
+MODULE_PARM_DESC(CardReadyPollingRetry, "number of card ready retries");
+static int PowerSettleDelay = SDMMC_POWER_SETTLE_DELAY;
+module_param(PowerSettleDelay, int, 0644);
+MODULE_PARM_DESC(PowerSettleDelay, "delay in ms for power to settle after power changes");
+static int DefaultOperClock = 52000000;
+module_param(DefaultOperClock, int, 0644);
+MODULE_PARM_DESC(DefaultOperClock, "maximum operational clock limit");
+static int DefaultBusMode = SDCONFIG_BUS_WIDTH_4_BIT;
+module_param(DefaultBusMode, int, 0644);
+MODULE_PARM_DESC(DefaultBusMode, "default bus mode: see SDCONFIG_BUS_WIDTH_xxx");
+static int RequestListSize = SDBUS_DEFAULT_REQ_LIST_SIZE;
+module_param(RequestListSize, int, 0644);
+MODULE_PARM_DESC(RequestListSize, "");
+static int SignalSemListSize = SDBUS_DEFAULT_REQ_SIG_SIZE;
+module_param(SignalSemListSize, int, 0644);
+MODULE_PARM_DESC(SignalSemListSize, "");
+static int CDPollingInterval = SDBUS_DEFAULT_CD_POLLING_INTERVAL;
+module_param(CDPollingInterval, int, 0644);
+MODULE_PARM_DESC(CDPollingInterval, "");
+static int DefaultOperBlockLen = SDMMC_DEFAULT_BYTES_PER_BLOCK;
+module_param(DefaultOperBlockLen, int, 0644);
+MODULE_PARM_DESC(DefaultOperBlockLen, "operational block length");
+static int DefaultOperBlockCount = SDMMC_DEFAULT_BLOCKS_PER_TRANS;
+module_param(DefaultOperBlockCount, int, 0644);
+MODULE_PARM_DESC(DefaultOperBlockCount, "operational block count");
+static int ConfigFlags = BD_DEFAULT_CONFIG_FLAGS;
+module_param(ConfigFlags, int, 0644);
+MODULE_PARM_DESC(ConfigFlags, "config flags");
+
+static int HcdRCount = MAX_HCD_REQ_RECURSION;
+module_param(HcdRCount, int, 0644);
+MODULE_PARM_DESC(HcdRCount, "HCD request recursion count");
+
+static void CardDetect_WorkItem(
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,19)
+void *context); 
+#else
+struct work_struct *ignored);
+#endif
+static void CardDetect_TimerFunc(unsigned long Context);
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)
+static DECLARE_WORK(CardDetectPollWork, CardDetect_WorkItem
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,19)
+, 0);
+#else
+);
+#endif
+#endif
+static int RegisterDriver(PSDFUNCTION pFunction);
+static int UnregisterDriver(PSDFUNCTION pFunction);
+
+static struct timer_list CardDetectTimer; 
+
+#define SDDEVICE_FROM_OSDEVICE(pOSDevice)  container_of(pOSDevice, SDDEVICE, Device)
+#define SDFUNCTION_FROM_OSDRIVER(pOSDriver)  container_of(pOSDriver, SDFUNCTION, Driver)
+
+
+/* 
+ * SDIO_RegisterHostController - register a host controller bus driver
+*/
+SDIO_STATUS SDIO_RegisterHostController(PSDHCD pHcd) {
+    /* we are the exported verison, call the internal verison */
+    return _SDIO_RegisterHostController(pHcd);
+}
+
+/* 
+ * SDIO_UnregisterHostController - unregister a host controller bus driver
+*/
+SDIO_STATUS SDIO_UnregisterHostController(PSDHCD pHcd) {
+    /* we are the exported verison, call the internal verison */
+    return _SDIO_UnregisterHostController(pHcd);
+}
+
+/* 
+ * SDIO_RegisterFunction - register a function driver
+*/
+SDIO_STATUS SDIO_RegisterFunction(PSDFUNCTION pFunction) {
+    int error;
+    SDIO_STATUS status;
+
+    DBG_PRINT(SDDBG_TRACE, ("SDIO BusDriver - SDIO_RegisterFunction\n"));
+    
+        /* since we do PnP registration first, we need to check the version */
+    if (!CHECK_FUNCTION_DRIVER_VERSION(pFunction)) {
+        DBG_PRINT(SDDBG_ERROR, 
+           ("SDIO Bus Driver: Function Major Version Mismatch (hcd = %d, bus driver = %d)\n",
+           GET_SDIO_STACK_VERSION_MAJOR(pFunction), CT_SDIO_STACK_VERSION_MAJOR(g_Version)));
+        return SDIO_STATUS_INVALID_PARAMETER;       
+    }
+    
+    /* we are the exported verison, call the internal verison after registering with the bus
+       we handle probes internally to the bus driver */
+    if ((error = RegisterDriver(pFunction)) < 0) {
+        DBG_PRINT(SDDBG_ERROR, 
+            ("SDIO BusDriver - SDIO_RegisterFunction, failed to register with system bus driver: %d\n",
+            error)); 
+        status = OSErrorToSDIOError(error);       
+    } else {
+        status = _SDIO_RegisterFunction(pFunction);
+        if (!SDIO_SUCCESS(status)) {
+            UnregisterDriver(pFunction);   
+        }
+    }
+    
+    return status;
+}
+
+/* 
+ * SDIO_UnregisterFunction - unregister a function driver
+*/
+SDIO_STATUS SDIO_UnregisterFunction(PSDFUNCTION pFunction) {
+    SDIO_STATUS status;
+    /* we are the exported verison, call the internal verison */
+    status = _SDIO_UnregisterFunction(pFunction);
+    UnregisterDriver(pFunction);
+    return  status;
+}
+
+/* 
+ * SDIO_HandleHcdEvent - tell core an event occurred
+*/
+SDIO_STATUS SDIO_HandleHcdEvent(PSDHCD pHcd, HCD_EVENT Event) {
+    /* we are the exported verison, call the internal verison */
+    DBG_PRINT(SDIODBG_HCD_EVENTS, ("SDIO Bus Driver: SDIO_HandleHcdEvent, event type 0x%X, HCD:0x%X\n", 
+                         Event, (UINT)pHcd));
+    return _SDIO_HandleHcdEvent(pHcd, Event);
+}	
+
+/* get default settings */
+SDIO_STATUS _SDIO_BusGetDefaultSettings(PBDCONTEXT pBdc)
+{
+    /* these defaults are module params */  
+    pBdc->RequestRetries = RequestRetries;
+    pBdc->CardReadyPollingRetry = CardReadyPollingRetry;
+    pBdc->PowerSettleDelay = PowerSettleDelay;
+    pBdc->DefaultOperClock = DefaultOperClock;
+    pBdc->DefaultBusMode = DefaultBusMode;
+    pBdc->RequestListSize = RequestListSize;
+    pBdc->SignalSemListSize = SignalSemListSize;
+    pBdc->CDPollingInterval = CDPollingInterval;
+    pBdc->DefaultOperBlockLen = DefaultOperBlockLen;
+    pBdc->DefaultOperBlockCount = DefaultOperBlockCount;
+    pBdc->ConfigFlags = ConfigFlags;
+    pBdc->MaxHcdRecursion = HcdRCount;
+    return SDIO_STATUS_SUCCESS;  
+}
+                                  
+static void CardDetect_TimerFunc(unsigned long Context)
+{  
+    DBG_PRINT(SDIODBG_CD_TIMER, ("+ SDIO BusDriver Card Detect Timer\n"));
+    
+        /* timers run in an ISR context and cannot block or sleep, so we need
+         * to queue a work item to call the bus driver timer notification */    
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)
+    if (schedule_work(&CardDetectPollWork) <= 0) {
+        DBG_PRINT(SDDBG_ERROR, ("Failed to queue Card Detect timer!\n"));
+    }    
+#else
+    CardDetect_WorkItem(NULL);
+#endif    
+    DBG_PRINT(SDIODBG_CD_TIMER, ("- SDIO BusDriver  Card Detect Timer\n"));
+}
+
+/*
+ * Initialize any timers we are using
+*/
+SDIO_STATUS InitializeTimers(void)
+{
+    init_timer(&CardDetectTimer);        
+    CardDetectTimer.function = CardDetect_TimerFunc;
+    CardDetectTimer.data = 0;  
+    return SDIO_STATUS_SUCCESS;  
+}
+
+/*
+ * cleanup timers
+*/
+SDIO_STATUS CleanupTimers(void)
+{
+    del_timer(&CardDetectTimer);   
+    return SDIO_STATUS_SUCCESS;  
+}
+
+
+/*
+ * Queue a timer, Timeout is in milliseconds
+*/
+SDIO_STATUS QueueTimer(INT TimerID, UINT32 TimeOut)
+{
+    UINT32 delta;
+    
+        /* convert timeout to ticks */
+    delta = (TimeOut * HZ)/1000;
+    if (delta == 0) {
+        delta = 1;  
+    }
+    DBG_PRINT(SDIODBG_CD_TIMER, ("SDIO BusDriver - SDIO_QueueTimer System Ticks Per Sec:%d \n",HZ)); 
+    DBG_PRINT(SDIODBG_CD_TIMER, ("SDIO BusDriver - SDIO_QueueTimer TimerID: %d TimeOut:%d MS, requires %d Ticks\n",
+                TimerID,TimeOut,delta)); 
+    switch (TimerID) {      
+        case SDIOBUS_CD_TIMER_ID:  
+            CardDetectTimer.expires = jiffies + delta;
+            add_timer(&CardDetectTimer);          
+            break;
+        default:
+            return SDIO_STATUS_INVALID_PARAMETER;
+    }
+      
+    return SDIO_STATUS_SUCCESS;  
+}
+
+/* check a response on behalf of the host controller, to allow it to proceed with a 
+ * data transfer */
+SDIO_STATUS SDIO_CheckResponse(PSDHCD pHcd, PSDREQUEST pReq, SDHCD_RESPONSE_CHECK_MODE CheckMode)
+{
+    return _SDIO_CheckResponse(pHcd,pReq,CheckMode);  
+}
+
+/*
+ * CardDetect_WorkItem - the work item for handling card detect polling interrupt
+*/
+static void CardDetect_WorkItem(
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,19)
+void *context)
+#else
+struct work_struct *ignored)
+#endif
+{
+        /* call bus driver function */  
+    SDIO_NotifyTimerTriggered(SDIOBUS_CD_TIMER_ID);    
+}
+
+/*
+ * OS_IncHcdReference - increment host controller driver reference count
+*/
+SDIO_STATUS Do_OS_IncHcdReference(PSDHCD pHcd)
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    
+    do {
+        if (NULL == pHcd->pModule) {
+                /* hcds that are 2.3 or higher should set this */
+            DBG_PRINT(SDDBG_WARN, ("SDIO Bus Driver: HCD:%s should set module ptr!\n",
+                (pHcd->pName != NULL) ? pHcd->pName : "Unknown")); 
+            break;    
+        }        
+
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)       
+        if (!try_module_get(pHcd->pModule)) {
+            status = SDIO_STATUS_ERROR;   
+        }
+#else 
+        if (!try_inc_mod_count(pHcd->pModule)) {
+            status = SDIO_STATUS_ERROR;     
+        }
+#endif
+        
+    } while (FALSE);
+    
+    if (!SDIO_SUCCESS(status)) {
+        DBG_PRINT(SDDBG_WARN, ("SDIO Bus Driver: HCD:%s failed to get module\n",
+            (pHcd->pName != NULL) ? pHcd->pName : "Unknown")); 
+    }
+                
+    return status;
+}
+
+/*
+ * OS_DecHcdReference - decrement host controller driver reference count
+*/
+SDIO_STATUS Do_OS_DecHcdReference(PSDHCD pHcd)
+{
+    if (pHcd->pModule != NULL) {
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)
+        module_put(pHcd->pModule);   
+#else
+            /* 2.4 or lower */
+        __MOD_DEC_USE_COUNT(pHcd->pModule);
+#endif
+    }
+    return SDIO_STATUS_SUCCESS;
+}
+
+/****************************************************************************************/
+
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)
+#include <linux/pnp.h>
+
+#if !defined(CONFIG_PNP)
+#error "CONFIG_PNP not defined"
+#endif
+
+static ULONG InUseDevices = 0;
+static spinlock_t InUseDevicesLock = SPIN_LOCK_UNLOCKED;
+
+static const struct pnp_device_id pnp_idtable[] = {
+    {"SD_XXXX",  0}
+};
+static int sdio_get_resources(struct pnp_dev * pDev, struct pnp_resource_table * res)
+{
+    DBG_PRINT(SDDBG_TRACE, 
+        ("SDIO BusDriver - sdio_get_resources: %s\n",
+        pDev->dev.bus_id));
+    return 0;
+}
+static int sdio_set_resources(struct pnp_dev * pDev, struct pnp_resource_table * res)
+{
+    DBG_PRINT(SDDBG_TRACE, 
+        ("SDIO BusDriver - sdio_set_resources: %s\n",
+        pDev->dev.bus_id));
+    return 0;
+}
+
+static int sdio_disable_resources(struct pnp_dev *pDev)
+{
+    DBG_PRINT(SDDBG_TRACE, 
+        ("SDIO BusDriver - sdio_disable_resources: %s\n",
+        pDev->dev.bus_id));
+    if (pDev != NULL) {
+        pDev->active = 0;
+    }
+    return 0;
+}
+void    release(struct device * pDev) {
+    DBG_PRINT(SDDBG_TRACE, 
+        ("SDIO BusDriver - release: %s\n",
+        pDev->bus_id));
+    return;
+}
+struct pnp_protocol sdio_protocol = {
+    .name   = "SDIO",
+    .get    = sdio_get_resources,
+    .set    = sdio_set_resources,
+    .disable = sdio_disable_resources,
+    .dev.release = release,
+};
+
+/* 
+ * driver_probe - probe for OS based driver
+*/
+static int driver_probe(struct pnp_dev* pOSDevice, const struct pnp_device_id *pId)
+{
+    PSDDEVICE pDevice = SDDEVICE_FROM_OSDEVICE(pOSDevice);
+    PSDFUNCTION pFunction = pDevice->Device.dev.driver_data;
+
+    if (pFunction == NULL) {
+        return -1;
+    }
+    
+    if (strcmp(pFunction->pName, pOSDevice->dev.driver->name) == 0) {
+        DBG_PRINT(SDDBG_TRACE, 
+            ("SDIO BusDriver - driver_probe, match: %s/%s driver: %s\n",
+            pOSDevice->dev.bus_id, pFunction->pName, pOSDevice->dev.driver->name));
+        return 1;
+    } else {
+        DBG_PRINT(SDDBG_TRACE, 
+            ("SDIO BusDriver - driver_probe, no match: %s/%s driver: %s\n",
+            pOSDevice->dev.bus_id, pFunction->pName, pOSDevice->dev.driver->name));
+        return -1;
+    }        
+/*    if (pOSDevice->id != NULL) {
+        if (strcmp(pOSDevice->id->id, pId->id) == 0) {
+            DBG_PRINT(SDDBG_TRACE, 
+                ("SDIO BusDriver - driver_probe, match: %s/%s\n",
+                pOSDevice->dev.bus_id, pId->id));
+            return 1;
+        }
+        DBG_PRINT(SDDBG_TRACE, 
+            ("SDIO BusDriver - driver_probe, did not match: %s/%s/%s\n",
+            pOSDevice->dev.bus_id, pId->id, pOSDevice->id->id));
+    } else {
+        DBG_PRINT(SDDBG_TRACE, 
+            ("SDIO BusDriver - driver_probe, did not match: %s/%s\n",
+            pOSDevice->dev.bus_id, pId->id));
+    }
+    return -1;
+*/    
+//??    if (pDevice->Device.dev.driver_data != NULL) {
+//??        if (pDevice->Device.dev.driver_data == pFunction) {
+//??    if (pDevice->Device.data != NULL) {
+//??        if (pDevice->Device.data == pFunction) {
+//??            DBG_PRINT(SDDBG_TRACE, 
+//??                ("SDIO BusDriver - driver_probe, match: %s\n",
+//??                pOSDevice->dev.bus_id));
+//??            return 1;
+//??        }
+//??    }
+   DBG_PRINT(SDDBG_TRACE, 
+        ("SDIO BusDriver - driver_probe,  match: %s\n",
+        pOSDevice->dev.bus_id));
+    return 1;
+}
+
+static int RegisterDriver(PSDFUNCTION pFunction)
+{
+    memset(&pFunction->Driver, 0, sizeof(pFunction->Driver));
+    pFunction->Driver.name = pFunction->pName;
+    pFunction->Driver.probe = driver_probe;
+    pFunction->Driver.id_table = pnp_idtable;
+    pFunction->Driver.flags = PNP_DRIVER_RES_DO_NOT_CHANGE;
+    
+    DBG_PRINT(SDDBG_TRACE, 
+            ("SDIO BusDriver - SDIO_RegisterFunction, registering driver: %s\n",
+            pFunction->Driver.name));
+    return pnp_register_driver(&pFunction->Driver);
+}
+
+static int UnregisterDriver(PSDFUNCTION pFunction)
+{
+    DBG_PRINT(SDDBG_TRACE, 
+            ("+SDIO BusDriver - UnregisterDriver, driver: %s\n",
+            pFunction->Driver.name));
+    pnp_unregister_driver(&pFunction->Driver);
+    DBG_PRINT(SDDBG_TRACE, 
+            ("-SDIO BusDriver - UnregisterDriver\n"));
+   return 0;
+}
+
+/*
+ * OS_InitializeDevice - initialize device that will be registered
+*/
+SDIO_STATUS OS_InitializeDevice(PSDDEVICE pDevice, PSDFUNCTION pFunction) 
+{
+    struct pnp_id *pFdname;
+    memset(&pDevice->Device, 0, sizeof(pDevice->Device));
+    pDevice->Device.dev.driver_data = (PVOID)pFunction;
+//??    pDevice->Device.data = (PVOID)pFunction;
+//??    pDevice->Device.dev.driver = &pFunction->Driver.driver;
+//??    pDevice->Device.driver = &pFunction->Driver;
+//??    pDevice->Device.dev.release = release;
+    /* get a unique device number, must be done with locks held */
+    spin_lock(&InUseDevicesLock);
+    pDevice->Device.number = FirstClearBit(&InUseDevices);
+    SetBit(&InUseDevices, pDevice->Device.number);
+    spin_unlock(&InUseDevicesLock);
+    pDevice->Device.capabilities = PNP_REMOVABLE | PNP_DISABLE;
+    pDevice->Device.protocol = &sdio_protocol;
+    pDevice->Device.active = 1;
+    
+    pnp_init_resource_table(&pDevice->Device.res);
+    
+    pFdname = KernelAlloc(sizeof(struct pnp_id));
+    
+    if (NULL == pFdname) {
+        return SDIO_STATUS_NO_RESOURCES; 
+    }
+    /* set the id as slot number/function number */
+    snprintf(pFdname->id, sizeof(pFdname->id), "SD_%02X%02X", 
+             pDevice->pHcd->SlotNumber, (UINT)SDDEVICE_GET_SDIO_FUNCNO(pDevice));
+    pFdname->next = NULL;   
+    DBG_PRINT(SDDBG_TRACE, ("SDIO BusDriver - OS_InitializeDevice adding id: %s\n",
+                             pFdname->id));
+    pnp_add_id(pFdname, &pDevice->Device);
+    
+        /* deal with DMA settings */
+    if (pDevice->pHcd->pDmaDescription != NULL) {
+        pDevice->Device.dev.dma_mask = &pDevice->pHcd->pDmaDescription->Mask;  
+        pDevice->Device.dev.coherent_dma_mask = pDevice->pHcd->pDmaDescription->Mask; 
+    }
+    
+    return SDIO_STATUS_SUCCESS;
+}
+
+/*
+ * OS_AddDevice - must be pre-initialized with OS_InitializeDevice
+*/
+SDIO_STATUS OS_AddDevice(PSDDEVICE pDevice, PSDFUNCTION pFunction) 
+{
+    int error; 
+    DBG_PRINT(SDDBG_TRACE, ("SDIO BusDriver - OS_AddDevice adding function: %s\n",
+                               pFunction->pName));
+    error = pnp_add_device(&pDevice->Device);
+    if (error < 0) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO BusDriver - OS_AddDevice failed pnp_add_device: %d\n",
+                               error));
+    }
+        /* replace the buggy pnp's release */
+    pDevice->Device.dev.release = release;
+    
+    return OSErrorToSDIOError(error);
+}
+
+/*
+ * OS_RemoveDevice - unregister device with driver and bus
+*/
+void OS_RemoveDevice(PSDDEVICE pDevice) 
+{
+    DBG_PRINT(SDDBG_TRACE, ("SDIO BusDriver - OS_RemoveDevice \n"));
+    pnp_remove_device(&pDevice->Device);
+    spin_lock(&InUseDevicesLock);
+    ClearBit(&InUseDevices, pDevice->Device.number);
+    spin_unlock(&InUseDevicesLock);
+    
+    if (pDevice->Device.id != NULL) {
+        KernelFree(pDevice->Device.id);
+        pDevice->Device.id = NULL;
+    }
+}
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Add OS device to bus driver.
+
+  @function name: SDIO_BusAddOSDevice 
+  @category: HD_Reference
+  
+  @output: pDma    - descrip[tion of support DMA or NULL
+  @output: pDriver - assigned driver object
+  @output: pDevice - assigned device object
+ 
+  @return: SDIO_STATUS - SDIO_STATUS_SUCCESS when successful.
+ 
+  @notes: If the HCD does not register with the driver sub-system directly (like in the PCI case), 
+          then it should register with the bus driver to obtain OS dependent device objects.
+          All input structures should be maintained throughout the life of the driver.
+ 
+  @example: getting device objects: 
+    typedef struct _SDHCD_DRIVER {
+        OS_PNPDEVICE   HcdDevice;     / * the OS device for this HCD * /
+        OS_PNPDRIVER   HcdDriver;     / * the OS driver for this HCD * / 
+        SDDMA_DESCRIPTION Dma;        / * driver DMA description * /
+    }SDHCD_DRIVER, *PSDHCD_DRIVER;
+    
+    typedef struct _SDHCD_DRIVER_CONTEXT {
+        PTEXT        pDescription;       / * human readable device decsription * /
+        SDLIST       DeviceList;         / * the list of current devices handled by this driver * /
+        OS_SEMAPHORE DeviceListSem;      / * protection for the DeviceList * /
+        UINT         DeviceCount;        / * number of devices currently installed * /     
+        SDHCD_DRIVER Driver;             / * OS dependent driver specific info * /  
+    }SDHCD_DRIVER_CONTEXT, *PSDHCD_DRIVER_CONTEXT;
+   
+    static SDHCD_DRIVER_CONTEXT HcdContext = {
+        .pDescription  = DESCRIPTION,
+        .DeviceCount   = 0,
+        .Driver.HcdDevice.name = "sdio_xxx_hcd",
+        .Driver.HcdDriver.name = "sdio_xxx_hcd",
+    }
+    .....
+    status = SDIO_BusAddOSDevice(NULL, &HcdContext.Driver, &HcdContext.Device);
+    if (SDIO_SUCCESS(status) {
+        return Probe(&HcdContext.Device);
+    }
+    return SDIOErrorToOSError(status);
+        
+  @see also: SDIO_BusRemoveOSDevice
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS SDIO_BusAddOSDevice(PSDDMA_DESCRIPTION pDma, POS_PNPDRIVER pDriver, POS_PNPDEVICE pDevice) 
+{
+    int err;
+    struct pnp_id *pFdname;
+    struct pnp_device_id *pFdid;
+    static int slotNumber = 0; /* we just use an increasing count for the slots number */
+    
+    if (pDma != NULL) {
+        pDevice->dev.dma_mask = &pDma->Mask;
+        pDevice->dev.coherent_dma_mask = pDma->Mask;
+    }        
+    DBG_PRINT(SDDBG_ERROR, 
+            ("SDIO BusDriver - SDIO_GetBusOSDevice, registering driver: %s DMAmask: 0x%x\n",
+            pDriver->name, (UINT)*pDevice->dev.dma_mask));
+    pFdid = KernelAlloc(sizeof(struct pnp_device_id)*2);
+    /* set the id as slot number/function number */
+    snprintf(pFdid[0].id, sizeof(pFdid[0].id), "SD_%02X08", 
+             slotNumber++); 
+    pFdid[0].driver_data = 0;    
+    pFdid[1].id[0] = '\0';
+    pFdid[1].driver_data = 0;    
+             
+    pDriver->id_table = pFdid;
+    pDriver->flags = PNP_DRIVER_RES_DO_NOT_CHANGE;
+    err = pnp_register_driver(pDriver);
+    if (err < 0) {
+        DBG_PRINT(SDDBG_ERROR, 
+            ("SDIO BusDriver - SDIO_GetBusOSDevice, failed registering driver: %s, err: %d\n",
+            pDriver->name, err));
+        return OSErrorToSDIOError(err);    
+    }
+    
+    pDevice->protocol = &sdio_protocol;
+    pDevice->capabilities = PNP_REMOVABLE | PNP_DISABLE;
+    pDevice->active = 1;
+    
+    pFdname = KernelAlloc(sizeof(struct pnp_id));
+    /* set the id as slot number/function number */
+    snprintf(pFdname->id, sizeof(pFdname->id), "SD_%02X08", 
+             0); //??pDevice->pHcd->SlotNumber);//?????fix this, slotnumber isn't vaialble yet
+    pFdname->next = NULL;    
+    pnp_add_id(pFdname, pDevice);
+    
+    /* get a unique device number */
+    spin_lock(&InUseDevicesLock);
+    pDevice->number = FirstClearBit(&InUseDevices);
+    SetBit(&InUseDevices, pDevice->number);
+    spin_unlock(&InUseDevicesLock);
+    pnp_init_resource_table(&pDevice->res);
+    err = pnp_add_device(pDevice);
+    if (err < 0) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO BusDriver - SDIO_GetBusOSDevice failed pnp_device_add: %d\n",
+                               err));
+        pnp_unregister_driver(pDriver);
+    }
+    /* replace the buggy pnp's release */
+    pDevice->dev.release = release;
+    return OSErrorToSDIOError(err);
+}
+
+/**+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Return OS device from bus driver.
+
+  @function name: SDIO_BusRemoveOSDevice 
+  @category: HD_Reference
+  
+  @input: pDriver - setup PNP driver object
+  @input: pDevice - setup PNP device object
+ 
+  @return: none
+ 
+ 
+  @example: returning device objects:  
+        SDIO_BusRemoveOSDevice(&HcdContext.Driver, &HcdContext.Device);
+
+        
+  @see also: SDIO_BusAddOSDevice
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void SDIO_BusRemoveOSDevice(POS_PNPDRIVER pDriver, POS_PNPDEVICE pDevice) 
+{
+    DBG_PRINT(SDDBG_ERROR, 
+            ("SDIO BusDriver - SDIO_PutBusOSDevice, unregistering driver: %s\n",
+            pDriver->name));
+          
+    pnp_remove_device(pDevice);
+    if (pDevice->id != NULL) {
+        KernelFree(pDevice->id);
+        pDevice->id = NULL;
+    }
+    
+    spin_lock(&InUseDevicesLock);
+    ClearBit(&InUseDevices, pDevice->number);
+    spin_unlock(&InUseDevicesLock);
+    
+    pnp_unregister_driver(pDriver);
+    if (pDriver->id_table != NULL) {
+        KernelFree((void *)pDriver->id_table);
+        pDriver->id_table = NULL;
+    }
+    
+}
+
+
+/*
+ * module init
+*/
+static int __init sdio_busdriver_init(void) {
+    SDIO_STATUS status; 
+    int error;
+    REL_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: loaded\n"));
+    if (!SDIO_SUCCESS((status = _SDIO_BusDriverInitialize()))) {
+        return SDIOErrorToOSError(status);
+    }
+    /* register the sdio bus */
+    error = pnp_register_protocol(&sdio_protocol);
+    if (error < 0) {
+        REL_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: failed to register bus device, %d\n", error));
+        _SDIO_BusDriverCleanup();
+        return error;
+    }
+    return 0;
+}
+
+/*
+ * module cleanup
+*/
+static void __exit sdio_busdriver_cleanup(void) {
+    REL_PRINT(SDDBG_TRACE, ("SDIO unloaded\n"));
+    _SDIO_BusDriverCleanup();
+    pnp_unregister_protocol(&sdio_protocol);
+DBG_PRINT(SDDBG_TRACE, 
+            ("SDIO BusDriver - unloaded 1\n"));
+}
+EXPORT_SYMBOL(SDIO_BusAddOSDevice);
+EXPORT_SYMBOL(SDIO_BusRemoveOSDevice);
+
+#elif LINUX_VERSION_CODE < KERNEL_VERSION(2,6,0)
+    /* 2.4 */
+static int RegisterDriver(PSDFUNCTION pFunction)
+{
+    return 0;
+}
+
+static int UnregisterDriver(PSDFUNCTION pFunction)
+{
+    DBG_PRINT(SDDBG_TRACE, 
+            ("+-SDIO BusDriver - UnregisterDriver, driver: \n"));
+   return 0;
+}
+
+/*
+ * OS_InitializeDevice - initialize device that will be registered
+*/
+SDIO_STATUS OS_InitializeDevice(PSDDEVICE pDevice, PSDFUNCTION pFunction) 
+{
+    return SDIO_STATUS_SUCCESS;
+}
+
+/*
+ * OS_AddDevice - must be pre-initialized with OS_InitializeDevice
+*/
+SDIO_STATUS OS_AddDevice(PSDDEVICE pDevice, PSDFUNCTION pFunction) 
+{
+    DBG_PRINT(SDDBG_TRACE, ("SDIO BusDriver - OS_AddDevice adding function: %s\n",
+                               pFunction->pName));
+    return SDIO_STATUS_SUCCESS;
+
+}
+
+/*
+ * OS_RemoveDevice - unregister device with driver and bus
+*/
+void OS_RemoveDevice(PSDDEVICE pDevice) 
+{
+    DBG_PRINT(SDDBG_TRACE, ("SDIO BusDriver - OS_RemoveDevice \n"));
+}
+
+/*
+ * module init
+*/
+static int __init sdio_busdriver_init(void) {
+    SDIO_STATUS status; 
+    REL_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: loaded\n"));
+    if (!SDIO_SUCCESS((status = _SDIO_BusDriverInitialize()))) {
+        return SDIOErrorToOSError(status);
+    }
+    return 0;
+}
+
+/*
+ * module cleanup
+*/
+static void __exit sdio_busdriver_cleanup(void) {
+    REL_PRINT(SDDBG_TRACE, ("SDIO unloaded\n"));
+    _SDIO_BusDriverCleanup();
+}
+#else  ////KERNEL_VERSION
+#error "unsupported kernel version: "UTS_RELEASE
+#endif //KERNEL_VERSION
+
+MODULE_LICENSE("GPL and additional rights");
+MODULE_DESCRIPTION(DESCRIPTION);
+MODULE_AUTHOR(AUTHOR);
+
+module_init(sdio_busdriver_init);
+module_exit(sdio_busdriver_cleanup);
+EXPORT_SYMBOL(SDIO_RegisterHostController);
+EXPORT_SYMBOL(SDIO_UnregisterHostController);
+EXPORT_SYMBOL(SDIO_HandleHcdEvent);
+EXPORT_SYMBOL(SDIO_CheckResponse);
+EXPORT_SYMBOL(SDIO_RegisterFunction);
+EXPORT_SYMBOL(SDIO_UnregisterFunction);

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_bus.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_bus.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_bus.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,2120 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_bus.c
+
+ at abstract: OS independent bus driver support
+ at category abstract: HD_Reference Host Controller Driver Interfaces.
+ at category abstract: PD_Reference
+    Peripheral Driver Interfaces.
+
+#notes: this file supports the HCD's and generic functions 
+
+ at notice: Copyright (c), 2004-2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define MODULE_NAME  SDBUSDRIVER
+#include "../include/ctsystem.h"
+#include "../include/sdio_busdriver.h"
+#include "../include/_sdio_defs.h"
+#include "../include/sdio_lib.h"
+#include "../include/mmc_defs.h"
+#include "_busdriver.h"
+
+/* list of host controller bus drivers */
+PBDCONTEXT pBusContext = NULL;
+static void CleanUpBusResources(void);
+static SDIO_STATUS AllocateBusResources(void);
+static PSIGNAL_ITEM BuildSignal(void);
+static void DestroySignal(PSIGNAL_ITEM pSignal);
+
+const CT_VERSION_CODE g_Version = CT_SDIO_STACK_VERSION_CODE;
+/* 
+ * _SDIO_BusDriverInitialize - call once on driver loading
+ * 
+*/
+SDIO_STATUS _SDIO_BusDriverInitialize(void) 
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    
+    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Version: %d.%d\n",
+       CT_SDIO_STACK_VERSION_MAJOR(g_Version),CT_SDIO_STACK_VERSION_MINOR(g_Version)));
+    
+    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: enter _SDIO_BusDriverInitialize\n"));
+    
+    do {
+        /* allocate our internal data initialize it */
+        pBusContext = KernelAlloc(sizeof(BDCONTEXT));
+        if (pBusContext == NULL) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: _SDIO_BusDriverInitialize can't allocate memory.\n"));
+            status = SDIO_STATUS_NO_RESOURCES;
+            break;
+        } 
+        memset(pBusContext,0,sizeof(BDCONTEXT));
+        SDLIST_INIT(&pBusContext->RequestList);
+        SDLIST_INIT(&pBusContext->HcdList);
+        SDLIST_INIT(&pBusContext->DeviceList);
+        SDLIST_INIT(&pBusContext->FunctionList);
+        SDLIST_INIT(&pBusContext->SignalList);
+        
+            /* setup defaults */
+        pBusContext->RequestRetries = SDMMC_DEFAULT_CMD_RETRIES;
+        pBusContext->CardReadyPollingRetry = SDMMC_DEFAULT_CARD_READY_RETRIES;
+        pBusContext->PowerSettleDelay = SDMMC_POWER_SETTLE_DELAY;
+        pBusContext->DefaultOperClock = MMC_HS_MAX_BUS_CLOCK;
+        pBusContext->DefaultBusMode = SDCONFIG_BUS_WIDTH_4_BIT;
+        pBusContext->RequestListSize = SDBUS_DEFAULT_REQ_LIST_SIZE;
+        pBusContext->SignalSemListSize = SDBUS_DEFAULT_REQ_SIG_SIZE;
+        pBusContext->CDPollingInterval = SDBUS_DEFAULT_CD_POLLING_INTERVAL;
+        pBusContext->DefaultOperBlockLen = SDMMC_DEFAULT_BYTES_PER_BLOCK;
+        pBusContext->DefaultOperBlockCount = SDMMC_DEFAULT_BLOCKS_PER_TRANS;
+        pBusContext->ConfigFlags = BD_DEFAULT_CONFIG_FLAGS;
+        pBusContext->CMD13PollingMultiplier = SDMMC_CMD13_POLLING_MULTIPLIER;      
+        pBusContext->MaxHcdRecursion = MAX_HCD_REQ_RECURSION;
+        
+            /* get overrides for the defaults */
+        status = _SDIO_BusGetDefaultSettings(pBusContext);
+        if (!SDIO_SUCCESS(status)) {
+            break;
+        }  
+        
+        pBusContext->MaxRequestAllocations = pBusContext->RequestListSize << 1;
+        pBusContext->MaxSignalAllocations = pBusContext->SignalSemListSize << 1;
+              
+        status = CriticalSectionInit(&pBusContext->RequestListCritSection);
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: _SDIO_BusDriverInitialize can't CriticalSectionInit.\n"));
+            break;
+        }        
+        status = SemaphoreInitialize(&pBusContext->HcdListSem, 1);
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: _SDIO_BusDriverInitialize can't SemaphoreInitialize HcdListSem.\n"));
+            break; 
+        }       
+        status = SemaphoreInitialize(&pBusContext->DeviceListSem, 1);
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: _SDIO_BusDriverInitialize can't SemaphoreInitialize DeviceListSem.\n"));
+            break;
+        }        
+        status = SemaphoreInitialize(&pBusContext->FunctionListSem, 1);
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: _SDIO_BusDriverInitialize can't SemaphoreInitialize FunctionListSem.\n"));
+            break;
+        } 
+        status = AllocateBusResources();
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: _SDIO_BusDriverInitialize can't AllocateBusResources.\n"));
+            break;   
+        }
+                
+        pBusContext->InitMask |= RESOURCE_INIT;
+        
+        pBusContext->pCardDetectMsgQueue = SDLIB_CreateMessageQueue(MAX_CARD_DETECT_MSGS, 
+                                                                   sizeof(HCD_EVENT_MESSAGE));
+        
+        if (NULL == pBusContext->pCardDetectMsgQueue) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: _SDIO_BusDriverInitialize can't CreateMessageQueue.\n"));
+            status = SDIO_STATUS_NO_RESOURCES;
+            break;    
+        }
+        
+        status = SDLIB_OSCreateHelper(&pBusContext->CardDetectHelper,
+                                      CardDetectHelperFunction, 
+                                      NULL); 
+                                
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: _SDIO_BusDriverInitialize can't OSCreateHelper.\n"));
+            break;   
+        }
+        
+        pBusContext->InitMask |= HELPER_INIT;
+          
+        status = InitializeTimers();        
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: _SDIO_BusDriverInitialize can't InitializeTimers.\n"));
+            break;        
+        }
+        pBusContext->InitMask |= BD_TIMER_INIT;                 
+    } while(FALSE);
+
+    if (!SDIO_SUCCESS(status)) {
+        _SDIO_BusDriverCleanup();
+    }
+    
+    return status;    
+}
+
+
+/* 
+ * _SDIO_BusDriverBusDriverCleanup - call once on driver unloading
+ * 
+*/
+void _SDIO_BusDriverCleanup(void) {
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO Bus Driver: _SDIO_BusDriverCleanup\n"));
+    
+    if (pBusContext->InitMask & BD_TIMER_INIT) {
+        CleanupTimers();   
+    }
+    
+    if (pBusContext->InitMask & HELPER_INIT) {
+        SDLIB_OSDeleteHelper(&pBusContext->CardDetectHelper);
+    }
+    
+    if (pBusContext->pCardDetectMsgQueue != NULL) {
+        SDLIB_DeleteMessageQueue(pBusContext->pCardDetectMsgQueue);
+        pBusContext->pCardDetectMsgQueue = NULL;    
+    }
+        /* remove functions */
+    RemoveAllFunctions();
+        /* cleanup all devices */
+    DeleteDevices(NULL);
+    CleanUpBusResources(); 
+    CriticalSectionDelete(&pBusContext->RequestListCritSection);
+    SemaphoreDelete(&pBusContext->HcdListSem);
+    SemaphoreDelete(&pBusContext->DeviceListSem);
+    SemaphoreDelete(&pBusContext->FunctionListSem);
+    KernelFree(pBusContext);
+    pBusContext = NULL;
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO Bus Driver: _SDIO_BusDriverCleanup\n"));
+}
+
+
+/* cleanup hcd */
+static void CleanupHcd(PSDHCD pHcd) 
+{
+    SDLIB_OSDeleteHelper(&pHcd->SDIOIrqHelper);    
+    CleanupRequestQueue(&pHcd->CompletedRequestQueue);
+    CleanupRequestQueue(&pHcd->RequestQueue);
+    CriticalSectionDelete(&pHcd->HcdCritSection);
+    SemaphoreDelete(&pHcd->ConfigureOpsSem);
+    pHcd->pCurrentRequest = NULL;
+    if (pHcd->pPseudoDev != NULL) {
+        FreeDevice(pHcd->pPseudoDev);
+        pHcd->pPseudoDev = NULL;   
+    }
+}
+
+/* set up the hcd */
+static SDIO_STATUS SetupHcd(PSDHCD pHcd)
+{
+    SDIO_STATUS status;
+   
+    ZERO_POBJECT(&pHcd->SDIOIrqHelper);
+    ZERO_POBJECT(&pHcd->ConfigureOpsSem);
+    ZERO_POBJECT(&pHcd->HcdCritSection);
+    ZERO_POBJECT(&pHcd->RequestQueue);
+    ZERO_POBJECT(&pHcd->CompletedRequestQueue);
+    pHcd->pPseudoDev = NULL;
+    pHcd->Recursion = 0;
+    
+    do {
+       
+        pHcd->pPseudoDev = AllocateDevice(pHcd);
+       
+        if (NULL == pHcd->pPseudoDev) {
+            status = SDIO_STATUS_NO_RESOURCES;  
+            break;  
+        }
+        
+        ResetHcdState(pHcd); 
+        
+        status = SemaphoreInitialize(&pHcd->ConfigureOpsSem,1);
+        if (!SDIO_SUCCESS(status)) {
+            break;  
+        }
+        status = CriticalSectionInit(&pHcd->HcdCritSection);
+        if (!SDIO_SUCCESS(status)) {
+            break;  
+        }
+        status = InitializeRequestQueue(&pHcd->RequestQueue);
+        if (!SDIO_SUCCESS(status)) {            
+            break;  
+        } 
+        status = InitializeRequestQueue(&pHcd->CompletedRequestQueue);
+        if (!SDIO_SUCCESS(status)) {            
+            break;  
+        } 
+            /* create SDIO Irq helper */       
+        status = SDLIB_OSCreateHelper(&pHcd->SDIOIrqHelper,
+                                      SDIOIrqHelperFunction, 
+                                     (PVOID)pHcd);
+    } while(FALSE);
+                            
+    if (!SDIO_SUCCESS(status)) {
+            /* undo what we did */
+        CleanupHcd(pHcd);     
+    }
+    return status;
+}
+
+
+/* 
+ * _SDIO_RegisterHostController - register a host controller bus driver
+ * 
+*/
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Register a host controller driver with the bus driver.
+
+  @function name: SDIO_RegisterHostController 
+  @prototype: SDIO_STATUS SDIO_RegisterHostController (PSDHCD pHcd) 
+  @category: HD_Reference
+  
+  @input:  pHcd - the host controller definition structure.
+ 
+  @output: none
+
+  @return: SDIO_STATUS - SDIO_STATUS_SUCCESS when successful.
+ 
+  @notes: Each host controller driver must register with the bus driver when loaded. 
+          The driver registers an SDHCD structure initialized with hardware properties 
+          and callback functions for bus requests and configuration.  On multi-slot 
+          hardware ,each slot should be registered with a separate SDHCD structure.
+          The bus driver views each slot as a seperate host controller object.
+          The driver should be prepared to receive configuration requests before 
+          this call returns. The host controller driver must unregister itself when 
+          shutting down.
+ 
+  @example: Registering a host controller driver:  
+    static SDHCD Hcd = {
+       .pName = "sdio_custom_hcd",
+       .Version = CT_SDIO_STACK_VERSION_CODE,  // set stack version code
+       .SlotNumber = 0,                        // bus driver internal use
+       .Attributes = SDHCD_ATTRIB_BUS_1BIT | SDHCD_ATTRIB_BUS_4BIT | SDHCD_ATTRIB_MULTI_BLK_IRQ
+                     SDHCD_ATTRIB_AUTO_CMD12 ,
+       .MaxBytesPerBlock = 2048     // each data block can be up to 2048 bytes
+       .MaxBlocksPerTrans = 1024,   // each data transaction can consist of 1024 blocks
+       .MaxSlotCurrent = 500,       // max FET switch current rating
+       .SlotVoltageCaps = SLOT_POWER_3_3V,      // only 3.3V operation
+       .SlotVoltagePreferred = SLOT_POWER_3_3V,  
+       .MaxClockRate = 24000000,   // 24 Mhz max operation
+       .pContext = &HcdContext,    // set our driver context
+       .pRequest = HcdRequest,     // set SDIO bus request callback
+       .pConfigure = HcdConfig,    // set SDIO bus configuration callback
+    };    
+    if (!SDIO_SUCCESS((status = SDIO_RegisterHostController(&Hcd)))) {
+         DBG_PRINT(SDDBG_ERROR, ("SDIO HCD - failed to register with host, status =%d\n",
+                                    status));
+    } 
+        
+  @see also: SDIO_UnregisterHostController
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS _SDIO_RegisterHostController(PSDHCD pHcd) {
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO Bus Driver: _SDIO_RegisterHostController - %s\n",pHcd->pName));
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO Bus Driver: Host Controller Stack Version: %d.%d \n",
+        GET_SDIO_STACK_VERSION_MAJOR(pHcd),GET_SDIO_STACK_VERSION_MINOR(pHcd)));
+        
+    if (!CHECK_HCD_DRIVER_VERSION(pHcd)) {
+        DBG_PRINT(SDDBG_ERROR, 
+           ("SDIO Bus Driver: HCD Major Version Mismatch (hcd = %d, bus driver = %d)\n",
+           GET_SDIO_STACK_VERSION_MAJOR(pHcd), CT_SDIO_STACK_VERSION_MAJOR(g_Version)));
+        return SDIO_STATUS_INVALID_PARAMETER;       
+    }
+        /* setup hcd */
+    status = SetupHcd(pHcd);
+    if (!SDIO_SUCCESS(status)) {
+        return status;
+    } 
+        
+    do {        
+        INT slotNumber;            
+        
+            /* protect the HCD list */
+        if (!SDIO_SUCCESS((status = SemaphorePendInterruptable(&pBusContext->HcdListSem)))) {
+            break;  /* wait interrupted */
+        }
+            /* find a unique number for this HCD, must be done under semaphore protection */
+        slotNumber = FirstClearBit(&pBusContext->HcdInUseField);
+        if (slotNumber < 0) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: _SDIO_RegisterHostController, error, slotNumber exceeded\n"));
+            /* fake something */
+            slotNumber = 31;
+        }
+        SetBit(&pBusContext->HcdInUseField, slotNumber);
+        pHcd->SlotNumber = slotNumber;
+            /* add HCD to the end of the internal list */
+        SDListAdd(&pBusContext->HcdList , &pHcd->SDList);
+        if (!SDIO_SUCCESS((status = SemaphorePost(&pBusContext->HcdListSem)))) {
+            break;   /* wait interrupted */
+        }
+        if (pHcd->Attributes & SDHCD_ATTRIB_SLOT_POLLING) {
+                /* post message to card detect helper to do polling */
+            PostCardDetectEvent(pBusContext, EVENT_HCD_CD_POLLING, NULL);      
+        }
+    } while (FALSE);
+    
+    if (!SDIO_SUCCESS(status)) {
+       CleanupHcd(pHcd);
+       DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: _SDIO_RegisterHostController, error 0x%X.\n", status));
+    }
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO Bus Driver: _SDIO_RegisterHostController\n"));
+    return status;
+}
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Unregister a host controller driver with the bus driver.
+
+  @function name: SDIO_UnregisterHostController
+  @prototype: SDIO_STATUS SDIO_UnregisterHostController (PSDHCD pHcd) 
+  @category: HD_Reference
+ 
+  @input:  pHcd - the host controller definition structure that was registered.
+ 
+  @output: none
+
+  @return: SDIO_STATUS - SDIO_STATUS_SUCCESS when successful.
+ 
+  @notes: Each host controller driver must unregister with the bus driver when 
+          unloading. The driver is responsible for halting any outstanding I/O 
+          operations.  The bus driver will automatically unload function drivers
+          that may be attached assigned to cards inserted into slots.
+           
+  @example: Unregistering a host controller driver: 
+    if (!SDIO_SUCCESS((status = SDIO_UnregisterHostController(&Hcd)))) {
+         DBG_PRINT(SDDBG_ERROR, ("SDIO HCD - failed to unregister with host, status =%d\n",
+                                    status));
+    } 
+        
+  @see also: SDIO_RegisterHostController
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS _SDIO_UnregisterHostController(PSDHCD pHcd) {
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO Bus Driver: _SDIO_UnregisterHostController\n"));
+    
+        /* remove functions associated with the HCD */
+    RemoveHcdFunctions(pHcd);
+        /* remove any devices associated with the HCD */    
+    DeleteDevices(pHcd);
+    /* wait for the message queue to be empty, so we don't have any delayed requests going
+       to this device */
+    while(!SDLIB_IsQueueEmpty(pBusContext->pCardDetectMsgQueue)) {
+        /* wait for the messages to be handled */
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: _SDIO_UnregisterHostController, waiting on messages\n"));
+        OSSleep(250);
+    }
+
+    /* protect the HCD list */
+    if (!SDIO_SUCCESS((status = SemaphorePendInterruptable(&pBusContext->HcdListSem)))) {
+        goto cleanup;   /* wait interrupted */
+    }
+    ClearBit(&pBusContext->HcdInUseField, pHcd->SlotNumber);
+    /* delete HCD from list  */
+    SDListRemove(&pHcd->SDList);
+    if (!SDIO_SUCCESS((status = SemaphorePost(&pBusContext->HcdListSem)))) {
+        goto cleanup;   /* wait interrupted */
+    }
+        /* cleanup anything we allocated */
+    CleanupHcd(pHcd);
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO Bus Driver: _SDIO_UnregisterHostController\n"));
+    return status;
+cleanup:
+    DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: _SDIO_UnregisterHostController, error 0x%X.\n", status));
+    return status;
+}
+
+/* documentation headers only for Request and Configure */
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: The bus driver calls the request callback to start an SDIO bus transaction. 
+  @function name: Request
+  @prototype: SDIO_STATUS (*pRequest) (struct _SDHCD *pHcd)
+  @category: HD_Reference
+  
+  @input:  pHcd - the host controller structure that was registered
+  
+  @output: none
+
+  @return: SDIO_STATUS
+ 
+  @notes:  
+          The bus driver maintains an internal queue of SDREQUEST structures submited by function
+          drivers. The driver should use request macros to obtain a pointer to the current SDREQUEST 
+          at the head of the queue.  The driver can access the fields of the current request in order
+          to program hardware appropriately.   Once the request completes, the driver should update
+          the current request information (final status, response bytes and/or data) and call
+          SDIO_HandleHcdEvent() with the event type of EVENT_HCD_TRANSFER_DONE.
+          The bus driver will remove the current request from the head of the queue and start the next
+          request.
+  
+  @example: Example of a typical Request callback:
+  SDIO_STATUS HcdRequest(PSDHCD pHcd) 
+  {
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    PSDHCD_DRIVER_CONTEXT pHct = (PSDHCD_DRIVER_CONTEXT)pHcd->pContext;
+    UINT32                temp = 0;
+    PSDREQUEST            pReq;
+       // get the current request
+    pReq = GET_CURRENT_REQUEST(pHcd);
+    DBG_ASSERT(pReq != NULL);   
+       // get controller settings based on response type
+    switch (GET_SDREQ_RESP_TYPE(pReq->Flags)) {    
+        case SDREQ_FLAGS_NO_RESP:
+            break;
+        case SDREQ_FLAGS_RESP_R1:
+        case SDREQ_FLAGS_RESP_MMC_R4:        
+        case SDREQ_FLAGS_RESP_MMC_R5:
+        case SDREQ_FLAGS_RESP_R6:     
+        case SDREQ_FLAGS_RESP_SDIO_R5:  
+            temp |= CMDDAT_RES_R1_R4_R5;
+            break;
+        case SDREQ_FLAGS_RESP_R1B:
+            temp |= (CMDDAT_RES_R1_R4_R5 | CMDAT_RES_BUSY);
+            break;
+        case SDREQ_FLAGS_RESP_R2:
+            temp |= CMDDAT_RES_R2;
+            break;
+        case SDREQ_FLAGS_RESP_R3:
+        case SDREQ_FLAGS_RESP_SDIO_R4:
+            temp |= CMDDAT_RES_R3;
+            break;
+    }   
+        // check for data    
+    if (pReq->Flags & SDREQ_FLAGS_DATA_TRANS){
+        temp |= CMDDAT_DATA_EN; 
+        // set data remaining count
+        pReq->DataRemaining = pReq->BlockLen * pReq->BlockCount;
+        DBG_PRINT(TRACE_DATA, ("SDIO %s Data Transfer, Blocks:%d, BlockLen:%d, Total:%d \n",
+                    IS_SDREQ_WRITE_DATA(pReq->Flags) ? "TX":"RX",
+                    pReq->BlockCount, pReq->BlockLen, pReq->DataRemaining));
+        if (IS_SDREQ_WRITE_DATA(pReq->Flags)) {
+                // write operation
+        }
+    }
+    // .... program hardware, interrupt handler will complete request
+    return SDIO_STATUS_PENDING;
+  }
+        
+  @see also: SDIO_HandleHcdEvent
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: The bus driver calls the configure callback to set various options
+             and modes in the host controller hardware. 
+             
+  @function name: Configure
+  @prototype: SDIO_STATUS (*pConfigure) (struct _SDHCD *pHcd, PSDCONFIG pConfig)
+  @category: HD_Reference
+  
+  @input:  pHcd - the host controller structure that was registered
+  @input:  pConfig - configuration request structure
+  
+  @output: none
+
+  @return: SDIO_STATUS
+ 
+  @notes:  
+          The host controller driver recieves configuration requests for options
+          such as slot voltage, bus width, clock rates and interrupt detection.
+          The bus driver guarantees that only one configuration option request 
+          can be issued at a time.  
+  
+  @example: Example of a typical configure callback:
+  SDIO_STATUS HcdConfig(PSDHCD pHcd, PSDCONFIG pConfig) 
+  {
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    PSDHCD_DRIVER_CONTEXT pHct = (PSDHCD_DRIVER_CONTEXT)pHcd->pContext;
+    UINT16      command;
+        // get command
+    command = GET_SDCONFIG_CMD(pConfig);
+        // decode command
+    switch (command){
+        case SDCONFIG_GET_WP:
+            if (GetGpioPinLevel(pHct,SDIO_CARD_WP_GPIO) == WP_POLARITY) {
+                *((SDCONFIG_WP_VALUE *)pConfig->pData) = 1;
+            } else {
+                *((SDCONFIG_WP_VALUE *)pConfig->pData) = 0;  
+            }            
+            break;
+        case SDCONFIG_SEND_INIT_CLOCKS:
+            ClockStartStop(pHct,CLOCK_ON);
+                // sleep a little, should be at least 80 clocks at our lowest clock setting
+            status = OSSleep(100);
+            ClockStartStop(pHct,CLOCK_OFF);          
+            break;
+        case SDCONFIG_SDIO_INT_CTRL:
+            if (GET_SDCONFIG_CMD_DATA(PSDCONFIG_SDIO_INT_CTRL_DATA,pConfig)->SlotIRQEnable) {
+                // request to enable IRQ detection
+            } else {
+                // request to disable IRQ detectioon
+            }
+            break;
+        case SDCONFIG_SDIO_REARM_INT:
+                // request to re-arm the card IRQ detection logic
+            break;
+        case SDCONFIG_BUS_MODE_CTRL:
+                // request to set bus mode
+            {
+                // get bus mode data structure
+               PSDCONFIG_BUS_MODE_DATA pBusMode = 
+                      GET_SDCONFIG_CMD_DATA(PSDCONFIG_SDIO_INT_CTRL_DATA,pConfig);
+                // set bus mode based on settings in bus mode structure
+                // bus mode   :  pBusMode->BusModeFlags
+                // clock rate :  pBusMode->ClockRate 
+            }
+            break;
+        case SDCONFIG_POWER_CTRL:
+                // request to set power/voltage 
+            {
+                PSDCONFIG_POWER_CTRL_DATA pPowerSetting = 
+                       GET_SDCONFIG_CMD_DATA(PSDCONFIG_POWER_CTRL_DATA,pConfig);                       
+                if (pPowerSetting->SlotPowerEnable) {
+                    // turn on slot power
+                    //
+                } else {
+                    // turn off slot power
+                }       
+                DBG_PRINT(PXA_TRACE_CONFIG, ("SDIO PXA255 PwrControl: En:%d, VCC:0x%X \n",
+                      pPowerSetting->SlotPowerEnable,
+                      pPowerSetting->SlotPowerVoltageMask));
+            }
+            break;
+        default:
+            // unsupported
+            status = SDIO_STATUS_INVALID_PARAMETER;
+    }
+    return status;
+ } 
+    
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+
+
+/*
+ * Allocate a Device instance
+ */
+PSDDEVICE AllocateDevice(PSDHCD pHcd)
+{
+    PSDDEVICE pDevice;
+     
+    pDevice = KernelAlloc(sizeof(SDDEVICE));
+    if (pDevice != NULL) {
+        InitDeviceData(pHcd,pDevice);    
+    } 
+    return pDevice;
+}
+
+
+/*
+ * Free a Device instance
+ */
+void FreeDevice(PSDDEVICE pDevice)
+{
+    DeinitDeviceData(pDevice);
+    KernelFree(pDevice);
+}
+/* 
+ * add this device to the list
+ */
+BOOL AddDeviceToList(PSDDEVICE pDevice)
+{
+    BOOL success = FALSE;
+    
+    do {
+            /* protect the driver list */
+        if (!SDIO_SUCCESS(SemaphorePendInterruptable(&pBusContext->DeviceListSem))) {
+            break;   /* wait interrupted */
+        }
+        
+            /* add new device to the internal list */
+        SDListAdd(&pBusContext->DeviceList , &pDevice->SDList);
+        
+        if (!SDIO_SUCCESS(SemaphorePost(&pBusContext->DeviceListSem))) {
+            break;
+        }
+        
+        success = TRUE;
+    } while (FALSE);
+    
+    return success;
+}      
+
+/*
+ *  Delete device associated with the HCD
+ *  if pHCD is NULL this function cleans up all devices, the caller
+ *  better have cleaned up functions first! 
+ */
+SDIO_STATUS DeleteDevices(PSDHCD pHcd)
+{
+    SDIO_STATUS status;
+    PSDDEVICE   pDevice;
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO Bus Driver: DeleteDevices hcd:0x%X \n", (INT)pHcd));
+      /* protect the device list */
+    if (!SDIO_SUCCESS((status = SemaphorePendInterruptable(&pBusContext->DeviceListSem)))) {
+        goto cleanup;   /* wait interrupted */
+    }      
+    SDITERATE_OVER_LIST_ALLOW_REMOVE(&pBusContext->DeviceList,pDevice,SDDEVICE,SDList) {
+            /* only remove devices for the hcd or if we are cleaning up all */
+        if ((NULL == pHcd) || (pDevice->pHcd == pHcd)) {
+            SDListRemove(&pDevice->SDList); 
+            DeinitDeviceData(pDevice);
+            FreeDevice(pDevice);
+        }
+    }SDITERATE_END;
+    if (!SDIO_SUCCESS((status = SemaphorePost(&pBusContext->DeviceListSem)))) {
+        goto cleanup;   /* wait interrupted */
+    }
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO Bus Driver: DeleteDevices \n"));
+    return status;
+cleanup:
+    DBG_PRINT(SDDBG_ERROR, ("-SDIO Bus Driver: DeleteDevice, error exit 0x%X\n", status));
+    return status;
+}
+
+
+static SDIO_STATUS AllocateBusResources(void)
+{
+    INT                 ii;
+    PSDREQUEST          pReq;
+    PSIGNAL_ITEM        pSignal;
+    
+    DBG_PRINT(SDDBG_TRACE, 
+    ("+SDIO Bus Driver: AllocateBusResources (R:%d,S:%d) (CR:%d,MR:%d)(CS:%d,MS:%d) \n",
+       pBusContext->RequestListSize,
+       pBusContext->SignalSemListSize,
+       pBusContext->CurrentRequestAllocations,pBusContext->MaxRequestAllocations,
+       pBusContext->CurrentSignalAllocations,pBusContext->MaxSignalAllocations));
+       
+        /* allocate some initial requests */
+    for (ii = 0; ii < pBusContext->RequestListSize; ii++) {
+        pReq = AllocateRequest();
+        if (pReq == NULL) {         
+            break;
+        } 
+            /* free requests adds the request to the list */
+        FreeRequest(pReq); 
+    }  
+
+    for (ii = 0; ii < pBusContext->SignalSemListSize; ii++) {
+        pSignal = AllocateSignal();
+        if (pSignal == NULL) {
+            break; 
+        } 
+            /* freeing it adds it to the list */
+        FreeSignal(pSignal);       
+    }
+    
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO Bus Driver: AllocateBusResources\n"));
+    return SDIO_STATUS_SUCCESS;
+}
+
+
+/* cleanup bus resources */
+static void CleanUpBusResources(void)
+{
+    PSDLIST      pItem;
+    PSDREQUEST   pReq;
+    PSIGNAL_ITEM pSignal;
+    
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO Bus Driver: CleanUpBusResources (CR:%d,MR:%d)(CS:%d,MS:%d) \n",
+       pBusContext->CurrentRequestAllocations,pBusContext->MaxRequestAllocations,
+       pBusContext->CurrentSignalAllocations,pBusContext->MaxSignalAllocations));
+      
+    while(1) {
+        pItem = SDListRemoveItemFromHead(&pBusContext->RequestList);
+        if (NULL == pItem) {
+            break;   
+        }
+            /* free the request */
+        pReq = CONTAINING_STRUCT(pItem, SDREQUEST, SDList);        
+        if (pReq->InternalFlags & SDBD_ALLOC_IRQ_SAFE_MASK) {
+            KernelFreeIrqSafe(pReq);     
+        } else {
+            KernelFree(pReq);     
+        }
+        pBusContext->CurrentRequestAllocations--;
+    }  
+    
+    if (pBusContext->CurrentRequestAllocations != 0) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Request allocations are not ZERO! (CR:%d)\n",
+             pBusContext->CurrentRequestAllocations)); 
+    }
+    
+    while(1) {
+        pItem = SDListRemoveItemFromHead(&pBusContext->SignalList);
+        if (NULL == pItem) {
+            break;   
+        }
+        pSignal = CONTAINING_STRUCT(pItem, SIGNAL_ITEM, SDList);  
+        DestroySignal(pSignal);
+        pBusContext->CurrentSignalAllocations--;
+    }  
+    
+    if (pBusContext->CurrentSignalAllocations != 0) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Signal allocations are not ZERO! (CR:%d)\n",
+             pBusContext->CurrentRequestAllocations)); 
+    }
+    
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO Bus Driver: CleanUpBusResources\n"));
+}
+
+
+/* free a request to the lookaside list */
+void FreeRequest(PSDREQUEST pReq)
+{    
+    SDIO_STATUS status;
+    CT_DECLARE_IRQ_SYNC_CONTEXT();
+   
+    status = CriticalSectionAcquireSyncIrq(&pBusContext->RequestListCritSection);
+        /* protect request list */
+    if (!SDIO_SUCCESS(status)) {
+        return;
+    }
+    
+    if ((pBusContext->CurrentRequestAllocations <= pBusContext->MaxRequestAllocations) ||
+         !(pReq->InternalFlags & SDBD_ALLOC_IRQ_SAFE_MASK)) {
+            /* add it to the list */
+        SDListAdd(&pBusContext->RequestList, &pReq->SDList);  
+            /* we will hold onto this one */
+        pReq = NULL;
+    } else {
+            /* decrement count */
+        pBusContext->CurrentRequestAllocations--;  
+    }
+             
+    status = CriticalSectionReleaseSyncIrq(&pBusContext->RequestListCritSection);
+    
+    if (pReq != NULL) {
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Free Request allocation (CR:%d,MR:%d)\n",
+        pBusContext->CurrentRequestAllocations,pBusContext->MaxRequestAllocations));
+        if (pReq->InternalFlags & SDBD_ALLOC_IRQ_SAFE_MASK) {
+            KernelFreeIrqSafe(pReq);     
+        } else {
+                /* we should never free the ones that were normally allocated */
+            DBG_ASSERT(FALSE);
+        }
+    }
+}
+
+/* allocate a request from the lookaside list */
+PSDREQUEST AllocateRequest(void)
+{
+    PSDLIST  pItem;
+    SDIO_STATUS status;
+    PSDREQUEST pReq = NULL;
+    ATOMIC_FLAGS internalflags;
+    CT_DECLARE_IRQ_SYNC_CONTEXT();
+        
+    
+    status = CriticalSectionAcquireSyncIrq(&pBusContext->RequestListCritSection);
+    
+    if (!SDIO_SUCCESS(status)) {
+        return NULL;
+    }
+    
+    if (pBusContext->InitMask & RESOURCE_INIT) {
+            /* check the list, we are now running... */
+        pItem = SDListRemoveItemFromHead(&pBusContext->RequestList);
+    } else {
+            /* we are loading the list with requests at initialization */
+        pItem = NULL;    
+    }
+    status = CriticalSectionReleaseSyncIrq(&pBusContext->RequestListCritSection);
+   
+    if (pItem != NULL) {
+        pReq = CONTAINING_STRUCT(pItem, SDREQUEST, SDList);
+    } else {
+        if (pBusContext->InitMask & RESOURCE_INIT) {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Request List empty..allocating new one (irq-safe) (CR:%d,MR:%d)\n",
+            pBusContext->CurrentRequestAllocations,pBusContext->MaxRequestAllocations));
+                /* the resource list was already allocated, we must be running now.
+                 * at run-time, we allocate using the safe IRQ */    
+            pReq = (PSDREQUEST)KernelAllocIrqSafe(sizeof(SDREQUEST));             
+                /* mark that this one was created using IRQ safe allocation */ 
+            internalflags = SDBD_ALLOC_IRQ_SAFE_MASK;    
+        } else {
+                /* use the normal allocation since we are called at initialization */
+            pReq = (PSDREQUEST)KernelAlloc(sizeof(SDREQUEST));   
+            internalflags = 0;    
+        }
+          
+        if (pReq != NULL) {
+            pReq->InternalFlags = internalflags;
+                /* keep track of allocations */
+            status = CriticalSectionAcquireSyncIrq(&pBusContext->RequestListCritSection);
+            pBusContext->CurrentRequestAllocations++;     
+            status = CriticalSectionReleaseSyncIrq(&pBusContext->RequestListCritSection);
+        }  
+    }  
+    
+    
+    if (pReq != NULL) {
+            /* preserve internal flags */
+        internalflags = pReq->InternalFlags;
+        ZERO_POBJECT(pReq);
+        pReq->InternalFlags = internalflags;
+    }
+    
+    return pReq;
+}
+
+void DestroySignal(PSIGNAL_ITEM pSignal)
+{
+   SignalDelete(&pSignal->Signal);      
+   KernelFree(pSignal);  
+}
+
+PSIGNAL_ITEM BuildSignal(void)
+{
+    PSIGNAL_ITEM pSignal; 
+    
+    pSignal = (PSIGNAL_ITEM)KernelAlloc(sizeof(SIGNAL_ITEM));        
+    if (pSignal != NULL) {
+            /* initialize signal */
+        if (!SDIO_SUCCESS(SignalInitialize(&pSignal->Signal))) {
+            KernelFree(pSignal);   
+            pSignal = NULL;
+        } 
+    }  
+    return pSignal;
+}
+/* free a signal*/
+void FreeSignal(PSIGNAL_ITEM pSignal)
+{    
+    SDIO_STATUS status;
+    CT_DECLARE_IRQ_SYNC_CONTEXT();
+         
+    status = CriticalSectionAcquireSyncIrq(&pBusContext->RequestListCritSection);
+    
+    if (!SDIO_SUCCESS(status)) {
+        return;
+    }
+    
+    if (pBusContext->CurrentSignalAllocations <= pBusContext->MaxSignalAllocations) {
+            /* add it to the list */
+        SDListAdd(&pBusContext->SignalList, &pSignal->SDList); 
+            /* flag that we are holding onto it */
+        pSignal = NULL;   
+    } else {
+            /* decrement count */
+        pBusContext->CurrentSignalAllocations--;
+    }
+       
+    status = CriticalSectionReleaseSyncIrq(&pBusContext->RequestListCritSection);
+    
+    if (pSignal != NULL) {
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Free signal allocation (CS:%d,MS:%d)\n",
+        pBusContext->CurrentSignalAllocations,pBusContext->MaxSignalAllocations));
+        DestroySignal(pSignal); 
+    }
+}
+
+/* allocate a signal from the list */
+PSIGNAL_ITEM AllocateSignal(void)
+{ 
+    PSDLIST         pItem;  
+    PSIGNAL_ITEM    pSignal;
+    SDIO_STATUS status;
+    CT_DECLARE_IRQ_SYNC_CONTEXT();
+         
+    status = CriticalSectionAcquireSyncIrq(&pBusContext->RequestListCritSection);
+    
+    if (!SDIO_SUCCESS(status)) {
+        return NULL;
+    }
+    
+    if (pBusContext->InitMask & RESOURCE_INIT) {
+            /* check the list */
+        pItem = SDListRemoveItemFromHead(&pBusContext->SignalList);
+    } else {
+            /* we are loading the list */
+        pItem = NULL;
+    }
+    
+    status = CriticalSectionReleaseSyncIrq(&pBusContext->RequestListCritSection);
+    if (pItem != NULL) { 
+            /* return the one from the list */
+        pSignal = CONTAINING_STRUCT(pItem, SIGNAL_ITEM, SDList);
+    } else {
+        if (pBusContext->InitMask & RESOURCE_INIT) {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Signal List empty..allocating new one (CS:%d,MS:%d)\n",
+            pBusContext->CurrentSignalAllocations,pBusContext->MaxSignalAllocations));
+        }
+            /* just allocate one */    
+        pSignal = BuildSignal();
+        status = CriticalSectionAcquireSyncIrq(&pBusContext->RequestListCritSection);
+        if (pSignal != NULL) {
+            pBusContext->CurrentSignalAllocations++;   
+        }    
+        status = CriticalSectionReleaseSyncIrq(&pBusContext->RequestListCritSection);
+    }
+    
+    
+    return pSignal;
+}
+
+/*
+ * Issus Bus Request (exposed to function drivers)
+*/
+PSDREQUEST IssueAllocRequest(PSDDEVICE pDev)
+{
+    return AllocateRequest();     
+} 
+
+/*
+ * Free Request (exposed to function drivers)
+*/
+void IssueFreeRequest(PSDDEVICE pDev, PSDREQUEST pReq)
+{
+    FreeRequest(pReq);      
+} 
+
+/*
+ * Issus Bus Request (exposed to function drivers)
+*/
+SDIO_STATUS IssueBusRequest(PSDDEVICE pDev, PSDREQUEST pReq)
+{
+    pReq->pFunction = pDev->pFunction;
+    return IssueRequestToHCD(pDev->pHcd,pReq);      
+} 
+
+
+    /* completion routine for HCD configs, this is synchronized with normal bus requests */
+static void HcdConfigComplete(PSDREQUEST pReq)
+{
+    
+    pReq->Status = CALL_HCD_CONFIG((PSDHCD)pReq->pDataBuffer, (PSDCONFIG)pReq->pCompleteContext);
+    
+    SignalSet(&((PSIGNAL_ITEM)pReq->pHcdContext)->Signal);                
+}
+
+SDIO_STATUS SendSyncedHcdBusConfig(PSDDEVICE pDevice, PSDCONFIG pConfig)
+{
+    SDIO_STATUS     status = SDIO_STATUS_SUCCESS;
+    PSDREQUEST      pReq = NULL;
+    PSIGNAL_ITEM    pSignal = NULL;
+    
+    do { 
+        
+        pSignal = AllocateSignal();
+        if (NULL == pSignal) {
+            status = SDIO_STATUS_NO_RESOURCES;
+            break;
+        }
+                
+        pReq = AllocateRequest();
+        if (NULL == pReq) {
+            status = SDIO_STATUS_NO_RESOURCES;
+            break;
+        }
+
+            /* issue pseudo request to sync this with bus requests */
+        pReq->pCompletion = HcdConfigComplete;
+        pReq->pCompleteContext = pConfig;
+            /* re-use hcd context to store the signal since this request 
+             * never actually goes to an HCD */  
+        pReq->pHcdContext = pSignal;
+        pReq->pDataBuffer = pDevice->pHcd;
+            /* flag this as barrier in case it may change the bus mode of the HCD */
+        pReq->Flags = SDREQ_FLAGS_PSEUDO | SDREQ_FLAGS_BARRIER | SDREQ_FLAGS_TRANS_ASYNC;
+        pReq->Status = SDIO_STATUS_SUCCESS;
+        
+            /* issue request */
+        status = IssueRequestToHCD(pDevice->pHcd,pReq);       
+
+    } while (FALSE); 
+    
+    if (SDIO_SUCCESS(status)) {
+        DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: Config Request Sync-Op waiting....\n"));
+        status = SignalWait(&pSignal->Signal);
+                
+        if (SDIO_SUCCESS(status)) {
+                /* return the result of the configuration request */
+            status = pReq->Status;    
+        }    
+    }    
+    
+        /* cleanup */
+    if (pReq != NULL) {
+        FreeRequest(pReq);     
+    }  
+    
+    if (pSignal != NULL) {
+        FreeSignal(pSignal);    
+    }
+    
+    return status;  
+}
+
+/*
+ * Issus bus Configuration  (exposed to function drivers)
+*/
+SDIO_STATUS IssueBusConfig(PSDDEVICE pDev, PSDCONFIG pConfig)
+{
+    SDIO_STATUS status;
+    INT         cmdLength;
+    UINT8       debugLevel = SDDBG_ERROR;
+    
+    cmdLength = GET_SDCONFIG_CMD_LEN(pConfig);
+    status = SDIO_STATUS_INVALID_PARAMETER;
+     
+    do {
+            /* check buffers and length */
+        if (IS_SDCONFIG_CMD_GET(pConfig) || IS_SDCONFIG_CMD_PUT(pConfig)) {
+            if ((GET_SDCONFIG_CMD_DATA(PVOID,pConfig) == NULL) || (0 == cmdLength)) {
+                break;
+            }    
+        }
+                        
+        switch (GET_SDCONFIG_CMD(pConfig)) {
+            case SDCONFIG_FUNC_ACK_IRQ:
+                status = SDFunctionAckInterrupt(pDev);
+                break;
+            case SDCONFIG_FUNC_ENABLE_DISABLE:
+                if (cmdLength < sizeof(SDCONFIG_FUNC_ENABLE_DISABLE_DATA)) {
+                    break;   
+                }
+                status = SDEnableFunction(pDev, 
+                           GET_SDCONFIG_CMD_DATA(PSDCONFIG_FUNC_ENABLE_DISABLE_DATA,pConfig));            
+                break;
+            case SDCONFIG_FUNC_UNMASK_IRQ:
+                status = SDMaskUnmaskFunctionIRQ(pDev,FALSE);
+                break;
+            case SDCONFIG_FUNC_MASK_IRQ:
+                status = SDMaskUnmaskFunctionIRQ(pDev,TRUE);
+                break;
+            case SDCONFIG_FUNC_SPI_MODE_DISABLE_CRC:
+                status = SDSPIModeEnableDisableCRC(pDev,FALSE);
+                break;
+            case SDCONFIG_FUNC_SPI_MODE_ENABLE_CRC:
+                status = SDSPIModeEnableDisableCRC(pDev,TRUE);
+                break;
+            case SDCONFIG_FUNC_ALLOC_SLOT_CURRENT:
+                status = SDAllocFreeSlotCurrent(pDev,
+                                                TRUE,
+                                   GET_SDCONFIG_CMD_DATA(PSDCONFIG_FUNC_SLOT_CURRENT_DATA,pConfig));
+                break;
+            case SDCONFIG_FUNC_FREE_SLOT_CURRENT:
+                status = SDAllocFreeSlotCurrent(pDev, FALSE, NULL);
+                break;
+            case SDCONFIG_FUNC_CHANGE_BUS_MODE:
+            
+                status = SetOperationalBusMode(pDev,
+                                               GET_SDCONFIG_CMD_DATA(PSDCONFIG_BUS_MODE_DATA,
+                                               pConfig));
+                break;
+            case SDCONFIG_FUNC_NO_IRQ_PEND_CHECK:
+                status = TryNoIrqPendingCheck(pDev);
+                break;
+            default:
+                
+                if (GET_SDCONFIG_CMD(pConfig) & SDCONFIG_FLAGS_HC_CONFIG) {    
+                        /* synchronize config requests with busrequests */
+                    status = SendSyncedHcdBusConfig(pDev,pConfig);
+                } else {
+                    DBG_PRINT(SDDBG_ERROR, 
+                        ("SDIO Bus Driver: IssueBusConfig - unknown command:0x%X \n",
+                        GET_SDCONFIG_CMD(pConfig)));   
+                    status = SDIO_STATUS_INVALID_PARAMETER; 
+                }              
+                break;  
+        }
+    } while(FALSE);
+    
+    if (!SDIO_SUCCESS(status)) {
+
+           if(status == SDIO_STATUS_FUNC_ENABLE_TIMEOUT ){ /* reduce debug level to avoid timeout error messages */
+                debugLevel = SDDBG_TRACE;                  
+         }
+         
+                              
+         DBG_PRINT(debugLevel, 
+                ("SDIO Bus Driver: IssueBusConfig - Error in command:0x%X, Buffer:0x%X, Length:%d Err:%d\n",
+                GET_SDCONFIG_CMD(pConfig),
+                GET_SDCONFIG_CMD_DATA(INT,pConfig),
+                cmdLength, status));
+    }
+    return status;
+} 
+
+/* start a request */ 
+static INLINE SDIO_STATUS StartHcdRequest(PSDHCD pHcd, PSDREQUEST pReq) 
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    CT_DECLARE_IRQ_SYNC_CONTEXT();
+
+    if ((pReq->pFunction != NULL) && (pReq->pFunction->Flags & SDFUNCTION_FLAG_REMOVING)) {
+        /* this device or function is going away, fail any new requests */
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: StartHcdRequest, fail request 0x%X, device is removing\n", (UINT)pReq));
+        pReq->Status = SDIO_STATUS_CANCELED;
+        return SDIO_STATUS_SDREQ_QUEUE_FAILED; 
+    }
+    
+    status = _AcquireHcdLock(pHcd);    
+    
+    if (!SDIO_SUCCESS(status)) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to acquire HCD request lock: Err:%d\n", status));
+        pReq->Status = SDIO_STATUS_SDREQ_QUEUE_FAILED;
+        return SDIO_STATUS_SDREQ_QUEUE_FAILED;
+    }
+    
+    if (pReq->Flags & SDREQ_FLAGS_QUEUE_HEAD) {
+            /* caller wants this request queued to the head */
+                    
+            /* a completion routine for a barrier request is called
+             * while the queue is busy.  A barrier request can
+             * insert a new request at the head of the queue */
+        DBG_ASSERT(IsQueueBusy(&pHcd->RequestQueue));    
+        QueueRequestToFront(&pHcd->RequestQueue,pReq);
+    } else {
+            /* insert in queue at tail */ 
+        QueueRequest(&pHcd->RequestQueue,pReq);
+      
+            /* is queue busy ? */
+        if (IsQueueBusy(&pHcd->RequestQueue)) {
+                /* release lock */
+            status = _ReleaseHcdLock(pHcd);
+                /* controller is busy already, no need to call the hcd */
+            return SDIO_STATUS_PENDING; 
+        } 
+            /* mark it as busy */
+        MarkQueueBusy(&pHcd->RequestQueue);
+    }
+        
+        /* remove item from head and set current request */
+    SET_CURRENT_REQUEST(pHcd, DequeueRequest(&pHcd->RequestQueue));
+    if (CHECK_API_VERSION_COMPAT(pHcd,2,6)) { 
+        CHECK_HCD_RECURSE(pHcd, pHcd->pCurrentRequest);
+    }
+        /* release lock */
+    status = _ReleaseHcdLock(pHcd);
+        /* controller was not busy, call into HCD to process current request */
+    status = CallHcdRequest(pHcd); 
+    return status;
+}
+
+
+/* used by CMD12,CMD13 to save the original completion routine */
+#define GET_BD_RSV_REQUEST_COMPLETION(pR)   (PSDEQUEST_COMPLETION)(pR)->pBdRsv1
+#define SET_BD_RSV_REQUEST_COMPLETION(pR,c) (pR)->pBdRsv1 = (PVOID)(c)
+
+/* used by CMD12 processing to save/restore the original data transfer status */
+#define GET_BD_RSV_ORIG_STATUS(pR)          (SDIO_STATUS)(pR)->pBdRsv2
+#define SET_BD_RSV_ORIG_STATUS(pR,s)        (pR)->pBdRsv2 = (PVOID)(s)
+
+/* used by CMD13 processing to get/set polling count */
+#define GET_BD_RSV_STATUS_POLL_COUNT(pR)     (INT)(pR)->pBdRsv2
+#define SET_BD_RSV_STATUS_POLL_COUNT(pR,s)   (pR)->pBdRsv2 = (PVOID)(s)
+
+/* used by CMD55 processing to save the second part of the request */
+#define GET_BD_RSV_ORIG_REQ(pR)             (PSDREQUEST)(pR)->pBdRsv1
+#define SET_BD_RSV_ORIG_REQ(pR,r)           (pR)->pBdRsv1 = (PVOID)(r)
+
+/* used by all to save HCD */
+#define GET_BD_RSV_HCD(pR)                  (PSDHCD)(pR)->pBdRsv3
+#define SET_BD_RSV_HCD(pR,h)                (pR)->pBdRsv3 = (PVOID)(h)
+
+static void CMD13CompletionBarrier(PSDREQUEST pReq);
+
+static INLINE void SetupCMD13(PSDHCD pHcd, PSDREQUEST pReq) 
+{
+    pReq->Command = CMD13;
+        /* sequence must be atomic, queue it to the head and flag as a barrier */
+    pReq->Flags = SDREQ_FLAGS_QUEUE_HEAD | SDREQ_FLAGS_BARRIER | SDREQ_FLAGS_TRANS_ASYNC;
+    if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+        pReq->Argument = 0;
+        pReq->Flags |= SDREQ_FLAGS_RESP_R2;
+    } else {
+        pReq->Flags |= SDREQ_FLAGS_RESP_R1;
+        pReq->Argument |= pHcd->CardProperties.RCA << 16;  
+    }
+        /* insert completion */
+    pReq->pCompletion = CMD13CompletionBarrier; 
+}
+
+/* CMD13 (GET STATUS) completion */
+static void CMD13CompletionBarrier(PSDREQUEST pReq) 
+{
+    PSDEQUEST_COMPLETION pOrigCompletion = GET_BD_RSV_REQUEST_COMPLETION(pReq); 
+    PSDHCD               pHcd = GET_BD_RSV_HCD(pReq);
+    INT                  pollingCount = GET_BD_RSV_STATUS_POLL_COUNT(pReq);
+    BOOL                 doCompletion = TRUE;
+    UINT32               cardStatus;
+    
+    DBG_ASSERT(pOrigCompletion != NULL);
+    DBG_ASSERT(pHcd != NULL);
+    DBG_PRINT(SDIODBG_REQUESTS, ("+SDIO Bus Driver: CMD13CompletionBarrier (cnt:%d) \n",pollingCount));
+    
+    do {
+        if (!SDIO_SUCCESS(pReq->Status)) {
+            break;    
+        }
+        
+        cardStatus = SD_R1_GET_CARD_STATUS(pReq->Response);
+        
+        if (cardStatus & SD_CS_TRANSFER_ERRORS) {
+            DBG_PRINT(SDIODBG_REQUESTS,("SDIO Bus Driver: Card transfer errors : 0x%X \n",cardStatus));
+            pReq->Status = SDIO_STATUS_PROGRAM_STATUS_ERROR;
+            break;        
+        }
+        
+        if (SD_CS_GET_STATE(cardStatus) != SD_CS_STATE_PRG) {
+            DBG_PRINT(SDIODBG_REQUESTS,("SDIO Bus Driver: Card programming done \n"));
+            break;    
+        }
+        
+        DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: Card still programming.. \n"));
+        pollingCount--;
+        
+        if (pollingCount < 0) {
+            pReq->Status = SDIO_STATUS_PROGRAM_TIMEOUT;
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: card programming timeout!\n"));
+            break;  
+        }
+        
+        doCompletion = FALSE;
+            /* keep trying */
+        SET_BD_RSV_STATUS_POLL_COUNT(pReq, pollingCount);
+        SetupCMD13(pHcd,pReq);
+        DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: re-issuing CMD13 \n"));
+            /* re-issue */
+        IssueRequestToHCD(pHcd, pReq);
+        
+    } while (FALSE);
+    
+    
+    if (doCompletion) {
+            /* restore original completion routine */
+        pReq->pCompletion = pOrigCompletion; 
+            /* call original completion routine */      
+        pOrigCompletion(pReq);
+    }
+    
+    DBG_PRINT(SDIODBG_REQUESTS, ("-SDIO Bus Driver: CMD13CompletionBarrier \n"));
+}
+
+/* command 13 (GET STATUS) preparation */
+static void PrepCMD13Barrier(PSDREQUEST pReq)
+{
+    SDIO_STATUS status = pReq->Status;
+    PSDHCD      pHcd = GET_BD_RSV_HCD(pReq);
+    INT         pollingCount;
+    PSDEQUEST_COMPLETION pOrigCompletion = GET_BD_RSV_REQUEST_COMPLETION(pReq); 
+    
+    DBG_ASSERT(pHcd != NULL);
+    DBG_ASSERT(pOrigCompletion != NULL);
+    
+    DBG_PRINT(SDIODBG_REQUESTS, ("+SDIO Bus Driver: PrepCMD13Barrier \n")); 
+    
+    if (SDIO_SUCCESS(status)) {
+            /* re-use the request for CMD13 */
+        SetupCMD13(pHcd,pReq);
+            /* set polling count to a multiple of the Block count, if the BlockCount was
+             * zeroed by the HCD, then set it to 1X multiplier */
+        pollingCount = max(pBusContext->CMD13PollingMultiplier, 
+                           pBusContext->CMD13PollingMultiplier * (INT)pReq->BlockCount);
+            /* initialize count */
+        SET_BD_RSV_STATUS_POLL_COUNT(pReq, pollingCount);
+            /* re-issue it, we can call IssueRequest here since we are re-using the request */
+        IssueRequestToHCD(pHcd, pReq);   
+    } else {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Request Failure (%d) , CMD13 bypassed.\n",status));
+            /* call the original completion routine */
+        pOrigCompletion(pReq);      
+    }
+    
+    DBG_PRINT(SDIODBG_REQUESTS, ("-SDIO Bus Driver: PrepCMD13Barrier (%d) \n",status));
+}
+
+/* CMD12 completion */
+static void CMD12Completion(PSDREQUEST pReq) 
+{
+    PSDEQUEST_COMPLETION pOrigCompletion = GET_BD_RSV_REQUEST_COMPLETION(pReq); 
+
+    DBG_ASSERT(pOrigCompletion != NULL);
+    
+    DBG_PRINT(SDIODBG_REQUESTS, ("+SDIO Bus Driver: CMD12Completion \n"));
+    
+        /* restore original completion routine */
+    pReq->pCompletion = pOrigCompletion;
+    
+    if (SDIO_SUCCESS(pReq->Status)) {
+            /* if CMD12 succeeds, we want to return the result of the original
+             * request */
+        pReq->Status = GET_BD_RSV_ORIG_STATUS(pReq); 
+        DBG_PRINT(SDIODBG_REQUESTS, 
+                ("SDIO Bus Driver: PrepCMD12Completion original status %d \n",pReq->Status));
+    }
+        /* call original completion routine */      
+    pOrigCompletion(pReq);
+    
+    DBG_PRINT(SDIODBG_REQUESTS, ("-SDIO Bus Driver: CMD12Completion \n"));
+}
+
+/* CMD12 preparation */
+static void PrepCMD12Barrier(PSDREQUEST pReq) 
+{
+    
+    SDIO_STATUS status = pReq->Status;
+    PSDHCD               pHcd = GET_BD_RSV_HCD(pReq);
+    PSDEQUEST_COMPLETION pOrigCompletion = GET_BD_RSV_REQUEST_COMPLETION(pReq); 
+    
+    DBG_ASSERT(pHcd != NULL);
+    DBG_ASSERT(pOrigCompletion != NULL);
+    
+    DBG_PRINT(SDIODBG_REQUESTS, ("+SDIO Bus Driver: PrepCMD12Barrier \n")); 
+    
+    if (SDIO_SUCCESS(status) ||    /* only issue CMD12 on success or specific bus errors */
+        (SDIO_STATUS_BUS_READ_TIMEOUT == status) ||
+        (SDIO_STATUS_BUS_READ_CRC_ERR == status) || 
+        (SDIO_STATUS_BUS_WRITE_ERROR == status)) {
+        if (!CHECK_API_VERSION_COMPAT(pHcd,2,6)) {
+            if (!ForceAllRequestsAsync()) {
+                /* clear the call bit as an optimization, note clearing it wholesale here will 
+                 * allow request processing to recurse one more level */
+                AtomicTest_Clear(&pHcd->HcdFlags, HCD_REQUEST_CALL_BIT);
+            }
+        }
+            /* re-use the request for CMD12 */
+        pReq->Command = CMD12;
+        pReq->Argument = 0;
+        
+            /* if the data transfer was successful, check for transfer check */
+        if (SDIO_SUCCESS(status) &&
+            (pReq->Flags & SDREQ_FLAGS_AUTO_TRANSFER_STATUS)) {
+                /* original data request requires a transfer status check, which is another
+                 * barrier request */
+            pReq->Flags = SDREQ_FLAGS_RESP_R1B | SDREQ_FLAGS_QUEUE_HEAD | SDREQ_FLAGS_BARRIER |
+                          SDREQ_FLAGS_TRANS_ASYNC;
+            DBG_PRINT(SDIODBG_REQUESTS, ("-SDIO Bus Driver: PrepCMD12Barrier , chaining CMD13 \n"));
+                /* switch out completion to send the CMD13 next */
+            pReq->pCompletion = PrepCMD13Barrier;  
+        } else {
+            pReq->Flags = SDREQ_FLAGS_RESP_R1B | SDREQ_FLAGS_QUEUE_HEAD | SDREQ_FLAGS_TRANS_ASYNC;
+            pReq->pCompletion = CMD12Completion;
+        }
+        
+            /* save the original data transfer request status */
+        SET_BD_RSV_ORIG_STATUS(pReq,status); 
+            /* re-issue it, we can call IssueRequest here since we are re-using the request */
+        IssueRequestToHCD(pHcd, pReq);   
+    } else {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Request Failure (%d) , CMD12 bypassed.\n",status));
+            /* call the original completion routine */
+        pOrigCompletion(pReq);      
+    }
+    
+    DBG_PRINT(SDIODBG_REQUESTS, ("-SDIO Bus Driver: PrepCMD12Barrier (%d) \n",status));
+}
+
+
+/* CMD55 barrier - this is a special barrier completion routine, we have to submit the second 
+ * part of the command command sequence atomically */
+static void CMD55CompletionBarrier(PSDREQUEST pReq)
+{
+    SDIO_STATUS status = pReq->Status;
+    PSDREQUEST  pOrigReq = GET_BD_RSV_ORIG_REQ(pReq);
+    PSDHCD      pHcd = GET_BD_RSV_HCD(pReq);
+    BOOL        doCompletion = FALSE;
+    
+    DBG_ASSERT(pOrigReq != NULL);
+    DBG_ASSERT(pHcd != NULL);
+    
+    DBG_PRINT(SDIODBG_REQUESTS, ("+SDIO Bus Driver: CMD55Completion \n")); 
+    
+    do {
+        
+        if (!SDIO_SUCCESS(status)) {
+                /* command 55 failed */
+            pOrigReq->Status = status;
+            doCompletion = TRUE;
+            break;    
+        }
+        
+        if (!(SD_R1_GET_CARD_STATUS(pReq->Response) & SD_CS_APP_CMD)) {                  
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Card is not accepting CMD55, status:0x%X \n",
+                    SD_R1_GET_CARD_STATUS(pReq->Response))); 
+            pOrigReq->Status = SDIO_STATUS_INVALID_COMMAND;
+            doCompletion = TRUE;
+            break;
+        }
+        
+        if (!CHECK_API_VERSION_COMPAT(pHcd,2,6)) {
+            if (!ForceAllRequestsAsync()) {
+                AtomicTest_Clear(&pHcd->HcdFlags, HCD_REQUEST_CALL_BIT);
+            }
+        }
+        
+            /* flag the original request to queue to the head */
+        pOrigReq->Flags |= SDREQ_FLAGS_QUEUE_HEAD;
+            /* submit original request, we cannot call IssueRequestHCD() here because the
+             * original request has already gone through IssueRequestHCD() already */
+        status = StartHcdRequest(pHcd, pOrigReq);
+        
+        if (SDIO_STATUS_PENDING == status) {
+            break;    
+        }
+        
+        pOrigReq->Status = status;
+       
+        if (SDIO_STATUS_SDREQ_QUEUE_FAILED == status) {
+                /* never made it to the queue */
+            doCompletion = TRUE;
+            break;
+        } 
+        
+            /* request completed in-line */
+        _SDIO_HandleHcdEvent(pHcd, EVENT_HCD_TRANSFER_DONE);   
+         
+    } while (FALSE);
+    
+    if (doCompletion) {
+        DoRequestCompletion(pOrigReq, pHcd);        
+    }
+    
+        /* free the CMD55 request */
+    FreeRequest(pReq);  
+    
+    DBG_PRINT(SDIODBG_REQUESTS, ("-SDIO Bus Driver: CMD55Completion \n"));
+}
+
+
+/* synch completion routine */
+static void SynchCompletion(PSDREQUEST pRequest)
+{
+    PSIGNAL_ITEM pSignal;    
+    
+    pSignal = (PSIGNAL_ITEM)pRequest->pCompleteContext;
+    DBG_ASSERT(pSignal != NULL);
+    if (!SDIO_SUCCESS(SignalSet(&pSignal->Signal))) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: SynchCompletion - signal failed \n"));
+    }
+    
+}
+
+/*
+ * Issue a request to the host controller
+ * 
+ * 
+ * The following flags are handled internally by the bus driver to guarantee atomicity.
+ * 
+ *    SDREQ_FLAGS_APP_CMD - SD Extended commands requiring CMD55 to precede the actual command
+ *    SDREQ_FLAGS_AUTO_CMD12 - Memory Card Data transfer needs CMD12 to stop transfer 
+ *                             (multi-block reads/writes)
+ *    SDREQ_FLAGS_AUTO_TRANSFER_STATUS - Memory card data transfer needs transfer status polling 
+ *                                       using CMD13
+ * 
+ *    These request flags require additional commands prepended or appended to the original command
+ *    
+ *    The order of command execution :
+ * 
+ *    Order  Condition                 Command Issued
+ *    ------------------------------------------------------------- 
+ *      1.   If APP_CMD                CMD55 issued.
+ *      2.   Always                    Caller command issued.
+ *      3.   If AUTO_CMD12             CMD12 issued.
+ *      4.   If AUTO_TRANSFER_STATUS   CMD13 issued until card programming is complete
+*/  
+SDIO_STATUS IssueRequestToHCD(PSDHCD pHcd, PSDREQUEST pReq)
+{  
+    SDIO_STATUS     status = SDIO_STATUS_SUCCESS;
+    PSIGNAL_ITEM    pSignal = NULL;
+    BOOL            handleFailedReqSubmit = FALSE;
+    
+    CLEAR_INTERNAL_REQ_FLAGS(pReq); 
+    
+    do {
+            /* mark request in-use */
+        ATOMIC_FLAGS internal = AtomicTest_Set(&pReq->InternalFlags, SDBD_PENDING);
+        if (internal & (1<<SDBD_PENDING)) {
+            DBG_ASSERT_WITH_MSG(FALSE,
+                            "SDIO Bus Driver: IssueRequestToHCD - request already in use \n");
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Request already in use: 0x%X",(INT)pReq)); 
+        }
+        
+        if (!(pReq->Flags & SDREQ_FLAGS_TRANS_ASYNC)) { 
+                /* caller wants synchronous operation, insert our completion routine */
+            pReq->pCompletion = SynchCompletion;
+            pSignal = AllocateSignal();
+            if (NULL == pSignal) {
+                status = SDIO_STATUS_NO_RESOURCES;
+                pReq->Status = SDIO_STATUS_NO_RESOURCES;
+                handleFailedReqSubmit = TRUE;
+                    /* no need to continue */
+                break;    
+            }  
+            pReq->pCompleteContext = (PVOID)pSignal;      
+        }
+        
+        if ((pReq->Flags & SDREQ_FLAGS_AUTO_CMD12) &&        
+            !(pHcd->Attributes & SDHCD_ATTRIB_AUTO_CMD12) &&
+            !(IS_HCD_BUS_MODE_SPI(pHcd) && IS_SDREQ_WRITE_DATA(pReq->Flags))) {
+            DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: Auto CMD12 on Request:0x%08X \n",(INT)pReq));
+                /* caller wants CMD12 auto-issued and the HCD does not support it */
+                /* setup caller's request as a barrier and replace their completion routine */
+            pReq->Flags |= SDREQ_FLAGS_BARRIER;
+                /* take off the flag, since the BD will be issuing it */
+            pReq->Flags &= ~SDREQ_FLAGS_AUTO_CMD12;
+                /* save original completion */
+            SET_BD_RSV_REQUEST_COMPLETION(pReq,pReq->pCompletion);
+                /* save the HCD we are on */
+            SET_BD_RSV_HCD(pReq,pHcd);
+                /* use completion for preping CMD12 */
+            pReq->pCompletion = PrepCMD12Barrier;               
+        }
+        
+        if (pReq->Flags & SDREQ_FLAGS_AUTO_TRANSFER_STATUS) {
+            /* caller wants transfer status checked. If a CMD12
+             * barrier request has been setup we let the CMD12 completion take care
+             * of setting up the transfer check */    
+            if (pReq->pCompletion != PrepCMD12Barrier) {
+                    /* make CMD13 prep a barrier */
+                pReq->Flags |= SDREQ_FLAGS_BARRIER;
+                    /* save original completion */
+                SET_BD_RSV_REQUEST_COMPLETION(pReq,pReq->pCompletion);
+                    /* save the HCD we are on */
+                SET_BD_RSV_HCD(pReq,pHcd);
+                    /* use completion for preping CMD13 */
+                pReq->pCompletion = PrepCMD13Barrier;            
+            }
+        }
+            
+            /* check app command, the two command sequence must be handled atomically */
+        if (pReq->Flags & SDREQ_FLAGS_APP_CMD) {            
+            PSDREQUEST      pCmd55;
+                /* allocate request to handle initial CMD55 command */
+            pCmd55 = AllocateRequest();
+            if (NULL == pCmd55) {
+                status = SDIO_STATUS_NO_RESOURCES;
+                pReq->Status = SDIO_STATUS_NO_RESOURCES;
+                    /* complete the caller's request with error */
+                handleFailedReqSubmit = TRUE;
+                    /* no need to continue */
+                break;
+            }
+                /* first submit CMD55 */
+                /* set RCA */
+            pCmd55->Argument = pHcd->CardProperties.RCA << 16;
+                /* mark as a barrier request */
+            pCmd55->Flags = SDREQ_FLAGS_RESP_R1 | SDREQ_FLAGS_BARRIER | SDREQ_FLAGS_TRANS_ASYNC; 
+            pCmd55->Command = CMD55;
+                /* call our barrier completion routine when done */
+            pCmd55->pCompletion = CMD55CompletionBarrier;
+                /* save request and target HCD */
+            SET_BD_RSV_ORIG_REQ(pCmd55,pReq);
+            SET_BD_RSV_HCD(pCmd55,pHcd);
+                /* recursively start the CMD55 request, since the CMD55 is a barrier
+                 * request, it's completion routine will submit the actual request 
+                 * atomically */                           
+            status = IssueRequestToHCD(pHcd, pCmd55);
+              
+        } else {
+                /* start the normal request */
+            status = StartHcdRequest(pHcd,pReq);                
+        } 
+        
+         
+        if (SDIO_STATUS_SDREQ_QUEUE_FAILED == status) {
+            handleFailedReqSubmit = TRUE;
+                /* no need to continue, clean up at the end */
+            break; 
+        }
+        
+            /* at this point, the request was either queued or was processed by the
+             * HCD */
+        
+        DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: HCD returned status:%d on request: 0x%X, (CMD:%d) \n",
+                  status, (INT)pReq, pReq->Command));   
+                         
+        if (status != SDIO_STATUS_PENDING) {                  
+            /* the HCD completed the request within the HCD request callback, 
+             * check and see if this is a synchronous request */            
+            if (pSignal != NULL) {
+                    /* it was synchronous */      
+                DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: Sync-Op signal wait bypassed \n"));
+                    /* NULL out completion info, there's no need to
+                     * signal the semaphore */
+                pReq->pCompletion = NULL;
+                
+            } else {
+                DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: Async operation completed in-line \n"));
+                    /* this was an async call, always return pending */
+                status = SDIO_STATUS_PENDING;   
+            }
+                /* process this completed transfer on behalf of the HCD */
+            _SDIO_HandleHcdEvent(pHcd, EVENT_HCD_TRANSFER_DONE);
+            
+                /* done processing */
+            break;            
+        }
+                /* I/O is now pending, could be sync or async */
+                /* check for synch op */
+        if (pSignal != NULL) {  
+                /* wait for completion */
+            DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: Sync-Op signal waiting....\n"));
+                /* this is not interruptable, as the HCD must complete it. */
+            status = SignalWait(&pSignal->Signal);
+                /* don't need the signal anymore */
+            FreeSignal(pSignal);    
+            pSignal = NULL;
+            
+            /* note: it is safe to touch pReq since we own
+             * the completion routine for synch transfers */
+             
+                /* check signal wait status */
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_TRACE, 
+                ("SDIO Bus Driver - IssueRequestToHCD: Synch transfer - signal wait failed, cancelling req 0X%X\n", 
+                (UINT)pReq)); 
+                pReq->Status = SDIO_STATUS_CANCELED;
+                status = SDIO_STATUS_CANCELED;
+                break;   
+            }
+            DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: Sync-Op woke up\n")); 
+                /* return the completion status of the request */
+            status = pReq->Status;  
+        } else {
+            DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: Async operation Pending \n"));   
+        }
+            
+    } while (FALSE);
+   
+        /* see if we need to clean up failed submissions */     
+    if (handleFailedReqSubmit) {
+            /* make sure this is cleared */
+        AtomicTest_Clear(&pReq->InternalFlags, SDBD_PENDING);
+            /* the  request processing failed before it was submitted to the HCD */
+            /* note: since it never made it to the queue we can touch pReq */
+        if (pReq->Flags & SDREQ_FLAGS_TRANS_ASYNC) {
+            /* for ASYNC requests, we need to call the completion routine */
+            DoRequestCompletion(pReq, pHcd);
+                /* return pending for all ASYNC requests */ 
+            status = SDIO_STATUS_PENDING;
+        }         
+    }
+
+        /* check if we need to clean up the signal */
+    if (pSignal != NULL) {
+            /* make sure this is freed */
+        FreeSignal(pSignal);    
+    }
+        /* return status */
+    return status;
+}
+
+/* documentation for configuration requests */    
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Enable or Disable the SDIO Function
+  
+  @function name: SDCONFIG_FUNC_ENABLE_DISABLE
+  @prototype: SDCONFIG_FUNC_ENABLE_DISABLE 
+  @category: PD_Reference
+  
+  @input:  SDCONFIG_FUNC_ENABLE_DISABLE_DATA - Enable Data structure
+ 
+  @output: none
+
+  @return: SDIO Status
+ 
+  @notes: This command code is used in the SDLIB_IssueConfig() API.  The command
+          uses the SDCONFIG_FUNC_ENABLE_DISABLE_DATA structure.  The caller must set the
+          EnableFlags and specify the TimeOut value in milliseconds.   The TimeOut
+          value is used for polling the I/O ready bit.  This command returns a status
+          of SDIO_STATUS_FUNC_ENABLE_TIMEOUT if the ready bit was not set/cleared 
+          by the card within the timeout period.
+          
+  @example: Example of enabling an I/O function:
+        fData.EnableFlags = SDCONFIG_ENABLE_FUNC;
+        fData.TimeOut = 500; 
+        status = SDLIB_IssueConfig(pInstance->pDevice,
+                                   SDCONFIG_FUNC_ENABLE_DISABLE,
+                                   &fData,
+                                   sizeof(fData));
+                                    
+  @see also: SDLIB_IssueConfig
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Unmask the function's IRQ
+  
+  @function name: SDCONFIG_FUNC_UNMASK_IRQ
+  @prototype: SDCONFIG_FUNC_UNMASK_IRQ 
+  @category: PD_Reference
+  
+  @input:  none
+ 
+  @output: none
+
+  @return: SDIO Status
+ 
+  @notes: This command code is used in the SDLIB_IssueConfig() API.  The command
+          unmasks the IRQ for the I/O function. This request sets the function's
+          interrupt enable bit in the INTENABLE register in the
+          common register space.
+          
+  @example: Example of unmasking interrupt :
+        status = SDLIB_IssueConfig(pInstance->pDevice,
+                                   SDCONFIG_FUNC_UNMASK_IRQ,
+                                   NULL,
+                                   0);
+                                   
+  @see also: SDCONFIG_FUNC_MASK_IRQ  
+  @see also: SDLIB_IssueConfig 
+      
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Mask the function's IRQ
+  
+  @function name: SDCONFIG_FUNC_MASK_IRQ
+  @prototype: SDCONFIG_FUNC_MASK_IRQ 
+  @category: PD_Reference
+  
+  @input:  none
+ 
+  @output: none
+
+  @return: SDIO Status
+ 
+  @notes: This command code is used in the SDLIB_IssueConfig() API.  The command
+          masks the IRQ for the I/O function.  
+          
+  @example: Example of unmasking interrupt :
+        status = SDLIB_IssueConfig(pInstance->pDevice,
+                                   SDCONFIG_FUNC_MASK_IRQ,
+                                   NULL,
+                                   0);
+                                   
+  @see also: SDCONFIG_FUNC_UNMASK_IRQ  
+  @see also: SDLIB_IssueConfig 
+      
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Acknowledge that the function's IRQ has been handled
+  
+  @function name: SDCONFIG_FUNC_ACK_IRQ
+  @prototype: SDCONFIG_FUNC_ACK_IRQ 
+  @category: PD_Reference
+  
+  @input:  none
+ 
+  @output: none
+
+  @return: SDIO Status
+ 
+  @notes: This command code is used in the SDLIB_IssueConfig() API.  The command
+          indicates to the bus driver that the function driver has handled the 
+          interrupt.  The bus driver will notify the host controller to unmask the
+          interrupt source.  SDIO interrupts are level triggered and are masked at the
+          host controller level until all function drivers have indicated that they 
+          have handled their respective interrupt. This command can be issued in either
+          the IRQ handler or asynchronous IRQ handler.
+          
+  @example: Example of acknowledging an interrupt :
+        status = SDLIB_IssueConfig(pInstance->pDevice,
+                                   SDCONFIG_FUNC_ACK_IRQ,
+                                   NULL,
+                                   0);
+                                   
+  @see also: SDLIB_IssueConfig 
+      
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Disable SD/MMC/SDIO card CRC checking.
+  
+  @function name: SDCONFIG_FUNC_SPI_MODE_DISABLE_CRC
+  @prototype: SDCONFIG_FUNC_SPI_MODE_DISABLE_CRC 
+  @category: PD_Reference
+  
+  @input:  none
+ 
+  @output: none
+
+  @return: SDIO Status
+ 
+  @notes: This command code is used in the SDLIB_IssueConfig() API.  The command
+          issues CMD59 to disable SPI-CRC checking and requests the host controller 
+          driver to stop checking the CRC. This is typically used in systems where 
+          CRC checking is not required and performance is improved if the CRC checking
+          is ommitted (i.e. SPI implementations without hardware CRC support).
+          
+  @example: Example of disabling SPI CRC checking:
+        status = SDLIB_IssueConfig(pInstance->pDevice,
+                                   SDCONFIG_FUNC_SPI_MODE_DISABLE_CRC,
+                                   NULL,
+                                   0);
+                                   
+  @see also: SDCONFIG_FUNC_SPI_MODE_ENABLE_CRC                                  
+  @see also: SDLIB_IssueConfig 
+      
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Enable SD/MMC/SDIO card CRC checking.
+  
+  @function name: SDCONFIG_FUNC_SPI_MODE_ENABLE_CRC
+  @prototype: SDCONFIG_FUNC_SPI_MODE_ENABLE_CRC 
+  @category: PD_Reference
+  
+  @input:  none
+ 
+  @output: none
+
+  @return: SDIO Status
+ 
+  @notes: This command code is used in the SDLIB_IssueConfig() API.  The command
+          issues CMD59 to enable SPI-CRC checking and requests the host controller 
+          driver to generate valid CRCs for commands and data as well as
+          check the CRC in responses and incomming data blocks. 
+          
+  @example: Example of enabling SPI CRC checking:
+        status = SDLIB_IssueConfig(pInstance->pDevice,
+                                   SDCONFIG_FUNC_SPI_MODE_ENABLE_CRC,
+                                   NULL,
+                                   0);
+                                   
+  @see also: SDCONFIG_FUNC_SPI_MODE_DISABLE_CRC                                  
+  @see also: SDLIB_IssueConfig 
+      
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Allocate slot current for a card function.
+  
+  @function name: SDCONFIG_FUNC_ALLOC_SLOT_CURRENT
+  @prototype: SDCONFIG_FUNC_ALLOC_SLOT_CURRENT
+  @category: PD_Reference
+  
+  @input:  SDCONFIG_FUNC_SLOT_CURRENT_DATA
+ 
+  @output: SDCONFIG_FUNC_SLOT_CURRENT_DATA
+
+  @return: SDIO Status
+ 
+  @notes: This command code is used in the SDLIB_IssueConfig() API.  The command
+          requests an allocation of slot current to satisfy the power requirements
+          of the function.  The command uses the SDCONFIG_FUNC_SLOT_CURRENT_DATA 
+          data structure to pass the required current in mA. Slot current allocation
+          is not cummulative and this command should only be issued once by each function
+          driver with the worse case slot current usage.
+          The command returns SDIO_STATUS_NO_RESOURCES if the
+          requirement cannot be met by the host hardware.  The SlotCurrent field will 
+          contain the remaining current available to the slot.  The slot current should 
+          be allocated before the function is enabled using SDCONFIG_FUNC_ENABLE_DISABLE.
+          When a function driver is unloaded it should free the slot current allocation
+          by using the SDCONFIG_FUNC_FREE_SLOT_CURRENT command.
+          
+  @example: Example of allocating slot current:
+        slotCurrent.SlotCurrent = 150;  // 150 mA
+        status = SDLIB_IssueConfig(pInstance->pDevice,
+                                   SDCONFIG_FUNC_ALLOC_SLOT_CURRENT,
+                                   &slotCurrent,
+                                   sizeof(slotCurrent));
+                                   
+                                   
+  @see also: SDCONFIG_FUNC_FREE_SLOT_CURRENT                                  
+  @see also: SDLIB_IssueConfig 
+      
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Free slot current for a card function.
+  
+  @function name: SDCONFIG_FUNC_FREE_SLOT_CURRENT
+  @prototype: SDCONFIG_FUNC_FREE_SLOT_CURRENT
+  @category: PD_Reference
+  
+  @input:  none
+ 
+  @output: none
+
+  @return: SDIO Status
+ 
+  @notes: This command code is used in the SDLIB_IssueConfig() API.  The command
+          frees the allocated current for a card function.  This command should be 
+          issued only once (per function) and only after an allocation was successfully made.
+          
+  @example: Example of freeing slot current:
+        status = SDLIB_IssueConfig(pInstance->pDevice,
+                                   SDCONFIG_FUNC_FREE_SLOT_CURRENT,
+                                   NULL,
+                                   0);
+                                        
+  @see also: SDCONFIG_FUNC_ALLOC_SLOT_CURRENT                                  
+  @see also: SDLIB_IssueConfig 
+      
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Set the bus mode for the SD/SDIO card.
+  
+  @function name: SDCONFIG_FUNC_CHANGE_BUS_MODE
+  @prototype: SDCONFIG_FUNC_CHANGE_BUS_MODE
+  @category: PD_Reference
+  
+  @input:  none
+ 
+  @output: none
+
+  @return: SDIO Status
+ 
+  @notes:     This command code is used in the SDLIB_IssueConfig() API.  The command
+          alters the card's bus mode (width and clock rate) to a driver specified
+          value.  The driver must read the current bus mode flags, modify if necessary
+          and pass the value in the SDCONFIG_BUS_MODE_DATA structure. 
+              If the bus width is changed (1 or 4 bit) the caller must adjust the mode flags 
+          for the new width. Cards cannot be switched between 1/4 bit and SPI mode.  
+          Switching to or from SPI mode requires a power cycle. Adjustments to the clock 
+          rate is immediate on the next bus transaction.  The actual clock rate value is
+          limited by the host controller and is reported in the ClockRate field when the
+          command completes successfully.          
+              The bus mode change is card wide and may affect other SDIO functions on 
+          multi-function cards. Use this feature with caution. This feature should NOT be
+          used to dynamically control clock rates during runtime and should only be used
+          at card initialization. Changing the bus mode must be done with SDIO function 
+          interrupts masked.  
+              This request can block and must only be called from a schedulable context.
+          
+  @example: Example of changing the clock rate:
+    SDCONFIG_BUS_MODE_DATA  busSettings;
+    ZERO_OBJECT(busSettings);
+       // get current bus flags and keep the same bus width
+    busSettings.BusModeFlags = SDDEVICE_GET_BUSMODE_FLAGS(pInstance->pDevice);
+    busSettings.ClockRate = 8000000;  // adjust clock to 8 Mhz
+       // issue config request to override clock rate
+    status = SDLIB_IssueConfig(pInstance->pDevice,
+                               SDCONFIG_FUNC_CHANGE_BUS_MODE,
+                               &busSettings,
+                               sizeof(SDCONFIG_BUS_MODE_DATA)); 
+                                        
+  @see also: SDDEVICE_GET_BUSMODE_FLAGS                                  
+  @see also: SDLIB_IssueConfig 
+      
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the debug level of the underlying host controller driver.
+  
+  @function name: SDCONFIG_GET_HCD_DEBUG
+  @prototype: SDCONFIG_GET_HCD_DEBUG
+  @category: PD_Reference
+  
+  @input:  none
+ 
+  @output: CT_DEBUG_LEVEL
+
+  @return: SDIO Status
+ 
+  @notes: This command code is used in the SDLIB_IssueConfig() API.  The command
+          requests the current debug level of the HCD driver.  This API is useful for
+          saving the current debug level of the HCD prior to issuing SDCONFIG_SET_HCD_DEBUG
+          in order to increase the verbosity of the HCD. This API should be used only for
+          debugging purposes.  If multiple functions attempt to save and set the HCD debug
+          level simultanously, the final debug level will be unknown. Not all HCDs support
+          this command.
+          
+  @example: Example of saving the debug level:
+        CT_DEBUG_LEVEL savedDebug;
+        status = SDLIB_IssueConfig(pInstance->pDevice,
+                                   SDCONFIG_GET_HCD_DEBUG,
+                                   &savedDebug,
+                                   sizeof(savedDebug));
+                                        
+  @see also: SDCONFIG_SET_HCD_DEBUG                                  
+  @see also: SDLIB_IssueConfig 
+      
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Set the debug level of the underlying host controller driver.
+  
+  @function name: SDCONFIG_SET_HCD_DEBUG
+  @prototype: SDCONFIG_SET_HCD_DEBUG
+  @category: PD_Reference
+  
+  @input:  CT_DEBUG_LEVEL
+ 
+  @output: none
+
+  @return: SDIO Status
+ 
+  @notes: This command code is used in the SDLIB_IssueConfig() API.  The command
+          sets the current debug level of the HCD driver.  This API is useful for
+          setting the debug level of the HCD programatically for debugging purposes. 
+          If multiple functions attempt to save and set the HCD debug
+          level simultanously, the final debug level will be unknown. Not all HCDs support
+          this request.
+          
+  @example: Example of setting the debug level:
+        CT_DEBUG_LEVEL setDebug = 15;
+        status = SDLIB_IssueConfig(pInstance->pDevice,
+                                   SDCONFIG_GET_HCD_DEBUG,
+                                   &setDebug,
+                                   sizeof(setDebug));
+                                        
+  @see also: SDCONFIG_GET_HCD_DEBUG                                  
+  @see also: SDLIB_IssueConfig 
+      
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Instruct the bus driver to not check the SDIO card interrupt pending
+             register on card interrupts, if possible.
+  
+  @function name: SDCONFIG_FUNC_NO_IRQ_PEND_CHECK
+  @prototype: SDCONFIG_FUNC_NO_IRQ_PEND_CHECK
+  @category: PD_Reference
+  
+  @input:  none
+ 
+  @output: none
+
+  @return: SDIO Status
+ 
+  @notes: This command code is used in the SDLIB_IssueConfig() API.  The command instructs the
+          bus driver to skip checking the card interrupt pending register on each card
+          interrupt.  The bus driver will assume the function is interrupting and immediately start
+          the interrupt processing stage. This option is only valid for single function cards.  
+          The bus driver will reject the command for a card with more than 1 function. 
+          For single function cards, this can improve interrupt response time.
+          
+  @example: Example of skipping IRQ pending checks:
+       
+        status = SDLIB_IssueConfig(pInstance->pDevice,
+                                   SDCONFIG_FUNC_NO_IRQ_PEND_CHECK,
+                                   NULL,
+                                   0);
+                                                                      
+  @see also: SDLIB_IssueConfig 
+      
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_bus_events.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_bus_events.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_bus_events.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,1044 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_bus_events.c
+
+ at abstract: OS independent bus driver support
+
+#notes: this file contains various event handlers and helpers
+ 
+ at notice: Copyright (c), 2004-2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define MODULE_NAME  SDBUSDRIVER
+#include "../include/ctsystem.h"
+#include "../include/sdio_busdriver.h"
+#include "../include/sdio_lib.h"
+#include "_busdriver.h"
+#include "../include/_sdio_defs.h"
+#include "../include/mmc_defs.h"
+
+static SDIO_STATUS ScanSlotForCard(PSDHCD pHcd,
+                                   PBOOL  pCardPresent);
+static void GetPendingIrqComplete(PSDREQUEST pReq);
+static void ProcessPendingIrqs(PSDHCD  pHcd, UINT8 IntPendingMsk);
+
+/* 
+ * DeviceDetach - tell core a device was removed from a slot
+*/
+SDIO_STATUS DeviceDetach(PSDHCD pHcd) 
+{    
+    SDCONFIG_SDIO_INT_CTRL_DATA irqData;
+    
+    ZERO_OBJECT(irqData);
+     
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO Bus Driver: DeviceDetach\n"));
+        /* tell any function drivers we are gone */
+    RemoveHcdFunctions(pHcd);
+        /* delete the devices associated with this HCD */        
+    DeleteDevices(pHcd);
+        /* check and see if there are any IRQs that were left enabled */
+    if (pHcd->IrqsEnabled) {
+        irqData.SlotIRQEnable = FALSE;
+            /* turn off IRQ detection in HCD */
+        _IssueConfig(pHcd,SDCONFIG_SDIO_INT_CTRL,(PVOID)&irqData, sizeof(irqData));
+    }
+    
+        /* reset hcd state */
+    ResetHcdState(pHcd);
+                                    
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO Bus Driver: DeviceDetach\n"));
+    return SDIO_STATUS_SUCCESS;
+}
+                 
+/* 
+ * DeviceAttach - tell core a device was inserted into a slot
+*/
+SDIO_STATUS DeviceAttach(PSDHCD pHcd) 
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    PSDDEVICE pDevice = NULL;
+    UINT      ii;
+    
+    
+    if (IS_CARD_PRESENT(pHcd)) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: DeviceAttach called on occupied slot!\n"));
+        return SDIO_STATUS_ERROR;   
+    }
+  
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO Bus Driver: DeviceAttach bdctxt:0x%X \n", (UINT32)pBusContext));
+    
+    if (IS_HCD_RAW(pHcd)) {
+         DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: RAW HCD (%s) device attach \n",pHcd->pName));
+            /* this is a raw HCD */
+        memset(&pHcd->CardProperties,0,sizeof(pHcd->CardProperties));
+        pHcd->CardProperties.Flags = CARD_RAW;
+        pHcd->CardProperties.IOFnCount = 0;
+          /* for raw HCD, set up minimum parameters
+           * since we cannot determine these values using any standard, use values
+           * reported by the HCD */            
+            /* the operational rate is just the max clock rate reported */
+        pHcd->CardProperties.OperBusClock =  pHcd->MaxClockRate;
+            /* the max bytes per data transfer is just the max bytes per block */
+        pHcd->CardProperties.OperBlockLenLimit = pHcd->MaxBytesPerBlock; 
+            /* if the raw HCD uses blocks to transfer, report the operational size
+             * from the HCD max value */
+        pHcd->CardProperties.OperBlockCountLimit = pHcd->MaxBlocksPerTrans; 
+            /* set the slot preferred voltage */
+        pHcd->CardProperties.CardVoltage = pHcd->SlotVoltagePreferred;
+    } else {
+            /* initialize this card and get card properties  */
+        if (!SDIO_SUCCESS((status = SDInitializeCard(pHcd)))) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: DeviceAttach, failed to initialize card, %d\n", 
+                                   status));
+            return status;
+        }
+    }
+    
+        /* check for SD or MMC, this must be done first as the query may involve
+         * de-selecting the card */
+    do {
+        if (!(pHcd->CardProperties.Flags & (CARD_MMC | CARD_SD | CARD_RAW))) {
+                /* none of these were discovered */
+            break;
+        }
+        pDevice = AllocateDevice(pHcd);        
+        if (NULL == pDevice) {
+            break;
+        }            
+        if (pHcd->CardProperties.Flags & CARD_RAW) {
+                /* set function number to 1 for IRQ processing */
+            SDDEVICE_SET_SDIO_FUNCNO(pDevice,1);  
+        } else {
+                /* get the ID info for the SD/MMC Card */
+            if (!SDIO_SUCCESS((status = SDQuerySDMMCInfo(pDevice)))) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: DeviceAttach, query SDMMC Info failed \n"));
+                FreeDevice(pDevice);
+                break;
+            }
+        }     
+        AddDeviceToList(pDevice);
+            /* look for a function driver to handle this card */
+        ProbeForFunction(pDevice, pHcd);         
+    } while (FALSE);
+    
+        /* create a device for each I/O function */
+    for(ii= 1; ii <= pHcd->CardProperties.IOFnCount; ii++) {       
+        pDevice = AllocateDevice(pHcd);        
+        if (NULL == pDevice) {
+            break;
+        } 
+            /* set the function number */
+        SDDEVICE_SET_SDIO_FUNCNO(pDevice,ii);  
+            /* get the ID info for each I/O function */
+        if (!SDIO_SUCCESS((status = SDQuerySDIOInfo(pDevice)))) {
+            DBG_PRINT(SDDBG_ERROR, 
+                    ("SDIO Bus Driver: DeviceAttach, could not query SDIO Info, funcNo:%d status:%d \n",
+                    ii, status));
+            FreeDevice(pDevice);
+                /* keep loading other functions */
+            continue;
+        }
+        AddDeviceToList(pDevice);
+            /* look for a function driver to handle this card */
+        ProbeForFunction(pDevice, pHcd);
+    }    
+    
+      
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO Bus Driver: DeviceAttach \n"));
+    return status;
+}   
+  
+static INLINE void CompleteRequestCheckCancel(PSDHCD pHcd, PSDREQUEST pReqToComplete) 
+{
+    BOOL cancel = FALSE;
+    PSDFUNCTION pFunc = NULL;
+    
+        /* handle cancel of current request */
+    if (pReqToComplete->Flags & SDREQ_FLAGS_CANCELED) {
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver - _SDIO_HandleHcdEvent: cancelling req 0X%X\n", (UINT)pReqToComplete)); 
+        cancel = TRUE;
+        pReqToComplete->Status = SDIO_STATUS_CANCELED;
+        pFunc = pReqToComplete->pFunction;
+        DBG_ASSERT(pFunc != NULL);
+    } 
+    
+    DoRequestCompletion(pReqToComplete, pHcd);
+    
+    if (cancel) {
+        SignalSet(&pFunc->CleanupReqSig);
+    } 
+}
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Indicate to the SDIO bus driver (core) of an event in the host controller
+             driver.
+             
+  @function name: SDIO_HandleHcdEvent
+  @prototype: SDIO_STATUS SDIO_HandleHcdEvent(PSDHCD pHcd, HCD_EVENT Event) 
+  @category: HD_Reference
+  
+  @input:  pHcd - the host controller structure that was registered
+           HCD_EVENT - event code
+  
+  @output: none
+
+  @return: SDIO_STATUS
+ 
+  @notes:  
+          The host controller driver can indicate asynchronous events by calling this 
+          function with an appropriate event code. Refer to the HDK help manual for
+          more information on the event types
+  
+  @example: Example of indicating a card insertion event:
+            SDIO_HandleHcdEvent(&Hcd, EVENT_HCD_ATTACH);
+ 
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS _SDIO_HandleHcdEvent(PSDHCD pHcd, HCD_EVENT Event) 
+{
+    PSDREQUEST       pReq;
+    PSDREQUEST       pReqToComplete = NULL;
+    PSDREQUEST       pNextReq = NULL;
+    SDIO_STATUS      status;
+    CT_DECLARE_IRQ_SYNC_CONTEXT();
+    
+    DBG_PRINT(SDIODBG_HCD_EVENTS, ("SDIO Bus Driver: _SDIO_HandleHcdEvent, event type 0x%X, HCD:0x%X\n", 
+                         Event, (UINT)pHcd));
+    
+    if (Event == EVENT_HCD_TRANSFER_DONE) {
+        pReq = GET_CURRENT_REQUEST(pHcd); 
+        if (NULL == pReq) {
+            DBG_ASSERT(FALSE);
+            return SDIO_STATUS_ERROR;   
+        }
+        
+        status = _AcquireHcdLock(pHcd);      
+        if (SDIO_SUCCESS(status)) {
+                /* null out the current request */
+            SET_CURRENT_REQUEST(pHcd, NULL);
+            status = _ReleaseHcdLock(pHcd);  
+        } else {
+            DBG_PRINT(SDDBG_ERROR,
+              ("SDIO Bus Driver: SDIO_HandleHcdEvent Failed to acquire HCD lock \n"));
+            return SDIO_STATUS_ERROR;
+        }    
+           
+            /* note: the queue is still marked busy to prevent other threads/tasks from starting
+             * new requests while we are handling completion , some completed requests are
+             * marked as barrier requests which must be handled atomically */
+             
+        status = pReq->Status;
+        DBG_PRINT(SDIODBG_REQUESTS,
+            ("+SDIO Bus Driver: Handling Transfer Done (CMD:%d, Status:%d) from HCD:0x%08X \n",
+                  pReq->Command, status, (INT)pHcd));    
+            /* check SPI mode conversion */
+        if (IS_HCD_BUS_MODE_SPI(pHcd) && SDIO_SUCCESS(status)) { 
+            if (!(pReq->Flags & SDREQ_FLAGS_RESP_SKIP_SPI_FILT) && !(pReq->Flags & SDREQ_FLAGS_PSEUDO) &&
+                (GET_SDREQ_RESP_TYPE(pReq->Flags) != SDREQ_FLAGS_NO_RESP)) {
+                ConvertSPI_Response(pReq, NULL);     
+            } 
+        }        
+                                   
+        DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: Completing Request:0x%08X \n",(INT)pReq));
+
+        if (!SDIO_SUCCESS(status) &&
+            (status != SDIO_STATUS_CANCELED)  && 
+            !(pReq->Flags & SDREQ_FLAGS_CANCELED) &&
+            (pReq->RetryCount > 0)) {
+                /* retry the request if it failed, was NOT cancelled and the retry count
+                 * is greater than zero */
+            pReq->RetryCount--;
+            pReqToComplete = NULL;
+                /* clear SPI converted flag */
+            pReq->Flags &= ~SDREQ_FLAGS_RESP_SPI_CONVERTED;
+            pNextReq = pReq;     
+        } else {
+                /* complete the request */
+            if (pReq->Flags & SDREQ_FLAGS_BARRIER) {
+                    /* a barrier request must be completed before the next bus request is
+                     * started */
+                CompleteRequestCheckCancel(pHcd, pReq);
+                if (!ForceAllRequestsAsync()) {
+                    if (CHECK_API_VERSION_COMPAT(pHcd,2,6)) {
+                            /* the request was completed, decrement recursion count */
+                        status = _AcquireHcdLock(pHcd);
+                        if (!SDIO_SUCCESS(status)) {
+                            return status;    
+                        }
+                        pHcd->Recursion--;
+                        DBG_ASSERT(pHcd->Recursion >= 0);
+                        status = _ReleaseHcdLock(pHcd);
+                    } else {
+                            /* reset bit */
+                        AtomicTest_Clear(&pHcd->HcdFlags, HCD_REQUEST_CALL_BIT);
+                    }
+                }
+                pReqToComplete = NULL;
+            } else {
+                    /* complete this after the next request has
+                     * been started */
+                pReqToComplete = pReq; 
+            }
+        }
+        
+            /* acquire the hcd lock to look at the queues */
+        status = _AcquireHcdLock(pHcd);   
+        if (SDIO_SUCCESS(status)) {
+            if (pReqToComplete != NULL) {
+                    /* queue the request that was completed */
+                QueueRequest(&pHcd->CompletedRequestQueue, pReqToComplete);
+            }  
+            if (NULL == pNextReq) { 
+                    /* check the queue for the next request */                    
+                DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: Checking queue.. \n"));       
+                    /* check to see if the HCD was already working on one.  This occurs if
+                     * the current request being completed was a barrier request and the
+                     * barrier completion routine submitted a new request to the head of the
+                     * queue */
+                if (GET_CURRENT_REQUEST(pHcd) == NULL) {
+                    pNextReq = DequeueRequest(&pHcd->RequestQueue);         
+                    if (NULL == pNextReq) {
+                            /* nothing in the queue, mark it not busy */
+                        MarkQueueNotBusy(&pHcd->RequestQueue); 
+                        DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: Queue idle \n")); 
+                    } else {
+                        DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: Next request in queue: 0x%X \n",
+                            (INT)pNextReq));
+                    }
+                } else {
+                    DBG_PRINT(SDIODBG_REQUESTS, 
+                        ("SDIO Bus Driver: Busy Queue from barrier request \n"));
+                }
+            }
+            
+            if (pNextReq != NULL) {
+                    /* a new request will be submitted to the HCD below, 
+                     * check recursion while we have the lock */
+                if (CHECK_API_VERSION_COMPAT(pHcd,2,6)) {
+                    CHECK_HCD_RECURSE(pHcd,pNextReq);
+                }   
+            }                   
+            status = _ReleaseHcdLock(pHcd);   
+        } else {
+            DBG_PRINT(SDDBG_ERROR,
+              ("SDIO Bus Driver: SDIO_HandleHcdEvent Failed to acquire HCD lock \n"));
+            return SDIO_STATUS_ERROR;
+        }        
+            /* check for the next request to issue */          
+        if (pNextReq != NULL) {     
+            DBG_PRINT(SDIODBG_REQUESTS, ("SDIO Bus Driver: Starting Next Request: 0x%X \n",
+                        (INT)pNextReq));          
+            SET_CURRENT_REQUEST(pHcd,pNextReq); 
+            status = CallHcdRequest(pHcd);
+                /* check and see if the HCD completed the request in the callback */
+            if (status != SDIO_STATUS_PENDING) {              
+                    /* recurse and process the request */
+                _SDIO_HandleHcdEvent(pHcd, EVENT_HCD_TRANSFER_DONE);  
+            } 
+        }            
+                
+        /* now empty the completed request queue
+         * - this guarantees in-order completion even during recursion */        
+        status = _AcquireHcdLock(pHcd);   
+        if (SDIO_SUCCESS(status)) {  
+            while (1) {
+                pReqToComplete = DequeueRequest(&pHcd->CompletedRequestQueue);  
+                status = _ReleaseHcdLock(pHcd);  
+                if (pReqToComplete != NULL) { 
+                    CompleteRequestCheckCancel(pHcd, pReqToComplete);
+                    if (!CHECK_API_VERSION_COMPAT(pHcd,2,6)) {
+                        if (!ForceAllRequestsAsync()) {
+                                /* reset bit */
+                            AtomicTest_Clear(&pHcd->HcdFlags, HCD_REQUEST_CALL_BIT);                           
+                        }
+                    }
+                        /* re-acquire lock */ 
+                    status = _AcquireHcdLock(pHcd);              
+                    if (!SDIO_SUCCESS(status)) {
+                        return SDIO_STATUS_ERROR;  
+                    }
+                    if (CHECK_API_VERSION_COMPAT(pHcd,2,6)) {
+                        if (!ForceAllRequestsAsync()) {
+                            /* while we have the lock, decrement recursion count each time
+                             * we complete a request */
+                            pHcd->Recursion--;
+                            DBG_ASSERT(pHcd->Recursion >= 0);
+                        }
+                    }
+                }  else {
+                        /* we're done */
+                    break;  
+                }
+            }
+        } else {
+            DBG_PRINT(SDDBG_ERROR,
+              ("SDIO Bus Driver: SDIO_HandleHcdEvent Failed to acquire HCD lock \n"));
+            return SDIO_STATUS_ERROR;   
+        }        
+        DBG_PRINT(SDIODBG_REQUESTS, ("-SDIO Bus Driver: Transfer Done Handled \n"));   
+        return SDIO_STATUS_SUCCESS;               
+    } 
+    
+    switch(Event) {
+        case EVENT_HCD_ATTACH:        
+        case EVENT_HCD_DETACH:
+                /* card detect helper does the actual attach detach */ 
+            return PostCardDetectEvent(pBusContext,Event,pHcd);
+        case EVENT_HCD_SDIO_IRQ_PENDING:
+            return DeviceInterrupt(pHcd);
+        default:
+            DBG_PRINT(SDDBG_ERROR, ("-SDIO Bus Driver: SDIO_HandleHcdEvent, invalid event type 0x%X, HCD:0x%X\n", 
+                                    Event, (UINT)pHcd));
+        return SDIO_STATUS_INVALID_PARAMETER;
+    }
+    
+}
+
+/* card detect helper function */
+THREAD_RETURN CardDetectHelperFunction(POSKERNEL_HELPER pHelper)
+{
+    SDIO_STATUS       status;
+    HCD_EVENT_MESSAGE message;
+    INT               length;
+    
+    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver - CardDetectHelperFunction starting up: 0x%X \n", (INT)pHelper));
+    
+    while (1) {
+         
+            /* wait for wake up event */
+        status = SD_WAIT_FOR_WAKEUP(pHelper);    
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver - Card Detect Helper Semaphore Pend Error:%d \n",
+                                    status));
+            break;
+        } 
+        
+        if (SD_IS_HELPER_SHUTTING_DOWN(pHelper)) {
+                /* cleanup message queue on shutdown */
+            while (1) {
+                length = sizeof(message);
+                    /* get a message */
+                status = SDLIB_GetMessage(pBusContext->pCardDetectMsgQueue, 
+                                          &message, &length);
+                if (!SDIO_SUCCESS(status)) {
+                    break;
+                }
+                if (message.pHcd != NULL) {
+                        /* decrement HCD reference count */
+                    OS_DecHcdReference(message.pHcd);    
+                }
+            }      
+               
+            break;   
+        }
+        
+        while (1) {
+            length = sizeof(message);
+                /* get a message */
+            status = SDLIB_GetMessage(pBusContext->pCardDetectMsgQueue, 
+                                      &message, &length);
+            if (!SDIO_SUCCESS(status)) {
+                break;
+            }
+                          
+            switch (message.Event) {
+                case EVENT_HCD_ATTACH: 
+                    DeviceAttach(message.pHcd);       
+                    break;
+                case EVENT_HCD_DETACH:
+                    DeviceDetach(message.pHcd); 
+                    break;
+                case EVENT_HCD_CD_POLLING:
+                        /* run detector */
+                    RunCardDetect();
+                    break;
+                default:
+                    DBG_ASSERT(FALSE);
+                    break;
+            }
+            
+            if (message.pHcd != NULL) {
+                    /* message was processed, decrement reference count */
+                OS_DecHcdReference(message.pHcd);    
+            }
+        }            
+    }
+ 
+    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver - Card Detect Helper Exiting.. \n"));
+    return 0;
+}
+
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  RunCardDetect - run card detect on host controller slots that require polling
+  Input:  
+  Output: 
+  Return:  
+  Notes: This function is called from the card detect timer thread 
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void RunCardDetect(void)
+{
+    BOOL       CDPollingRequired = FALSE;
+    PSDLIST    pListItem;
+    PSDHCD     pHcd;
+    BOOL       cardPresent;
+    
+    DBG_PRINT(SDIODBG_CD_TIMER, ("+SDIO Bus Driver: RunCardDetect\n"));
+    
+       /* protect the HCD list */
+    if (!SDIO_SUCCESS(SemaphorePendInterruptable(&pBusContext->HcdListSem))) {
+        DBG_ASSERT(FALSE);
+        return;  /* wait interrupted */
+    }
+        /* while we are running the detector we are blocking HCD removal*/
+    SDITERATE_OVER_LIST(&pBusContext->HcdList, pListItem) {
+        pHcd = CONTAINING_STRUCT(pListItem, SDHCD, SDList);
+            /* does the HCD require polling ? */
+        if (pHcd->Attributes & SDHCD_ATTRIB_SLOT_POLLING) {
+            DBG_PRINT(SDIODBG_CD_TIMER, ("SDIO Bus Driver: Found HCD requiring polling \n"));
+                /* set flag to queue the timer */
+            CDPollingRequired = TRUE;              
+            if (IS_CARD_PRESENT(pHcd)) {
+                    /* there is a device in the slot */
+                cardPresent = TRUE;   
+                if (SDIO_SUCCESS(ScanSlotForCard(pHcd,&cardPresent))) {
+                    if (!cardPresent) {
+                        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver CD Polling.. Card Removal Detected\n"));
+                        DeviceDetach(pHcd);
+                    }    
+                }
+            } else {
+                cardPresent = FALSE;
+                if (SDIO_SUCCESS(ScanSlotForCard(pHcd,&cardPresent))) {
+                     if (cardPresent) {
+                        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver CD Polling.. Card Detected\n"));
+                        DeviceAttach(pHcd);
+                    }    
+                }   
+            }     
+        } 
+        
+        DBG_PRINT(SDIODBG_CD_TIMER, ("SDIO Bus Driver: moving to next hcd:0x%X \n",
+                                     (INT)pListItem->pNext));
+    }
+    
+        /* check if we need to queue the timer */
+    if (CDPollingRequired && !pBusContext->CDTimerQueued) {
+        pBusContext->CDTimerQueued = TRUE;
+        DBG_PRINT(SDIODBG_CD_TIMER, ("SDIO Bus Driver: Queuing Card detect timer \n"));
+        if (!SDIO_SUCCESS(
+            QueueTimer(SDIOBUS_CD_TIMER_ID, pBusContext->CDPollingInterval))) {
+            DBG_PRINT(SDDBG_WARN, ("SDIO Bus Driver: failed to queue CD timer \n"));
+            pBusContext->CDTimerQueued = FALSE;
+        }
+    }
+        /* release HCD list lock */    
+    SemaphorePost(&pBusContext->HcdListSem);
+    DBG_PRINT(SDIODBG_CD_TIMER, ("-SDIO Bus Driver: RunCardDetect\n"));
+}
+
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  ScanSlotForCard - scan slot for a card
+  Input:  pHcd - the hcd
+  Output: pCardPresent - card present flag (set/cleared on return)
+  Return: 
+  Notes: 
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static SDIO_STATUS ScanSlotForCard(PSDHCD pHcd,PBOOL pCardPresent)
+{
+    SDIO_STATUS         status = SDIO_STATUS_SUCCESS;
+    UINT8               temp;
+    
+    DBG_PRINT(SDIODBG_CD_TIMER, ("+SDIO Bus Driver: ScanSlotForCard\n"));
+    
+    do {
+        if (!IS_CARD_PRESENT(pHcd)) {
+            INT   dbgLvl;
+            dbgLvl = DBG_GET_DEBUG_LEVEL();
+            DBG_SET_DEBUG_LEVEL(SDDBG_WARN);            
+            status = CardInitSetup(pHcd);
+            DBG_SET_DEBUG_LEVEL(dbgLvl);
+            if (!SDIO_SUCCESS(status)) {
+                break;   
+            }  
+                /* issue go-idle */
+            if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+                _IssueSimpleBusRequest(pHcd,CMD0,0,SDREQ_FLAGS_RESP_R1,NULL);  
+            } else {
+                _IssueSimpleBusRequest(pHcd,CMD0,0,SDREQ_FLAGS_NO_RESP,NULL);
+            }
+                /* try SDIO */
+            status = TestPresence(pHcd,CARD_SDIO,NULL);
+            if (SDIO_SUCCESS(status)) {
+                *pCardPresent = TRUE;
+                break;    
+            }
+                /* issue go-idle */
+            if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+                _IssueSimpleBusRequest(pHcd,CMD0,0,SDREQ_FLAGS_RESP_R1,NULL);  
+            } else {
+                _IssueSimpleBusRequest(pHcd,CMD0,0,SDREQ_FLAGS_NO_RESP,NULL);
+            }        
+                /* try SD */ 
+            status = TestPresence(pHcd,CARD_SD,NULL);           
+            if (SDIO_SUCCESS(status)) {
+                *pCardPresent = TRUE;
+                break;    
+            }
+                /* issue go-idle */
+            if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+                _IssueSimpleBusRequest(pHcd,CMD0,0,SDREQ_FLAGS_RESP_R1,NULL);  
+            } else {
+                _IssueSimpleBusRequest(pHcd,CMD0,0,SDREQ_FLAGS_NO_RESP,NULL);
+            }
+                /* try MMC */
+            status = TestPresence(pHcd,CARD_MMC,NULL); 
+            if (SDIO_SUCCESS(status)) {
+                *pCardPresent = TRUE;
+                break;    
+            }
+        } else { 
+            if (pHcd->CardProperties.Flags & CARD_SDIO) {
+#ifdef DUMP_INT_PENDING           
+                temp = 0;
+                    /* handy debug prints to check interrupt status and print pending register */                
+                status = Cmd52ReadByteCommon(pHcd->pPseudoDev, SDIO_INT_ENABLE_REG, &temp); 
+                if (SDIO_SUCCESS(status) && (temp != 0)) { 
+                    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: INT Enable Reg: 0x%2.2X\n", temp));
+                    status = Cmd52ReadByteCommon(pHcd->pPseudoDev, SDIO_INT_PENDING_REG, &temp); 
+                    if (SDIO_SUCCESS(status)) { 
+                        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: INT Pend Reg: 0x%2.2X\n", temp));
+                    }
+                }
+#endif
+                    /* for SDIO cards, read the revision register */
+                status = Cmd52ReadByteCommon(pHcd->pPseudoDev, CCCR_SDIO_REVISION_REG, &temp);      
+            } else if (pHcd->CardProperties.Flags & (CARD_SD | CARD_MMC)) {                    
+                    /* for SD/MMC cards, issue SEND_STATUS */
+                if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+                        /* SPI uses the SPI R2 response */
+                    status = _IssueSimpleBusRequest(pHcd,
+                                                    CMD13,
+                                                    0,
+                                                    SDREQ_FLAGS_RESP_R2,
+                                                    NULL);  
+                } else {
+                    status = _IssueSimpleBusRequest(pHcd,
+                                                    CMD13,
+                                                    (pHcd->CardProperties.RCA << 16),
+                                                    SDREQ_FLAGS_RESP_R1,NULL);    
+                }
+            } else {
+                DBG_ASSERT(FALSE);   
+            }
+            if (!SDIO_SUCCESS(status)) {
+                    /* card is gone */   
+                *pCardPresent = FALSE;  
+            }
+        }        
+    } while (FALSE);
+    
+    if (status == SDIO_STATUS_BUS_RESP_TIMEOUT) {
+        status = SDIO_STATUS_SUCCESS;  
+    }
+    
+    DBG_PRINT(SDIODBG_CD_TIMER, ("-SDIO Bus Driver: ScanSlotForCard status:%d\n",
+                                 status));
+            
+    return status;
+}
+    
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  DeviceInterrupt - handle device interrupt
+  Input:  pHcd -  host controller
+  Output: 
+  Return: 
+  Notes: 
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS DeviceInterrupt(PSDHCD pHcd) 
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    SDIO_STATUS status2;
+    PSDREQUEST pReq = NULL;
+    CT_DECLARE_IRQ_SYNC_CONTEXT();
+    
+    DBG_PRINT(SDIODBG_FUNC_IRQ, ("+SDIO Bus Driver: DeviceInterrupt\n"));
+    
+    if (!IS_CARD_PRESENT(pHcd)) {
+        DBG_PRINT(SDDBG_ERROR, ("-SDIO Bus Driver: Device interrupt asserted on empty slot!\n"));
+        return SDIO_STATUS_ERROR;  
+    } 
+   
+    do {
+            /* for RAW HCDs or HCDs flagged for single-function IRQ optimization */
+        if (IS_HCD_RAW(pHcd) || (pHcd->HcdFlags & (1 << HCD_IRQ_NO_PEND_CHECK))) {
+            status = _AcquireHcdLock(pHcd);
+            if (!SDIO_SUCCESS(status)) {
+                return status; 
+            }
+            if (pHcd->IrqProcState != SDHCD_IDLE) {
+                DBG_PRINT(SDDBG_ERROR, ("-SDIO Bus Driver: Already processing interrupts! (state = %d) \n",
+                                    pHcd->IrqProcState));                                      
+                status = SDIO_STATUS_ERROR; 
+                status2 = _ReleaseHcdLock(pHcd); 
+            } else {
+                DBG_PRINT(SDIODBG_FUNC_IRQ, ("SDIO Bus Driver :  Device Interrupt \n"));
+                    /* mark that we are processing */
+                pHcd->IrqProcState = SDHCD_IRQ_PENDING;
+                status2 = _ReleaseHcdLock(pHcd); 
+                    /* process Irqs for raw hcds or HCDs with the single function optimization */
+                    /* force processing of function 1 interrupt */
+                ProcessPendingIrqs(pHcd, (1 << 1));
+            }
+            DBG_PRINT(SDIODBG_FUNC_IRQ, ("-SDIO Bus Driver: DeviceInterrupt: %d\n", status));            
+                /* done with RAW irqs */
+            return status;  
+        }
+        
+            /* pre-allocate a request to get the pending bits, we have to do this outside the
+              * hcd lock acquisition */ 
+        pReq = AllocateRequest();
+        
+        if (NULL == pReq) {
+            status = SDIO_STATUS_NO_RESOURCES; 
+            break;   
+        }
+            
+        status = _AcquireHcdLock(pHcd);
+        
+        if (!SDIO_SUCCESS(status)) {
+            break;
+        }
+    
+        if (pHcd->IrqProcState != SDHCD_IDLE) {
+            DBG_PRINT(SDDBG_ERROR, ("-SDIO Bus Driver: Already processing interrupts! (state = %d) \n",
+                                    pHcd->IrqProcState));                                      
+            status = SDIO_STATUS_ERROR; 
+        } else {           
+                /* mark that we are processing */
+            pHcd->IrqProcState = SDHCD_IRQ_PENDING;
+                /* build argument to read IRQ pending register */
+            SDIO_SET_CMD52_READ_ARG(pReq->Argument,0,SDIO_INT_PENDING_REG);    
+            pReq->Command = CMD52;
+            pReq->Flags = SDREQ_FLAGS_TRANS_ASYNC | SDREQ_FLAGS_RESP_SDIO_R5;
+            pReq->pCompleteContext = (PVOID)pHcd;
+            pReq->pCompletion = GetPendingIrqComplete;
+            pReq->RetryCount = SDBUS_MAX_RETRY;
+        }
+        
+        status2 = _ReleaseHcdLock(pHcd); 
+        
+        if (!SDIO_SUCCESS(status2)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: lock release error: %d\n", status2));
+        }   
+        
+    } while (FALSE);
+     
+    if (SDIO_SUCCESS(status)) {
+        DBG_ASSERT(pReq != NULL);
+        IssueRequestToHCD(pHcd,pReq); 
+        status = SDIO_STATUS_PENDING; 
+    } else {
+        if (pReq != NULL) {
+            FreeRequest(pReq);       
+        }       
+    }
+    
+    DBG_PRINT(SDIODBG_FUNC_IRQ, ("-SDIO Bus Driver: DeviceInterrupt: %d\n", status));
+    return status;  
+}
+
+
+/* SDIO IRQ helper */
+THREAD_RETURN SDIOIrqHelperFunction(POSKERNEL_HELPER pHelper)
+{
+    PSDHCD            pHcd;
+    SDIO_STATUS       status;
+    PSDLIST           pListItem;
+    PSDDEVICE         pDevice;
+    UINT8             funcMask;
+    PSDDEVICE         pDeviceIRQ[7];
+    UINT              deviceIrqCount = 0;
+    UINT              ii;
+    
+    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver - SDIOIrqHelperFunction starting up \n"));
+    
+    pHcd = (PSDHCD)pHelper->pContext;
+    DBG_ASSERT(pHcd != NULL);
+    
+    while (1) {
+        
+            /* wait for wake up event */
+        status = SD_WAIT_FOR_WAKEUP(pHelper);    
+           
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver - SDIOIrqHelperFunction Pend Error:%d \n",
+                                    status));
+            break;
+        }
+                
+        if (SD_IS_HELPER_SHUTTING_DOWN(pHelper)) {
+            break;   
+        }        
+        
+        DBG_PRINT(SDIODBG_FUNC_IRQ, ("SDIO Bus Driver - Pending IRQs:0x%X \n", 
+                                     pHcd->PendingHelperIrqs));
+       
+         /* take the device list lock as we iterate through the list, this blocks
+             * device removals */
+        status = SemaphorePendInterruptable(&pBusContext->DeviceListSem);           
+        if (!SDIO_SUCCESS(status)) {
+            break;
+        }           
+            /* walk through the device list matching HCD and interrupting function */
+        SDITERATE_OVER_LIST(&pBusContext->DeviceList, pListItem) {
+            pDevice = CONTAINING_STRUCT(pListItem, SDDEVICE, SDList);
+                /* check if device belongs to the HCD */
+            if (pDevice->pHcd != pHcd){
+                    /* not on this hcd */
+                continue;
+            }
+            funcMask = 1 << SDDEVICE_GET_SDIO_FUNCNO(pDevice); 
+                /* check device function against the pending mask */
+            if (!(funcMask & pHcd->PendingHelperIrqs)) {
+                    /* this one is not scheduled for the helper */   
+                continue;
+            }
+                /* clear bit */
+            pHcd->PendingHelperIrqs &= ~funcMask;
+                /* check for sync IRQ and call handler */          
+            if (pDevice->pIrqFunction != NULL) {
+                DBG_PRINT(SDIODBG_FUNC_IRQ, ("SDIO Bus Driver: Calling IRQ Handler. Fn:%d\n",
+                                             SDDEVICE_GET_SDIO_FUNCNO(pDevice)));
+                /* save the device so we can process it without holding any locks */
+                pDeviceIRQ[deviceIrqCount++] = pDevice; 
+            } else {  
+                    /* this is actually okay if the device is removing, the callback
+                     * is NULLed out */             
+                DBG_PRINT(SDIODBG_FUNC_IRQ, ("SDIO Bus Driver: No IRQ handler Fn:%d\n",
+                                             SDDEVICE_GET_SDIO_FUNCNO(pDevice)));
+            }
+        } 
+            /* should have handled all these */
+        DBG_ASSERT(pHcd->PendingHelperIrqs == 0);
+        pHcd->PendingHelperIrqs = 0;
+        SemaphorePost(&pBusContext->DeviceListSem);       
+        for (ii = 0; ii < deviceIrqCount; ii++) {
+            /* now call the function */
+            SDDEVICE_CALL_IRQ_HANDLER(pDeviceIRQ[ii]); 
+        }
+        deviceIrqCount = 0;
+    }
+
+    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver - SDIOIrqHelperFunction Exiting.. \n"));
+    return 0;  
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  GetPendingIrqComplete - completion routine for getting pending IRQs
+  Input:  pRequest -  completed request
+  Output: 
+  Return: 
+  Notes: 
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static void GetPendingIrqComplete(PSDREQUEST pReq) 
+{
+    UINT8       intPendingMsk;  
+    PSDHCD      pHcd; 
+  
+    do {
+        pHcd = (PSDHCD)pReq->pCompleteContext;
+        DBG_ASSERT(pHcd != NULL);
+        
+        if (!SDIO_SUCCESS(pReq->Status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to get Interrupt pending register Err:%d\n",
+                                    pReq->Status)); 
+            break; 
+        } 
+               
+        if (SD_R5_GET_RESP_FLAGS(pReq->Response) & SD_R5_ERRORS) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: CMD52 resp error: 0x%X \n", 
+                                    SD_R5_GET_RESP_FLAGS(pReq->Response)));
+            break; 
+        }
+            /* extract the pending mask */     
+        intPendingMsk =  SD_R5_GET_READ_DATA(pReq->Response) & SDIO_INT_PEND_MASK;
+            /* process them */
+        ProcessPendingIrqs(pHcd, intPendingMsk);
+        
+    } while (FALSE);
+    
+    FreeRequest(pReq);
+    
+    DBG_PRINT(SDIODBG_FUNC_IRQ, ("-SDIO Bus Driver: GetPendingIrqComplete \n"));
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  ProcessPendingIrqs - processing pending Irqs
+  Input:  pHcd - host controller
+  Input:  IntPendingMsk -  pending irq bit mask
+  Output: 
+  Return: 
+  Notes: 
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static void ProcessPendingIrqs(PSDHCD pHcd, UINT8 IntPendingMsk)
+{
+    PSDLIST     pListItem;
+    PSDDEVICE   pDevice;
+    UINT8       funcMask;
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    CT_DECLARE_IRQ_SYNC_CONTEXT();
+    
+    DBG_PRINT(SDIODBG_FUNC_IRQ, ("+SDIO Bus Driver: ProcessPendingIrqs \n"));
+    do {
+            /* acquire lock to protect configuration and irq enables */
+        status = _AcquireHcdLock(pHcd);
+        if (!SDIO_SUCCESS(status)) {
+            break;    
+        }
+        
+            /* sanity check */
+        if ((IntPendingMsk & pHcd->IrqsEnabled) != IntPendingMsk) {
+            DBG_PRINT(SDDBG_ERROR, 
+                ("SDIO Bus Driver: IRQs asserting when not enabled : curr:0x%X , card reports: 0x%X\n",
+                     pHcd->IrqsEnabled, IntPendingMsk));
+                /* remove the pending IRQs that are not enabled */
+            IntPendingMsk &= pHcd->IrqsEnabled;  
+                /* fall through */
+        }           
+            
+        if (!IntPendingMsk) {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: No interrupts on HCD:0x%X \n", (INT)pHcd));
+            pHcd->IrqProcState = SDHCD_IDLE;
+            if (pHcd->IrqsEnabled) {
+                    /* only re-arm if there are IRQs enabled */
+                _IssueConfig(pHcd,SDCONFIG_SDIO_REARM_INT,NULL,0);   
+            }   
+            status = _ReleaseHcdLock(pHcd);
+            break; 
+        }
+            /* reset helper IRQ bits */
+        pHcd->PendingHelperIrqs = 0;
+            /* save pending IRQ acks */
+        pHcd->PendingIrqAcks = IntPendingMsk;
+        status = _ReleaseHcdLock(pHcd);
+        DBG_PRINT(SDIODBG_FUNC_IRQ, ("SDIO Bus Driver: INTs Pending - 0x%2.2X \n", IntPendingMsk));
+            /* take the device list lock as we iterate through the list, this blocks
+             * device removals */
+        status = SemaphorePendInterruptable(&pBusContext->DeviceListSem);           
+        if (!SDIO_SUCCESS(status)) {
+            break;
+        }  
+            /* walk through the device list matching HCD and interrupting function */
+        SDITERATE_OVER_LIST(&pBusContext->DeviceList, pListItem) {
+            pDevice = CONTAINING_STRUCT(pListItem, SDDEVICE, SDList);
+                /* check if device belongs to the HCD */
+            if (pDevice->pHcd != pHcd){
+                    /* not on this hcd */
+                continue;
+            }
+            funcMask = 1 << SDDEVICE_GET_SDIO_FUNCNO(pDevice); 
+                /* check device function against the pending mask */
+            if (!(funcMask & IntPendingMsk)) {
+                    /* this one is not interrupting */   
+                continue;
+            }
+                /* check for async IRQ and call handler */          
+            if (pDevice->pIrqAsyncFunction != NULL) {
+                DBG_PRINT(SDIODBG_FUNC_IRQ, ("SDIO Bus Driver: Calling Async IRQ Handler. Fn:%d\n",
+                                             SDDEVICE_GET_SDIO_FUNCNO(pDevice)));
+                SDDEVICE_CALL_IRQ_ASYNC_HANDLER(pDevice);
+            } else {
+                    /* this one needs the helper */
+                pHcd->PendingHelperIrqs |= funcMask;                
+                DBG_PRINT(SDIODBG_FUNC_IRQ, ("SDIO Bus Driver: No Async IRQ, Pending Helper Fn:%d\n",
+                                             SDDEVICE_GET_SDIO_FUNCNO(pDevice)));
+            }
+        }        
+            /* release HCD list lock */    
+        SemaphorePost(&pBusContext->DeviceListSem);
+            /* check for helper IRQs */
+        if (pHcd->PendingHelperIrqs) {
+            pHcd->IrqProcState = SDHCD_IRQ_HELPER;
+            DBG_PRINT(SDIODBG_FUNC_IRQ, ("SDIO Bus Driver: Waking IRQ Helper \n"));
+            if (!SDIO_SUCCESS(SD_WAKE_OS_HELPER(&pHcd->SDIOIrqHelper))) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: failed to wake helper! \n"));
+            }
+        }
+    } while (FALSE);
+    
+    DBG_PRINT(SDIODBG_FUNC_IRQ, ("-SDIO Bus Driver: ProcessPendingIrqs \n"));
+}
+
+SDIO_STATUS TryNoIrqPendingCheck(PSDDEVICE pDevice)
+{
+    if (pDevice->pHcd->CardProperties.IOFnCount > 1) {
+            /* not supported on multi-function cards */
+        DBG_PRINT(SDDBG_WARN, ("SDIO Bus Driver: IRQ Pending Check cannot be bypassed, (Funcs:%d)\n",
+            pDevice->pHcd->CardProperties.IOFnCount)); 
+        return SDIO_STATUS_UNSUPPORTED;   
+    }
+    
+    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: pending IRQ check bypassed \n"));
+        /* set flag to optimize this */
+    AtomicTest_Set(&pDevice->pHcd->HcdFlags, HCD_IRQ_NO_PEND_CHECK);
+    return SDIO_STATUS_SUCCESS;
+}
+
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SDIO_NotifyTimerTriggered - notification handler that a timer expired
+  Input:  TimerID - ID of timer that expired
+  Output: 
+  Return: 
+  Notes: 
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void SDIO_NotifyTimerTriggered(INT TimerID)
+{
+        
+    switch (TimerID) {     
+        case SDIOBUS_CD_TIMER_ID:
+            pBusContext->CDTimerQueued = FALSE;
+                /* post an HCD polling event to the helper thread */
+            PostCardDetectEvent(pBusContext, EVENT_HCD_CD_POLLING, NULL);
+            break;
+        default:
+            DBG_ASSERT(FALSE); 
+    }
+  
+}

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_bus_misc.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_bus_misc.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_bus_misc.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,3122 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_bus_misc.c
+
+ at abstract: OS independent bus driver support
+
+#notes: this file contains miscellaneous control functions
+ 
+ at notice: Copyright (c), 2004-2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define MODULE_NAME  SDBUSDRIVER
+#include "../include/ctsystem.h"
+#include "../include/sdio_busdriver.h"
+#include "../include/sdio_lib.h"
+#include "_busdriver.h"
+#include "../include/_sdio_defs.h"
+#include "../include/mmc_defs.h"
+        
+                              
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  IssueBusRequestBd - issue a bus request
+  Input:  pHcd - HCD object
+          Cmd - command to issue
+          Argument - command argument
+          Flags - request flags
+        
+  Output: pReqToUse - request to use (if caller wants response data)
+  Return: SDIO Status
+  Notes:  This function only issues 1 block data transfers
+          This function issues the request synchronously
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS _IssueBusRequestBd(PSDHCD           pHcd,
+                               UINT8            Cmd,
+                               UINT32           Argument,
+                               SDREQUEST_FLAGS  Flags,
+                               PSDREQUEST       pReqToUse,
+                               PVOID            pData,
+                               INT              Length)
+{ 
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    PSDREQUEST  pReq;
+    
+    if (NULL == pReqToUse) {
+            /* caller doesn't care about the response data, allocate locally */
+        pReq = AllocateRequest();
+        if (NULL == pReq) {
+            return SDIO_STATUS_NO_RESOURCES;    
+        }
+    } else {
+            /* use the caller's request buffer */
+        pReq = pReqToUse;  
+    }
+    
+    pReq->Argument = Argument;          
+    pReq->Flags = Flags;              
+    pReq->Command = Cmd; 
+    if (pReq->Flags & SDREQ_FLAGS_DATA_TRANS) {
+        pReq->pDataBuffer  = pData;
+        pReq->BlockCount = 1;
+        pReq->BlockLen = Length;
+    }
+        
+    status = IssueRequestToHCD(pHcd,pReq);
+
+    if (NULL == pReqToUse) {
+        DBG_ASSERT(pReq != NULL);
+        FreeRequest(pReq);   
+    }
+    return status;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  ConvertVoltageCapsToOCRMask - initialize card
+  Input:  VoltageCaps - voltage cap to look up
+  Return: 32 bit OCR mask
+  Notes:  this function sets voltage for +- 10%
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static UINT32 ConvertVoltageCapsToOCRMask(SLOT_VOLTAGE_MASK VoltageCaps)
+{
+    UINT32 ocrMask;
+    
+    ocrMask = 0;
+    
+    if (VoltageCaps & SLOT_POWER_3_3V) {
+        ocrMask |= SD_OCR_3_2_TO_3_3_VDD | SD_OCR_3_3_TO_3_4_VDD;   
+    }
+    if (VoltageCaps & SLOT_POWER_3_0V) {
+        ocrMask |= SD_OCR_2_9_TO_3_0_VDD | SD_OCR_3_0_TO_3_1_VDD;
+    } 
+    if (VoltageCaps & SLOT_POWER_2_8V) {
+        ocrMask |= SD_OCR_2_7_TO_2_8_VDD | SD_OCR_2_8_TO_2_9_VDD;      
+    }
+    if (VoltageCaps & SLOT_POWER_2_0V) {
+        ocrMask |= SD_OCR_1_9_TO_2_0_VDD | SD_OCR_2_0_TO_2_1_VDD;      
+    }
+    if (VoltageCaps & SLOT_POWER_1_8V) {
+        ocrMask |= SD_OCR_1_7_TO_1_8_VDD | SD_OCR_1_8_TO_1_9_VDD;        
+    }
+    if (VoltageCaps & SLOT_POWER_1_6V) {
+        ocrMask |= SD_OCR_1_6_TO_1_7_VDD;   
+    }
+  
+    return ocrMask;  
+}
+
+static UINT32 GetUsableOCRValue(UINT32 CardOCR, UINT32 SlotOCRMask) 
+{
+    INT    i;
+    UINT32 mask = 0;
+    
+    for (i = 0; i < 32; i++) { 
+        mask = 1 << i; 
+        if ((SlotOCRMask & mask) && (CardOCR & mask)) {
+            return mask;  
+        }
+    }
+    
+    return mask;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  GetPowerSetting - power up the SDIO card
+  Input:  pHcd - HCD object
+          pOCRvalue - OCR value of the card
+  Output: pOCRvalue - OCR to actually use
+  Return: power setting for HCD based on card's OCR, zero indicates unsupported
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static SLOT_VOLTAGE_MASK GetPowerSetting(PSDHCD pHcd, UINT32 *pOCRvalue)
+{
+    UINT32                      ocrMask;
+    SLOT_VOLTAGE_MASK           hcdVoltage = 0;
+    SLOT_VOLTAGE_MASK           hcdVMask;
+    INT                         i;
+   
+        /* check preferred value */
+    ocrMask = ConvertVoltageCapsToOCRMask(pHcd->SlotVoltagePreferred);    
+    if (ocrMask & *pOCRvalue) {
+            /* using preferred voltage */  
+        *pOCRvalue = GetUsableOCRValue(*pOCRvalue, ocrMask);   
+        hcdVoltage = pHcd->SlotVoltagePreferred;
+    } else {
+            /* walk through the slot voltage caps and find a match */
+        for (i = 0; i < 8; i++) {
+            hcdVMask = (1 << i); 
+            if (hcdVMask & pHcd->SlotVoltageCaps) {
+                ocrMask = ConvertVoltageCapsToOCRMask((SLOT_VOLTAGE_MASK)(pHcd->SlotVoltageCaps & hcdVMask));
+                if (ocrMask & *pOCRvalue) {                    
+                        /* found a match */
+                    *pOCRvalue = GetUsableOCRValue(*pOCRvalue, ocrMask);  
+                    hcdVoltage = pHcd->SlotVoltageCaps & hcdVMask;
+                    break;  
+                }   
+            }     
+        }   
+    }
+   
+    return hcdVoltage;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  TestPresence - test the presence of a card/function
+  Input:  pHcd - HCD object
+          TestType - type of test to perform
+  Output: pReq - Request to use (optional)
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS TestPresence(PSDHCD          pHcd, 
+                         CARD_INFO_FLAGS TestType,
+                         PSDREQUEST      pReq)
+{
+    SDIO_STATUS status = SDIO_STATUS_ERROR;
+    
+     switch (TestType) {
+        case CARD_SDIO:   
+                /* issue CMD5 */
+            status = _IssueSimpleBusRequest(pHcd,CMD5,0,
+                        SDREQ_FLAGS_RESP_SDIO_R4 | SDREQ_FLAGS_RESP_SKIP_SPI_FILT,pReq);
+            break;
+        case CARD_SD:
+            if (IS_HCD_BUS_MODE_SPI(pHcd)) { 
+                 /* ACMD41 just starts initialization when in SPI mode, argument is ignored
+                 * Note: In SPI mode ACMD41 uses an R1 response */
+                status = _IssueSimpleBusRequest(pHcd,ACMD41,0,
+                                                SDREQ_FLAGS_APP_CMD | SDREQ_FLAGS_RESP_R1,pReq);        
+     
+            } else {
+                /* issue ACMD41 with OCR value of zero */
+                /* ACMD41 on SD uses an R3 response */
+                status = _IssueSimpleBusRequest(pHcd,ACMD41,0,
+                                                SDREQ_FLAGS_APP_CMD | SDREQ_FLAGS_RESP_R3,pReq);        
+            }
+            break;
+        case CARD_MMC:
+                 /* issue CMD1 */ 
+            if (IS_HCD_BUS_MODE_SPI(pHcd)) { 
+                    /* note: in SPI mode an R1 response is used */
+                status = _IssueSimpleBusRequest(pHcd,CMD1,0,SDREQ_FLAGS_RESP_R1,pReq); 
+            } else {
+                status = _IssueSimpleBusRequest(pHcd,CMD1,0,SDREQ_FLAGS_RESP_R3,pReq);
+            }
+            break;
+        default:
+            DBG_ASSERT(FALSE);
+            break;
+    }          
+
+    return status;
+}
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  ReadOCR - read the OCR
+  Input:  pHcd - HCD object
+          ReadType - type of read to perform
+          OCRValue - OCR value to use as an argument
+  Output: pReq - Request to use
+          pOCRValueRd - OCR value read back (can be NULL)
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static SDIO_STATUS ReadOCR(PSDHCD          pHcd, 
+                           CARD_INFO_FLAGS ReadType, 
+                           PSDREQUEST      pReq, 
+                           UINT32          OCRValue, 
+                           UINT32          *pOCRValueRd)
+{
+    SDIO_STATUS status = SDIO_STATUS_ERROR;
+    
+     switch (ReadType) {
+        case CARD_SDIO:   
+                /* CMD5 for SDIO cards */ 
+            if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+                    /* skip the SPI filter, we will decode the response here  */
+                status = _IssueSimpleBusRequest(pHcd,CMD5,
+                                                OCRValue, 
+                                                SDREQ_FLAGS_RESP_SDIO_R4 | 
+                                                SDREQ_FLAGS_RESP_SKIP_SPI_FILT,
+                                                pReq);   
+            } else { 
+                    /* native SD */               
+                status = _IssueSimpleBusRequest(pHcd,CMD5,
+                                                OCRValue, 
+                                                SDREQ_FLAGS_RESP_SDIO_R4,
+                                                pReq);   
+            }         
+            break;
+        case CARD_SD:
+            if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+                    /* CMD58 is used to read the OCR */
+                status = _IssueSimpleBusRequest(pHcd,CMD58,
+                                                0, /* argument ignored */
+                                                (SDREQ_FLAGS_RESP_R3 | SDREQ_FLAGS_RESP_SKIP_SPI_FILT),
+                                                pReq);     
+            } else {
+                    /* SD Native uses ACMD41 */
+                status = _IssueSimpleBusRequest(pHcd,ACMD41,
+                                                OCRValue, 
+                                                SDREQ_FLAGS_APP_CMD | SDREQ_FLAGS_RESP_R3,
+                                                pReq);  
+            } 
+            break;
+        case CARD_MMC:
+            if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+                    /* CMD58 is used to read the OCR  */
+                status = _IssueSimpleBusRequest(pHcd,CMD58,
+                                                0, /* argument ignored */
+                                                (SDREQ_FLAGS_RESP_R3 | SDREQ_FLAGS_RESP_SKIP_SPI_FILT),
+                                                pReq);     
+            } else {
+                    /* MMC Native uses CMD1 */
+                status = _IssueSimpleBusRequest(pHcd,CMD1,
+                                                OCRValue, SDREQ_FLAGS_RESP_R3,
+                                                pReq); 
+            }   
+            break;
+        default:
+            DBG_ASSERT(FALSE);
+            break;
+    }          
+
+    if (SDIO_SUCCESS(status) && (pOCRValueRd != NULL)) {
+        *pOCRValueRd = 0;
+            /* someone wants the OCR read back */ 
+        switch (ReadType) {
+            case CARD_SDIO:
+                if (IS_HCD_BUS_MODE_SPI(pHcd)) { 
+                    *pOCRValueRd = SPI_SDIO_R4_GET_OCR(pReq->Response);                   
+                } else {
+                    *pOCRValueRd = SD_SDIO_R4_GET_OCR(pReq->Response);     
+                } 
+                break;
+            case CARD_SD:
+            case CARD_MMC:
+                if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+                    *pOCRValueRd = SPI_R3_GET_OCR(pReq->Response); 
+                } else {              
+                    *pOCRValueRd = SD_R3_GET_OCR(pReq->Response);
+                }                    
+                break;
+            default:
+                DBG_ASSERT(FALSE);
+                break;
+        }          
+    }
+    return status;  
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  PollCardReady - poll card till it's ready
+  Input:  pHcd - HCD object
+          OCRValue - OCR value to poll with
+          PollType - polling type (based on card type)
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS PollCardReady(PSDHCD pHcd, UINT32 OCRValue, CARD_INFO_FLAGS PollType) 
+{
+    INT             cardReadyRetry;
+    SDIO_STATUS     status;    
+    PSDREQUEST      pReq;
+   
+    if (!((PollType == CARD_SDIO) || (PollType == CARD_SD) || (PollType == CARD_MMC))) {
+        DBG_ASSERT(FALSE);
+        return SDIO_STATUS_INVALID_PARAMETER;  
+    }
+       
+    pReq = AllocateRequest();    
+    if (NULL == pReq) {
+        return SDIO_STATUS_NO_RESOURCES;    
+    }
+    
+    status = SDIO_STATUS_SUCCESS;   
+    cardReadyRetry = pBusContext->CardReadyPollingRetry;
+    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Polling card ready, Using OCR:0x%8.8X, Poll Type:0x%X\n",
+                            OCRValue,PollType)); 
+           
+        /* now issue CMD with the actual OCR as an argument until the card is ready */
+    while (cardReadyRetry) {
+        if (IS_HCD_BUS_MODE_SPI(pHcd) && !(PollType == CARD_SDIO)) {            
+            if (PollType == CARD_MMC) {
+                /* under SPI mode for MMC cards, we need to issue CMD1 and
+                 * check the response for the "in-idle" bit */
+                status = _IssueSimpleBusRequest(pHcd,
+                                                CMD1,
+                                                0, 
+                                                SDREQ_FLAGS_RESP_R1 | SDREQ_FLAGS_RESP_SKIP_SPI_FILT,
+                                                pReq);  
+            } else if (PollType == CARD_SD) {
+                 /* under SPI mode for SD cards, we need to issue ACMD41 and
+                 * check the response for the "in-idle" bit */
+                 status = _IssueSimpleBusRequest(pHcd,
+                                                 ACMD41,
+                                                 0, 
+                                                 SDREQ_FLAGS_RESP_R1 | 
+                                                 SDREQ_FLAGS_APP_CMD |
+                                                 SDREQ_FLAGS_RESP_SKIP_SPI_FILT,
+                                                 pReq);     
+            } else {
+                DBG_ASSERT(FALSE);
+            }
+        } else {
+                /* for SD/MMC in native mode and SDIO (all modes) we need to read the OCR register */
+                /* read the OCR using the supplied OCR value as an argument, we don't care about the
+                  * actual OCR read-back, but we are interested in the response */    
+            status = ReadOCR(pHcd,PollType,pReq,OCRValue,NULL);   
+        }     
+        
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to issue CMD to poll ready \n"));
+            break;
+        }        
+        if (PollType == CARD_SDIO)  { 
+            if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+                if (SPI_SDIO_R4_IS_CARD_READY(pReq->Response)) {                               
+                    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: SDIO Card Ready! (SPI) \n"));
+                    break;  
+                }       
+            } else {
+                if (SD_SDIO_R4_IS_CARD_READY(pReq->Response)) {                               
+                    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: SDIO Card Ready! \n"));
+                    break;  
+                }
+            } 
+        } else if ((PollType == CARD_SD) || (PollType == CARD_MMC)) {
+            if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+                    /* check response when MMC or SD cards operate in SPI mode */
+                if (!(GET_SPI_R1_RESP_TOKEN(pReq->Response) & SPI_CS_STATE_IDLE)) {
+                        /* card is no longer in idle */
+                    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: SD/MMC Card (SPI mode) is ready! \n"));
+                    break;
+                }
+            } else {
+                    /* check the OCR busy bit */
+                if (SD_R3_IS_CARD_READY(pReq->Response)) {                               
+                    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: SD/MMC (Native Mode) Card Ready! \n"));
+                    break;  
+                }     
+            }
+        } else {
+            DBG_ASSERT(FALSE);   
+        }     
+        cardReadyRetry--;
+            /* delay */
+        status = OSSleep(OCR_READY_CHECK_DELAY_MS);
+        if (!SDIO_SUCCESS(status)){
+            break;    
+        }
+    }    
+     
+    if (0 == cardReadyRetry) {            
+        DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Card Ready timeout! \n"));
+        status = SDIO_STATUS_DEVICE_ERROR;               
+    }
+    
+    FreeRequest(pReq);
+    
+    return status;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  AdjustSlotPower - adjust slot power 
+  Input:  pHcd - HCD object
+  Output: pOCRvalue - ocr value to use
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/     
+static SDIO_STATUS AdjustSlotPower(PSDHCD pHcd, UINT32 *pOCRvalue)   
+{
+    SDCONFIG_POWER_CTRL_DATA    pwrSetting;
+    SDIO_STATUS                 status = SDIO_STATUS_SUCCESS;
+    
+    ZERO_OBJECT(pwrSetting);
+    DBG_PRINT(SDDBG_TRACE, 
+        ("SDIO Bus Driver: Adjusting Slot Power, Requesting adjustment for OCR:0x%8.8X \n", 
+         *pOCRvalue));
+    
+    do {
+        pwrSetting.SlotPowerEnable = TRUE;
+            /* get optimal power setting */
+        pwrSetting.SlotPowerVoltageMask = GetPowerSetting(pHcd, pOCRvalue);            
+        if (0 == pwrSetting.SlotPowerVoltageMask) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: No matching voltage for OCR \n"));
+            status = SDIO_STATUS_DEVICE_ERROR;
+            break;
+        } 
+        
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Slot Pwr Mask 0x%X for OCR:0x%8.8X \n",
+                                pwrSetting.SlotPowerVoltageMask,*pOCRvalue));
+        status = _IssueConfig(pHcd,SDCONFIG_POWER_CTRL,&pwrSetting,sizeof(pwrSetting));
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to set power in hcd \n"));
+            break; 
+        }       
+            /* delay for power to settle */
+        OSSleep(pBusContext->PowerSettleDelay); 
+            /* save off for drivers */
+        pHcd->CardProperties.CardVoltage  = pwrSetting.SlotPowerVoltageMask;
+        
+    } while (FALSE);
+    
+    return status;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  ConvertEncodedTransSpeed - convert encoded TRANS_SPEED value to a clock rate
+  Input:  TransSpeedValue - encoded transfer speed value
+  Output: 
+  Return: appropriate SD clock rate
+  Notes: This function returns a rate of 0, if it could not be determined.
+         This function can check tran speed values for SD,SDIO and MMC cards 
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+static SD_BUSCLOCK_RATE ConvertEncodedTransSpeed(UINT8 TransSpeedValue)
+{
+    SD_BUSCLOCK_RATE transfMul = 0; 
+    UINT8            timeVal = 0;
+                
+    switch (TransSpeedValue & TRANSFER_UNIT_MULTIPIER_MASK) {
+        case 0:
+            transfMul = 10000;
+            break;
+        case 1:
+            transfMul = 100000;
+            break;   
+        case 2:
+            transfMul = 1000000;
+            break;
+        case 3:
+            transfMul = 10000000;
+            break;
+        default:
+            transfMul = 0;
+            DBG_PRINT(SDDBG_WARN, ("SDIO Bus Driver: Card transfer multipler is wrong (val=0x%X)! \n",
+                                   TransSpeedValue));
+            break;
+    } 
+                
+    switch ((TransSpeedValue & TIME_VALUE_MASK) >> TIME_VALUE_SHIFT) {
+        case 1: timeVal = 10; break; 
+        case 2: timeVal = 12; break; 
+        case 3: timeVal = 13; break; 
+        case 4: timeVal = 15; break; 
+        case 5: timeVal = 20; break; 
+        case 6: timeVal = 25; break; 
+        case 7: timeVal = 30; break; 
+        case 8: timeVal = 35; break; 
+        case 9: timeVal = 40; break; 
+        case 10: timeVal = 45; break; 
+        case 11: timeVal = 50; break; 
+        case 12: timeVal = 55; break; 
+        case 13: timeVal = 60; break; 
+        case 14: timeVal = 70; break; 
+        case 15: timeVal = 80; break; 
+        default: timeVal = 0; 
+        DBG_PRINT(SDDBG_WARN, ("SDIO Bus Driver: Card time value is wrong (val=0x%X)! \n",
+                               TransSpeedValue));
+        break;                   
+    }  
+                
+    if ((transfMul != 0) && (timeVal != 0)) {
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Card Reported Max: %d Hz (0x%X) \n",
+                                (timeVal*transfMul), TransSpeedValue)); 
+        return timeVal*transfMul;
+    }
+    
+    return 0;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SelectDeselectCard - Select or deselect a card
+  Input:  pHcd - HCD object
+          Select - select the card
+  Output: 
+  Return: status
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+static SDIO_STATUS SelectDeselectCard(PSDHCD pHcd, BOOL Select)
+{
+    SDIO_STATUS status;
+    
+    if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+            /* SPI mode cards do not support selection */
+        status = SDIO_STATUS_SUCCESS;  
+    } else {
+        if (!Select) {
+                /* deselect, note that deselecting a card does not return a response */
+            status = _IssueSimpleBusRequest(pHcd,
+                                            CMD7,0,
+                                            SDREQ_FLAGS_NO_RESP,NULL);  
+        } else {
+                /* select */
+            status = _IssueSimpleBusRequest(pHcd,
+                                            CMD7,(pHcd->CardProperties.RCA << 16),
+                                            SDREQ_FLAGS_RESP_R1B,NULL);     
+        }  
+    }
+    
+    if (!SDIO_SUCCESS(status)) {
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Failed to %s card, RCA:0x%X Err:%d \n",
+            (Select ? "Select":"Deselect"), pHcd->CardProperties.RCA, status));
+    }
+    return status;
+}  
+
+/* reorder a buffer by swapping MSB with LSB */
+static void ReorderBuffer(UINT8 *pBuffer, INT Bytes)
+{
+    UINT8 *pEnd; 
+    UINT8 temp;
+    
+    DBG_ASSERT(!(Bytes & 1));  
+        /* point to the end */
+    pEnd = &pBuffer[Bytes - 1];
+        /* divide in half */
+    Bytes = Bytes >> 1;
+    
+    while (Bytes) {
+        temp = *pBuffer;
+            /* swap bytes */
+        *pBuffer = *pEnd;
+        *pEnd = temp;
+        pBuffer++;
+        pEnd--;
+        Bytes--;    
+    }
+}
+
+#define ADJUST_OPER_CLOCK(pBusMode,Clock) \
+    (pBusMode)->ClockRate = min((SD_BUSCLOCK_RATE)(Clock),(pBusMode)->ClockRate)
+#define ADJUST_OPER_BLOCK_LEN(pCaps,Length) \
+    (pCaps)->OperBlockLenLimit = min((UINT16)(Length),(pCaps)->OperBlockLenLimit)
+#define ADJUST_OPER_BLOCK_COUNT(pCaps,Count) \
+    (pCaps)->OperBlockCountLimit = min((UINT16)(Count),(pCaps)->OperBlockCountLimit)      
+             
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  GetBusParameters - Get bus parameters for a card
+  Input:  pHcd - HCD object
+          pBusMode - current bus mode on entry
+  Output: pBusMode - new adjusted bus mode
+  Return: status
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/ 
+static SDIO_STATUS GetBusParameters(PSDHCD pHcd, PSDCONFIG_BUS_MODE_DATA pBusMode)
+{
+    SDIO_STATUS                        status = SDIO_STATUS_SUCCESS;
+    UINT8                              temp;
+    UINT32                             tplAddr;
+    struct SDIO_FUNC_EXT_COMMON_TPL    func0ext;
+    UINT8                              scrRegister[SD_SCR_BYTES]; 
+    SD_BUSCLOCK_RATE                   cardReportedRate = 0;
+    PSDREQUEST                         pReq = NULL;
+    BOOL                               spiMode = FALSE;
+    
+
+    if (SDCONFIG_GET_BUSWIDTH(pBusMode->BusModeFlags) == SDCONFIG_BUS_WIDTH_SPI) {
+        spiMode = TRUE;
+    }
+    
+    if (!spiMode) {
+            /* set highest bus mode bus driver is allowing (non-SPI), the code below will
+               * adjust to lower or equal settings */
+        pBusMode->BusModeFlags = pBusContext->DefaultBusMode;    
+    }
+        /* set operational parameters */
+    pBusMode->ClockRate = pBusContext->DefaultOperClock;
+    pHcd->CardProperties.OperBlockLenLimit = pBusContext->DefaultOperBlockLen;
+    pHcd->CardProperties.OperBlockCountLimit = pBusContext->DefaultOperBlockCount;
+    
+        /* adjust operational block counts and length to match HCD */
+    ADJUST_OPER_BLOCK_LEN(&pHcd->CardProperties,pHcd->MaxBytesPerBlock);
+    ADJUST_OPER_BLOCK_COUNT(&pHcd->CardProperties,pHcd->MaxBlocksPerTrans);    
+        /* limit operational clock to the max clock rate */
+    ADJUST_OPER_CLOCK(pBusMode,pHcd->MaxClockRate);
+    
+    if (!spiMode) {
+            /* check HCD bus mode */
+        if (!(pHcd->Attributes & SDHCD_ATTRIB_BUS_4BIT) || 
+            ((pHcd->CardProperties.Flags & CARD_SDIO) && 
+             (pHcd->Attributes & SDHCD_ATTRIB_NO_4BIT_IRQ)) ) {
+                
+            if (pHcd->Attributes & SDHCD_ATTRIB_BUS_4BIT) {
+                DBG_PRINT(SDDBG_WARN, 
+                ("SDIO Card Detected, but host does not support IRQs in 4 bit mode - dropping to 1 bit. \n"));
+            }
+                /* force to 1 bit mode */
+            SDCONFIG_SET_BUS_WIDTH(pBusMode->BusModeFlags, SDCONFIG_BUS_WIDTH_1_BIT);
+        }       
+    }
+    
+        /* now do various card inquiries to drop the bus mode or clock 
+         * none of these checks can raise the bus mode or clock higher that what 
+         * was initialized above */    
+    do {     
+        if (pHcd->CardProperties.Flags & (CARD_SD | CARD_MMC)) {
+                /* allocate a request for response data we'll need */
+            pReq = AllocateRequest();
+            if (NULL == pReq) {
+                status = SDIO_STATUS_NO_RESOURCES;    
+                break;
+            }   
+        }
+        
+        if (!spiMode && (pHcd->CardProperties.Flags & CARD_MMC)) {
+                /* MMC cards all run in 1 bit mode */
+            SDCONFIG_SET_BUS_WIDTH(pBusMode->BusModeFlags, SDCONFIG_BUS_WIDTH_1_BIT);
+        }
+        
+        if (pHcd->CardProperties.Flags & CARD_SD) {
+            DBG_ASSERT(pReq != NULL); 
+            DBG_PRINT(SDDBG_TRACE, ("Getting SCR from SD Card..\n"));
+                /* read SCR (requires data transfer) to get supported modes */ 
+            status = _IssueBusRequestBd(pHcd,ACMD51,0,
+                                        SDREQ_FLAGS_RESP_R1 | SDREQ_FLAGS_APP_CMD | 
+                                        SDREQ_FLAGS_DATA_TRANS,
+                                        pReq,&scrRegister,SD_SCR_BYTES);  
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_WARN, ("SD card does not have SCR. \n"));
+                if (!spiMode) {
+                        /* switch it to 1 bit mode */
+                    SDCONFIG_SET_BUS_WIDTH(pBusMode->BusModeFlags, SDCONFIG_BUS_WIDTH_1_BIT);   
+                }
+                status = SDIO_STATUS_SUCCESS;
+            } else {  
+                    /* we have to reorder this buffer since the SCR is sent MSB first on the data
+                     * data bus */   
+                ReorderBuffer(scrRegister,SD_SCR_BYTES);          
+                    /* got the SCR */
+                DBG_PRINT(SDDBG_TRACE, ("SD SCR StructRev:0x%X, Flags:0x%X \n",
+                        GET_SD_SCR_STRUCT_VER(scrRegister), 
+                        GET_SD_SCR_BUSWIDTHS_FLAGS(scrRegister)));
+                    /* set the revision */
+                switch (GET_SD_SCR_SDSPEC_VER(scrRegister)) {
+                    case SCR_SD_SPEC_1_00:
+                        DBG_PRINT(SDDBG_TRACE, ("SD Spec Revision 1.01 \n"));
+                        pHcd->CardProperties.SD_MMC_Revision = SD_REVISION_1_01;    
+                        break;
+                    case SCR_SD_SPEC_1_10:
+                        DBG_PRINT(SDDBG_TRACE, ("SD Spec Revision 1.10 \n"));
+                        pHcd->CardProperties.SD_MMC_Revision = SD_REVISION_1_10;
+                        break;
+                    default:
+                        DBG_PRINT(SDDBG_WARN, ("SD Spec Revision is greater than 1.10 \n"));
+                        pHcd->CardProperties.SD_MMC_Revision = SD_REVISION_1_10;
+                        break;
+                }
+                
+                if (!(GET_SD_SCR_BUSWIDTHS(scrRegister) & SCR_BUS_SUPPORTS_4_BIT)) {  
+                    if (!spiMode) {                        
+                        DBG_PRINT(SDDBG_WARN, ("SD SCR reports 1bit only Mode \n"));
+                            /* switch it to 1 bit mode */
+                        SDCONFIG_SET_BUS_WIDTH(pBusMode->BusModeFlags, SDCONFIG_BUS_WIDTH_1_BIT);   
+                    }
+                }
+            }
+        }
+            
+        if (pHcd->CardProperties.Flags & (CARD_SD | CARD_MMC)) {
+            DBG_ASSERT(pReq != NULL); 
+                /* de-select the card in order to get the CSD */
+            status = SelectDeselectCard(pHcd,FALSE);
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to deselect card before getting CSD \n"));
+                break;   
+            }
+                /* Get CSD for SD or MMC cards */        
+            if (spiMode) {
+                    /* in SPI mode, getting the CSD requires a read data transfer */
+                status = _IssueBusRequestBd(pHcd,CMD9,0,
+                                            SDREQ_FLAGS_RESP_R1 | SDREQ_FLAGS_DATA_TRANS,
+                                            pReq,
+                                            pHcd->CardProperties.CardCSD, 
+                                            MAX_CSD_CID_BYTES); 
+                if (SDIO_SUCCESS(status)) {
+                        /* when the CSD is sent over in SPI data mode, it comes to us in MSB first 
+                         * and thus is not ordered correctly as defined in the SD spec */
+                    ReorderBuffer(pHcd->CardProperties.CardCSD,MAX_CSD_CID_BYTES);                
+                } 
+            } else {
+                status = _IssueSimpleBusRequest(pHcd,
+                                                CMD9,
+                                                (pHcd->CardProperties.RCA << 16), 
+                                                SDREQ_FLAGS_RESP_R2,
+                                                pReq); 
+                if (SDIO_SUCCESS(status)) {
+                        /* save the CSD */
+                    memcpy(pHcd->CardProperties.CardCSD,pReq->Response,MAX_CARD_RESPONSE_BYTES);   
+                }
+            }
+            
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to get CSD, Err:%d \n",
+                                        status));
+                break;      
+            }   
+                /* for MMC cards, the spec version is in the CSD */
+            if (pHcd->CardProperties.Flags & CARD_MMC) {
+                DBG_PRINT(SDDBG_TRACE, ("MMC Spec version : (0x%2.2X) \n",
+                            GET_MMC_SPEC_VERSION(pHcd->CardProperties.CardCSD)));
+                switch (GET_MMC_SPEC_VERSION(pHcd->CardProperties.CardCSD)) {
+                    case MMC_SPEC_1_0_TO_1_2:
+                    case MMC_SPEC_1_4:
+                    case MMC_SPEC_2_0_TO_2_2:
+                        DBG_PRINT(SDDBG_WARN, ("MMC Spec version less than 3.1 \n"));
+                        pHcd->CardProperties.SD_MMC_Revision = MMC_REVISION_1_0_2_2;
+                        break;
+                    case MMC_SPEC_3_1:
+                        DBG_PRINT(SDDBG_TRACE, ("MMC Spec version 3.1 \n")); 
+                        pHcd->CardProperties.SD_MMC_Revision = MMC_REVISION_3_1; 
+                        break;  
+                    case MMC_SPEC_4_0_TO_4_1:
+                        DBG_PRINT(SDDBG_TRACE, ("MMC Spec version 4.0-4.1 \n")); 
+                        pHcd->CardProperties.SD_MMC_Revision = MMC_REVISION_4_0; 
+                        break;  
+                    default:
+                        pHcd->CardProperties.SD_MMC_Revision = MMC_REVISION_3_1; 
+                        DBG_PRINT(SDDBG_WARN, ("MMC Spec version greater than 4.1\n"));
+                        break;
+                }
+            }                       
+                /* re-select the card  */
+            status = SelectDeselectCard(pHcd,TRUE);
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to re-select card after getting CSD \n"));
+                break;   
+            }
+        } 
+      
+        if ((pHcd->CardProperties.Flags & CARD_SD) && 
+            !(pHcd->CardProperties.Flags & CARD_SDIO) &&
+             SDDEVICE_IS_SD_REV_GTEQ_1_10(pHcd->pPseudoDev) &&
+             (pHcd->Attributes & SDHCD_ATTRIB_SD_HIGH_SPEED) && 
+             !spiMode)  {
+            UINT32 arg; 
+            PUINT8 pSwitchStatusBlock = KernelAlloc(SD_SWITCH_FUNC_STATUS_BLOCK_BYTES);
+            
+            if (NULL == pSwitchStatusBlock) {
+                status = SDIO_STATUS_NO_RESOURCES;  
+                break; 
+            }
+            
+            arg = SD_SWITCH_FUNC_ARG_GROUP_CHECK(SD_SWITCH_HIGH_SPEED_GROUP,
+                                                 SD_SWITCH_HIGH_SPEED_FUNC_NO);
+                                               
+                /* for 1.10 SD cards, check if high speed mode is supported */      
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Checking SD Card for switchable functions (CMD6 arg:0x%X)\n",arg));                
+               
+                /* issue simple data transfer request to read the switch status */
+            status = _IssueBusRequestBd(pHcd,
+                                        CMD6,
+                                        arg,
+                                        SDREQ_FLAGS_RESP_R1 | SDREQ_FLAGS_DATA_TRANS,
+                                        pReq,
+                                        pSwitchStatusBlock, 
+                                        SD_SWITCH_FUNC_STATUS_BLOCK_BYTES);
+                                            
+            if (SDIO_SUCCESS(status)) { 
+                UINT16 switchGroupMask;
+                    /* need to reorder this since cards send this MSB first */
+                ReorderBuffer(pSwitchStatusBlock,SD_SWITCH_FUNC_STATUS_BLOCK_BYTES); 
+                switchGroupMask = SD_SWITCH_FUNC_STATUS_GET_GRP_BIT_MASK(pSwitchStatusBlock,SD_SWITCH_HIGH_SPEED_GROUP);
+                DBG_PRINT(SDDBG_TRACE, ("SD Card Switch Status Group1 Mask:0x%X Max Current:%d\n",
+                        switchGroupMask, SD_SWITCH_FUNC_STATUS_GET_MAX_CURRENT(pSwitchStatusBlock) )); 
+                if (SD_SWITCH_FUNC_STATUS_GET_MAX_CURRENT(pSwitchStatusBlock) == 0) {
+                    DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: SD Switch Status block has zero max current \n"));
+                    SDLIB_PrintBuffer(pSwitchStatusBlock,
+                                      SD_SWITCH_FUNC_STATUS_BLOCK_BYTES, 
+                                      "SDIO Bus Driver: SD Switch Status Block Error");      
+                } else {              
+                        /* check HS support */
+                    if (switchGroupMask & (1 << SD_SWITCH_HIGH_SPEED_FUNC_NO)) {
+                        DBG_PRINT(SDDBG_TRACE, ("SD Card Supports High Speed Mode\n"));
+                            /* set the rate, this will override the CSD value */
+                        cardReportedRate = SD_HS_MAX_BUS_CLOCK;                  
+                        pBusMode->BusModeFlags |= SDCONFIG_BUS_MODE_SD_HS;
+                    } 
+                }             
+            } else {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to get SD Switch Status block (%d)\n", status));
+                    /* just fall through, we'll handle this like a normal SD card */               
+                status = SDIO_STATUS_SUCCESS;      
+            }        
+            
+            KernelFree(pSwitchStatusBlock); 
+        }
+               
+        if ((pHcd->CardProperties.Flags & CARD_MMC) && 
+             SDDEVICE_IS_MMC_REV_GTEQ_4_0(pHcd->pPseudoDev) &&
+             (pHcd->Attributes & SDHCD_ATTRIB_MMC_HIGH_SPEED) &&
+             !spiMode)  { 
+                /* for MMC cards, get the Extended CSD to get the High speed and
+                 * wide bus paramaters */
+                  
+            PUINT8 pExtData = KernelAlloc(MMC_EXT_CSD_SIZE);
+            
+            if (NULL == pExtData) {
+                status = SDIO_STATUS_NO_RESOURCES;  
+                break; 
+            }
+                /* issue simple data transfer request to read the extended CSD */
+            status = _IssueBusRequestBd(pHcd,MMC_CMD8,0,
+                                        SDREQ_FLAGS_RESP_R1 | SDREQ_FLAGS_DATA_TRANS,
+                                        pReq,
+                                        pExtData, 
+                                        MMC_EXT_CSD_SIZE);    
+            if (SDIO_SUCCESS(status)) {
+                 DBG_PRINT(SDDBG_TRACE, ("MMC Ext CSD Version: 0x%X Card Type: 0x%X\n",
+                        pExtData[MMC_EXT_VER_OFFSET],pExtData[MMC_EXT_CARD_TYPE_OFFSET]));                
+                    /* check HS support */
+                if (pExtData[MMC_EXT_CARD_TYPE_OFFSET] & MMC_EXT_CARD_TYPE_HS_52) {
+                        /* try 52 Mhz */
+                    cardReportedRate = 52000000;
+                    pBusMode->BusModeFlags |= SDCONFIG_BUS_MODE_MMC_HS;
+                } else if (pExtData[MMC_EXT_CARD_TYPE_OFFSET] & MMC_EXT_CARD_TYPE_HS_26) {
+                        /* try 26MHZ */ 
+                    cardReportedRate = 26000000; 
+                    pBusMode->BusModeFlags |= SDCONFIG_BUS_MODE_MMC_HS;
+                } else {
+                        /* doesn't report high speed capable */
+                    cardReportedRate = 0;   
+                }               
+                
+                if (cardReportedRate && !spiMode) {
+                        /* figure out the bus mode */
+                    if (pHcd->Attributes & SDHCD_ATTRIB_BUS_MMC8BIT) {
+                        SDCONFIG_SET_BUS_WIDTH(pBusMode->BusModeFlags, SDCONFIG_BUS_WIDTH_MMC8_BIT);
+                    } else if (pHcd->Attributes & SDHCD_ATTRIB_BUS_4BIT) {
+                        SDCONFIG_SET_BUS_WIDTH(pBusMode->BusModeFlags, SDCONFIG_BUS_WIDTH_4_BIT); 
+                    } else { 
+                        /* we leave it to default to 1 bit mode */   
+                    }
+                }      
+            } else {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to get MMC Extended CSD \n"));
+                    /* just fall through, we'll do without the extended information 
+                     * and run it like a legacy MMC card */               
+                status = SDIO_STATUS_SUCCESS;      
+            }        
+            
+            KernelFree(pExtData);      
+        }
+        
+        if (pHcd->CardProperties.Flags & (CARD_SD | CARD_MMC)) {
+           
+            if (0 == cardReportedRate) {
+                    /* extract rate from CSD only if it was not set by earlier tests */
+                cardReportedRate = ConvertEncodedTransSpeed(
+                                GET_SD_CSD_TRANS_SPEED(pHcd->CardProperties.CardCSD)); 
+                    /* fall through and test for zero again */
+            }                  
+        
+            if (cardReportedRate != 0) {
+                     /* adjust clock based on what the card can handle */
+                ADJUST_OPER_CLOCK(pBusMode,cardReportedRate);
+            } else { 
+                    /* something is wrong with the CSD */ 
+                if (DBG_GET_DEBUG_LEVEL() >= SDDBG_TRACE) { 
+                    SDLIB_PrintBuffer(pHcd->CardProperties.CardCSD,
+                                      MAX_CARD_RESPONSE_BYTES,
+                                      "SDIO Bus Driver: CSD Dump");  
+                }   
+                    /* can't figure out the card rate, so set reasonable defaults */
+                if (pHcd->CardProperties.Flags & CARD_SD) {
+                    ADJUST_OPER_CLOCK(pBusMode,SD_MAX_BUS_CLOCK);           
+                } else {
+                    ADJUST_OPER_CLOCK(pBusMode,MMC_MAX_BUS_CLOCK);   
+                } 
+            } 
+        }
+                                                                 
+            /* note, we do SDIO card "after" SD in case this is a combo card */       
+        if (pHcd->CardProperties.Flags & CARD_SDIO) {                       
+                /* read card capabilities */
+            status = Cmd52ReadByteCommon(pHcd->pPseudoDev, 
+                                         SDIO_CARD_CAPS_REG, 
+                                         &pHcd->CardProperties.SDIOCaps); 
+            if (!SDIO_SUCCESS(status)) {
+                break;   
+            } 
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Card Caps: 0x%X \n",pHcd->CardProperties.SDIOCaps));
+            if (pHcd->CardProperties.SDIOCaps & SDIO_CAPS_LOW_SPEED) {
+                    /* adjust max clock for LS device */
+                ADJUST_OPER_CLOCK(pBusMode,SDIO_LOW_SPEED_MAX_BUS_CLOCK);  
+                    /* adjust bus if LS device does not support 4 bit mode */      
+                if (!(pHcd->CardProperties.SDIOCaps & SDIO_CAPS_4BIT_LS)) {
+                    if (!spiMode) {
+                            /* low speed device does not support 4 bit mode, force us to 1 bit */  
+                        SDCONFIG_SET_BUS_WIDTH(pBusMode->BusModeFlags, 
+                                               SDCONFIG_BUS_WIDTH_1_BIT);   
+                    }
+                }            
+            } 
+        
+                /* check if 1.2 card supports high speed mode, checking HCD as well*/
+            if (SDDEVICE_IS_SDIO_REV_GTEQ_1_20(pHcd->pPseudoDev) && 
+                (pHcd->Attributes & SDHCD_ATTRIB_SD_HIGH_SPEED) &&
+                !spiMode) {
+                UCHAR hsControl = 0;
+                
+                status = Cmd52ReadByteCommon(pHcd->pPseudoDev, 
+                                             SDIO_HS_CONTROL_REG, 
+                                             &hsControl); 
+                                            
+                if (!SDIO_SUCCESS(status)) {
+                    DBG_PRINT(SDDBG_TRACE, 
+                        ("SDIO Failed to read high speed control (%d) \n",status)); 
+                        /* reset status and continue */  
+                    status = SDIO_STATUS_SUCCESS;
+                } else {
+                    if (hsControl & SDIO_HS_CONTROL_SHS) {
+                        DBG_PRINT(SDDBG_TRACE, ("SDIO Card Supports High Speed Mode\n"));
+                        pBusMode->BusModeFlags |= SDCONFIG_BUS_MODE_SD_HS;
+                    }   
+                } 
+            
+            } 
+        
+            cardReportedRate = 0;
+            temp = sizeof(func0ext);
+            tplAddr = pHcd->CardProperties.CommonCISPtr;                                  
+                /* get the FUNCE tuple */
+            status = SDLIB_FindTuple(pHcd->pPseudoDev,
+                                     CISTPL_FUNCE,
+                                     &tplAddr, 
+                                     (PUINT8)&func0ext,
+                                     &temp);
+            if (!SDIO_SUCCESS(status) || (temp < sizeof(func0ext))) {
+                DBG_PRINT(SDDBG_WARN, ("SDIO Function 0 Ext. Tuple Missing (Got size:%d) \n", temp)); 
+                    /* reset status */
+                status = SDIO_STATUS_SUCCESS;
+            } else {
+                    /* convert encoded value to rate */
+                cardReportedRate = ConvertEncodedTransSpeed(func0ext.MaxTransSpeed);    
+            }
+            
+            if (cardReportedRate != 0) {
+                if (pBusMode->BusModeFlags & SDCONFIG_BUS_MODE_SD_HS) {
+                    if (cardReportedRate <= SD_MAX_BUS_CLOCK) {
+                        DBG_PRINT(SDDBG_WARN, 
+                            ("SDIO Function tuple reports clock:%d Hz, with advertised High Speed support \n", cardReportedRate));      
+                            /* back off high speed support */
+                        pBusMode->BusModeFlags &= ~SDCONFIG_BUS_MODE_SD_HS;
+                    }
+                } else {
+                    if (cardReportedRate > SD_MAX_BUS_CLOCK) {
+                        DBG_PRINT(SDDBG_WARN, 
+                            ("SDIO Function tuple reports clock:%d Hz, without advertising High Speed support..using 25Mhz \n", cardReportedRate));      
+                        cardReportedRate = SD_MAX_BUS_CLOCK;   
+                    }     
+                }
+                    /* adjust clock based on what the card can handle */
+                ADJUST_OPER_CLOCK(pBusMode,cardReportedRate);
+                
+            } else {
+                    /* set a reasonable default */ 
+                ADJUST_OPER_CLOCK(pBusMode,SD_MAX_BUS_CLOCK);
+            }    
+        }
+    } while (FALSE); 
+
+    if (pReq != NULL) {
+        FreeRequest(pReq);    
+    }
+    return status;  
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SetOperationalBusMode - set operational bus mode
+  Input:  pDevice - pDevice that is requesting the change
+          pBusMode - operational bus mode
+  Output: pBusMode - on return will have the actual clock rate set
+  Return: status
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS SetOperationalBusMode(PSDDEVICE                pDevice, 
+                                  PSDCONFIG_BUS_MODE_DATA  pBusMode) 
+{
+    SDIO_STATUS     status = SDIO_STATUS_SUCCESS;
+    UCHAR           regData;
+    UINT32          arg;
+    UINT32          switcharg;
+    PSDHCD          pHcd = pDevice->pHcd;   
+    
+        /* synchronize access for updating bus mode settings */                    
+    status = SemaphorePendInterruptable(&pDevice->pHcd->ConfigureOpsSem);
+    if (!SDIO_SUCCESS(status)) {
+        return status;
+    }
+                            
+    do { 
+        
+        if (!IS_CARD_PRESENT(pHcd)) {
+                /* for an empty slot (a Pseudo dev was passed in) we still allow the 
+                 * bus mode to be set for the card detect 
+                 * polling */
+            status = _IssueConfig(pHcd,SDCONFIG_BUS_MODE_CTRL,pBusMode,sizeof(SDCONFIG_BUS_MODE_DATA));
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to set bus mode in hcd : Err:%d \n",
+                                        status));
+            }              
+                /* nothing more to do */
+            break; 
+        }       
+        
+        
+        if ((pBusMode->BusModeFlags == SDDEVICE_GET_BUSMODE_FLAGS(pDevice)) &&
+            (pBusMode->ClockRate == SDDEVICE_GET_OPER_CLOCK(pDevice))) {
+            DBG_PRINT(SDDBG_TRACE, 
+               ("SDIO Bus Driver: Bus mode already set, nothing to do\n"));
+            pBusMode->ActualClockRate = SDDEVICE_GET_OPER_CLOCK(pDevice);
+            break;
+        }
+            
+        if (pBusMode->BusModeFlags & SDCONFIG_BUS_MODE_MMC_HS) {
+            if (!(pHcd->Attributes & SDHCD_ATTRIB_MMC_HIGH_SPEED)) {
+                status = SDIO_STATUS_INVALID_PARAMETER;
+                DBG_PRINT(SDDBG_ERROR, 
+                        ("SDIO Bus Driver: HCD does not support MMC High Speed\n"));
+                break;    
+            }  
+        }
+        
+        if (pBusMode->BusModeFlags & SDCONFIG_BUS_MODE_SD_HS) {
+            if (!(pHcd->Attributes & SDHCD_ATTRIB_SD_HIGH_SPEED)) {
+                status = SDIO_STATUS_INVALID_PARAMETER;
+                DBG_PRINT(SDDBG_ERROR, 
+                        ("SDIO Bus Driver: HCD does not support SD High Speed\n"));
+                break;    
+            }     
+        }
+                
+            /* before we set the operational clock and mode, configure the clock for high
+             * speed mode on the card , if necessary */
+        if ((pHcd->CardProperties.Flags & CARD_MMC) &&
+            (pBusMode->BusModeFlags & SDCONFIG_BUS_MODE_MMC_HS) &&
+            !(SDDEVICE_GET_BUSMODE_FLAGS(pDevice) & SDCONFIG_BUS_MODE_MMC_HS)) {
+              
+            switcharg = MMC_SWITCH_BUILD_ARG(MMC_SWITCH_CMD_SET0,
+                                             MMC_SWITCH_WRITE_BYTE,
+                                             MMC_EXT_HS_TIMING_OFFSET,
+                                             MMC_EXT_HS_TIMING_ENABLE); 
+            status = _IssueSimpleBusRequest(pHcd,
+                                            MMC_CMD_SWITCH,
+                                            switcharg,
+                                            SDREQ_FLAGS_RESP_R1B,
+                                            NULL);     
+            if (!SDIO_SUCCESS(status)) { 
+                DBG_PRINT(SDDBG_ERROR, 
+                 ("SDIO Bus Driver: Failed to switch MMC High Speed Mode (arg:0x%X): %d \n",
+                                        switcharg, status));
+                break;       
+            } 
+            
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: High Speed MMC enabled (arg:0x%X)\n",
+                switcharg));   
+        }
+        
+            /* before setting bus mode and clock in the HCD, switch card to high speed mode 
+             * if necessary */
+        if ((pHcd->CardProperties.Flags & CARD_SD) &&
+            (pBusMode->BusModeFlags & SDCONFIG_BUS_MODE_SD_HS) &&
+            !(SDDEVICE_GET_BUSMODE_FLAGS(pDevice) & SDCONFIG_BUS_MODE_SD_HS)) {
+            UINT32     arg;
+            PUINT8     pSwitchStatusBlock;  
+                        
+            pSwitchStatusBlock = KernelAlloc(SD_SWITCH_FUNC_STATUS_BLOCK_BYTES);
+            
+            if (NULL == pSwitchStatusBlock) {
+                status = SDIO_STATUS_NO_RESOURCES;  
+                break; 
+            }
+            
+                /* set high speed group */
+            arg = SD_SWITCH_FUNC_ARG_GROUP_SET(SD_SWITCH_HIGH_SPEED_GROUP,
+                                               SD_SWITCH_HIGH_SPEED_FUNC_NO);
+                                                  
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Setting SD Card for High Speed mode (CMD6 arg:0x%X)\n",arg));                
+               
+                /* issue simple data transfer request to switch modes */
+            status = _IssueBusRequestBd(pHcd,
+                                        CMD6,
+                                        arg,
+                                        SDREQ_FLAGS_RESP_R1 | SDREQ_FLAGS_DATA_TRANS,
+                                        NULL,
+                                        pSwitchStatusBlock, 
+                                        SD_SWITCH_FUNC_STATUS_BLOCK_BYTES);
+                                            
+            if (SDIO_SUCCESS(status)) {
+                ReorderBuffer(pSwitchStatusBlock,SD_SWITCH_FUNC_STATUS_BLOCK_BYTES);  
+                DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: SD High Speed Result, Got Max Current:%d mA, SwitchResult:0x%X \n",
+                      SD_SWITCH_FUNC_STATUS_GET_MAX_CURRENT(pSwitchStatusBlock),
+                      SDSwitchGetSwitchResult(pSwitchStatusBlock, SD_SWITCH_HIGH_SPEED_GROUP)));  
+                if (SD_SWITCH_FUNC_STATUS_GET_MAX_CURRENT(pSwitchStatusBlock) == 0) {
+                    DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Error in Status Block after High Speed Switch (current==0) \n"));    
+                    status = SDIO_STATUS_DEVICE_ERROR;
+                }                
+                if (SDSwitchGetSwitchResult(pSwitchStatusBlock, SD_SWITCH_HIGH_SPEED_GROUP) !=
+                    SD_SWITCH_HIGH_SPEED_FUNC_NO) {
+                    DBG_PRINT(SDDBG_ERROR, 
+                        ("SDIO Bus Driver: Error in Status Block after High Speed Switch (Group1 did not switch) \n"));    
+                    status = SDIO_STATUS_DEVICE_ERROR;        
+                }                
+                if (SDIO_SUCCESS(status)) {
+                    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: SD High Speed Mode Enabled \n"));   
+                } else {
+                    SDLIB_PrintBuffer(pSwitchStatusBlock,
+                                      SD_SWITCH_FUNC_STATUS_BLOCK_BYTES, 
+                                       "SDIO Bus Driver: SD Switch Status Block Error"); 
+                } 
+            } else {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to Set SD High Speed Mode (%d) \n",status));    
+            }
+            KernelFree(pSwitchStatusBlock);   
+ 
+            if (!SDIO_SUCCESS(status)) {
+                break;   
+            }
+        }
+        
+            /* enable/disable high speed mode for SDIO card */
+        if (pHcd->CardProperties.Flags & CARD_SDIO) {
+            BOOL doSet = TRUE;
+            
+            if ((pBusMode->BusModeFlags & SDCONFIG_BUS_MODE_SD_HS) &&
+                !(SDDEVICE_GET_BUSMODE_FLAGS(pDevice) & SDCONFIG_BUS_MODE_SD_HS)) {                
+                    /* enable */
+                regData = SDIO_HS_CONTROL_EHS;
+            } else if (!(pBusMode->BusModeFlags & SDCONFIG_BUS_MODE_SD_HS) &&
+                       (SDDEVICE_GET_BUSMODE_FLAGS(pDevice) & SDCONFIG_BUS_MODE_SD_HS)) {
+                    /* disable */
+                regData = 0;            
+            } else {
+                    /* do nothing */
+                doSet = FALSE;        
+            }
+            
+            if (doSet) {
+                status = Cmd52WriteByteCommon(pDevice,
+                                              SDIO_HS_CONTROL_REG,
+                                              &regData); 
+                                                           
+                if (!SDIO_SUCCESS(status)) {
+                    DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to %s HS mode in SDIO card : Err:%d\n",
+                                            (SDIO_HS_CONTROL_EHS == regData) ? "enable":"disable" , status));
+                    break;
+                } else {
+                    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver:SDIO Card %s for High Speed mode \n",
+                                    (SDIO_HS_CONTROL_EHS == regData) ? "enabled":"disabled" ));                
+                } 
+            }  
+        }
+            
+            /* use synchronize-with-bus request version, this may have been requested by a
+             * function driver */
+        status = SDLIB_IssueConfig(pDevice,
+                                   SDCONFIG_BUS_MODE_CTRL,
+                                   pBusMode,
+                                   sizeof(SDCONFIG_BUS_MODE_DATA));
+       
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to set bus mode in hcd : Err:%d \n",
+                                    status));
+            break;  
+        }
+        
+             /* check requested bus width against the current mode */
+        if (SDCONFIG_GET_BUSWIDTH(pBusMode->BusModeFlags) == 
+                SDCONFIG_GET_BUSWIDTH(pHcd->CardProperties.BusMode)) {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Bus mode set, no width change\n"));
+            break;
+        }
+             
+        if (SDCONFIG_GET_BUSWIDTH(pBusMode->BusModeFlags) == SDCONFIG_BUS_WIDTH_SPI) {
+                /* nothing more to do for SPI */
+            break; 
+        }
+        
+            /* set the bus width for SD and combo cards */        
+        if (pHcd->CardProperties.Flags & CARD_SD) {
+            if (SDCONFIG_GET_BUSWIDTH(pBusMode->BusModeFlags) == SDCONFIG_BUS_WIDTH_4_BIT) { 
+                    /* turn off card detect resistor */
+                status = _IssueSimpleBusRequest(pHcd,
+                                                ACMD42,
+                                                0, /* disable CD */
+                                                SDREQ_FLAGS_APP_CMD | SDREQ_FLAGS_RESP_R1,
+                                                NULL); 
+                if (!SDIO_SUCCESS(status)) {
+                    DBG_PRINT(SDDBG_WARN, ("SDIO Bus Driver: Failed to disable CD Res: %d \n",
+                                           status)); /* this should be okay */
+                }
+                arg = SD_ACMD6_BUS_WIDTH_4_BIT;     
+            } else {
+                    /* don't need to turn off CD in 1 bit mode, just set mode */
+                arg = SD_ACMD6_BUS_WIDTH_1_BIT;  
+               
+            }
+                /* set the bus width */
+            status = _IssueSimpleBusRequest(pHcd,
+                                            ACMD6,
+                                            arg, /* set bus mode */
+                                            SDREQ_FLAGS_APP_CMD | SDREQ_FLAGS_RESP_R1,
+                                            NULL);    
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to set bus width: %d \n",
+                                        status));
+                break;       
+            }                                   
+        }
+            /* set bus width for SDIO cards */
+        if (pHcd->CardProperties.Flags & CARD_SDIO) {
+                /* default */
+            regData = CARD_DETECT_DISABLE | SDIO_BUS_WIDTH_1_BIT;     
+              
+            if (SDCONFIG_GET_BUSWIDTH(pBusMode->BusModeFlags) == SDCONFIG_BUS_WIDTH_4_BIT) { 
+                    /* turn off card detect resistor and set buswidth */
+                regData = CARD_DETECT_DISABLE | SDIO_BUS_WIDTH_4_BIT;
+                DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Enabling 4 bit mode on card \n"));
+            } else {
+                DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Enabling 1 bit mode on card \n"));
+            }           
+            status = Cmd52WriteByteCommon(pDevice, 
+                                          SDIO_BUS_IF_REG, 
+                                          &regData);              
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to set bus mode in Card : Err:%d\n",
+                                        status));
+                break;   
+            }
+            
+                /* check for 4-bit interrupt detect mode */
+            if ((SDCONFIG_GET_BUSWIDTH(pBusMode->BusModeFlags) == SDCONFIG_BUS_WIDTH_4_BIT) &&
+                (pHcd->CardProperties.SDIOCaps & SDIO_CAPS_INT_MULTI_BLK) &&
+                (pHcd->Attributes & SDHCD_ATTRIB_MULTI_BLK_IRQ)) { 
+                    /* enable interrupts between blocks, this doesn't actually turn on interrupts
+                     * it merely allows interrupts to be asserted in the inter-block gap */ 
+                pHcd->CardProperties.SDIOCaps |= SDIO_CAPS_ENB_INT_MULTI_BLK;    
+                
+                DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: 4-Bit Multi-blk Interrupt support enabled\n"));   
+            } else {
+                    /* make sure this is disabled */
+                pHcd->CardProperties.SDIOCaps &= ~SDIO_CAPS_ENB_INT_MULTI_BLK; 
+            }     
+                        
+            status = Cmd52WriteByteCommon(pDevice, 
+                                          SDIO_CARD_CAPS_REG, 
+                                          &pHcd->CardProperties.SDIOCaps);              
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to update Card Caps register Err:%d\n",
+                                        status));
+                break;   
+            }                       
+        }
+        
+            /* set data bus width for MMC */
+        if (pHcd->CardProperties.Flags & CARD_MMC) {
+            UINT8  buswidth = 0;
+            
+            if (SDCONFIG_GET_BUSWIDTH(pBusMode->BusModeFlags) == SDCONFIG_BUS_WIDTH_4_BIT) {
+                buswidth = MMC_EXT_BUS_WIDTH_4_BIT;   
+            } else if (SDCONFIG_GET_BUSWIDTH(pBusMode->BusModeFlags) == SDCONFIG_BUS_WIDTH_MMC8_BIT) {
+                buswidth = MMC_EXT_BUS_WIDTH_8_BIT;   
+            } else {
+                /* normal 1 bit mode .. nothing to do */ 
+                break;  
+            }            
+                /* now set the bus mode on the card */
+            switcharg = MMC_SWITCH_BUILD_ARG(MMC_SWITCH_CMD_SET0,
+                                             MMC_SWITCH_WRITE_BYTE,
+                                             MMC_EXT_BUS_WIDTH_OFFSET,
+                                             buswidth);
+            
+            status = _IssueSimpleBusRequest(pHcd,
+                                            MMC_CMD_SWITCH,
+                                            switcharg,
+                                            SDREQ_FLAGS_RESP_R1B,
+                                            NULL);     
+            if (!SDIO_SUCCESS(status)) { 
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to set MMC bus width (arg:0x%X): %d \n",
+                                        switcharg, status));
+                break;       
+            } 
+            
+            if (SDCONFIG_GET_BUSWIDTH(pBusMode->BusModeFlags) == SDCONFIG_BUS_WIDTH_4_BIT) {
+                DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: 4 bit MMC mode enabled (arg:0x%X) \n",
+                      switcharg));   
+            } else if (SDCONFIG_GET_BUSWIDTH(pBusMode->BusModeFlags) == SDCONFIG_BUS_WIDTH_MMC8_BIT) {  
+                DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: 8-Bit MMC mode enabled (arg:0x%X) \n",
+                      switcharg));  
+            }     
+        }
+            
+    } while (FALSE);      
+    
+    if (SDIO_SUCCESS(status)) {
+            /* set the operating mode */
+        pHcd->CardProperties.BusMode = pBusMode->BusModeFlags;   
+            /* set the actual clock rate */
+        pHcd->CardProperties.OperBusClock = pBusMode->ActualClockRate;
+    }        
+    
+    SemaphorePost(&pDevice->pHcd->ConfigureOpsSem); 
+                          
+    return status;     
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  CardInitSetup - setup host for card initialization
+  Input:  pHcd - HCD object
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS CardInitSetup(PSDHCD pHcd) 
+{
+    SDCONFIG_INIT_CLOCKS_DATA   initClocks;  
+    SDCONFIG_BUS_MODE_DATA      busMode;
+    UINT32                      OCRvalue;
+    SDIO_STATUS                 status = SDIO_STATUS_SUCCESS;
+    
+    ZERO_OBJECT(initClocks);
+    ZERO_OBJECT(busMode);
+        /* setup defaults */
+    initClocks.NumberOfClocks = SDMMC_MIN_INIT_CLOCKS;  
+    busMode.ClockRate = SD_INIT_BUS_CLOCK;
+    
+        /* check for SPI only */
+    if (pHcd->Attributes & SDHCD_ATTRIB_BUS_SPI) {
+            /* SPI cards startup in non-CRC mode with the exception of CMD0, the
+             * HCDs must issue CMD0 with the correct CRC , the spec shows that a
+             * CMD 0 sequence is 0x40,0x00,0x00,0x00,0x00,0x95 */
+        busMode.BusModeFlags = SDCONFIG_BUS_WIDTH_SPI | SDCONFIG_BUS_MODE_SPI_NO_CRC;  
+    }
+        /* check if host supports 1 bit mode */  
+        /* TODO : if host supports power switching, we can 
+         * could initialize cards in SPI mode first */  
+    if (pHcd->Attributes & SDHCD_ATTRIB_BUS_1BIT) {
+        busMode.BusModeFlags = SDCONFIG_BUS_WIDTH_1_BIT; 
+    }
+    
+        /* set initial VDD, starting at the highest allowable voltage and working
+         * our way down */
+    if (pHcd->SlotVoltageCaps & SLOT_POWER_3_3V) {
+        OCRvalue = SD_OCR_3_2_TO_3_3_VDD;
+    } else if (pHcd->SlotVoltageCaps & SLOT_POWER_3_0V) {
+        OCRvalue = SD_OCR_2_9_TO_3_0_VDD;    
+    } else if (pHcd->SlotVoltageCaps & SLOT_POWER_2_8V) {
+        OCRvalue = SD_OCR_2_7_TO_2_8_VDD;    
+    } else if (pHcd->SlotVoltageCaps & SLOT_POWER_2_0V) {
+        OCRvalue = SD_OCR_1_9_TO_2_0_VDD;    
+    } else if (pHcd->SlotVoltageCaps & SLOT_POWER_1_8V) {
+        OCRvalue = SD_OCR_1_7_TO_1_8_VDD;    
+    } else if (pHcd->SlotVoltageCaps & SLOT_POWER_1_6V) {
+        OCRvalue = SD_OCR_1_6_TO_1_7_VDD;    
+    } else {
+        DBG_ASSERT(FALSE);
+        OCRvalue = 0;  
+    }
+    
+    do {            
+            /* power up the card */
+        status = AdjustSlotPower(pHcd, &OCRvalue);
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to adjust slot power \n"));
+            break;  
+        }  
+        status = SetOperationalBusMode(pHcd->pPseudoDev,&busMode);
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to set bus mode \n"));
+            break;  
+        }
+        status = _IssueConfig(pHcd,SDCONFIG_SEND_INIT_CLOCKS,&initClocks,sizeof(initClocks));
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to send init clocks in hcd \n"));
+            break;  
+        } 
+        
+    } while(FALSE);
+   
+    return status;       
+}    
+     
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SDInitializeCard - initialize card
+  Input:  pHcd - HCD object
+  Output: pProperties - card properties
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS SDInitializeCard(PSDHCD pHcd) 
+{
+    SDCONFIG_BUS_MODE_DATA      busMode;
+    SDIO_STATUS                 status = SDIO_STATUS_SUCCESS;
+    PSDREQUEST                  pReq = NULL;
+    UINT32                      OCRvalue;
+    UINT32                      tplAddr;
+    UINT8                       temp;
+    struct SDIO_MANFID_TPL      manfid;
+    SDCONFIG_WP_VALUE           wpValue;
+    UINT8                       cisBuffer[3];
+                     
+    OCRvalue = 0;
+    
+    do {
+        if (IS_HCD_BUS_MODE_SPI(pHcd)) {  
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Initializing card in SPI mode \n"));
+        } else {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Initializing card in MMC/SD mode \n"));
+        }  
+        
+        pReq = AllocateRequest();    
+        if (NULL == pReq) {
+            status = SDIO_STATUS_NO_RESOURCES;
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: failed to allocate bus request \n"));
+            break;   
+        }
+        memset(pReq, 0, sizeof(SDREQUEST));
+                
+        status = CardInitSetup(pHcd);
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to setup card \n")); 
+            break;     
+        }
+        status = _IssueConfig(pHcd,SDCONFIG_GET_WP,&wpValue,sizeof(wpValue));
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_WARN, ("SDIO Bus Driver: host doesn't support Write Protect \n"));
+        } else {
+            if (wpValue) {
+                pHcd->CardProperties.Flags |= CARD_SD_WP; 
+                DBG_PRINT(SDDBG_WARN, ("SDIO Bus Driver: SD WP switch is on \n"));
+            } 
+        }   
+        
+        if (!(pHcd->Attributes & SDHCD_ATTRIB_SLOT_POLLING) && 
+            IS_HCD_BUS_MODE_SPI(pHcd)) {
+                /* for non-slot polling HCDs operating in SPI mode
+                 * issue CMD0 to reset card state and to place the card
+                 * in SPI mode.  If slot polling is used, the polling thread
+                 * will have already issued a CMD0 to place the card in SPI mode*/
+            if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+                INT ii = 256;
+                status = SDIO_STATUS_ERROR;
+                /* if the CMD0 fails, retry it. Some cards have a hard time getting into SPI mode.*/
+                while ((!SDIO_SUCCESS(status)) && (ii-- >= 0)) {
+                    status = _IssueSimpleBusRequest(pHcd,CMD0,0,SDREQ_FLAGS_RESP_R1,pReq);
+                    OSSleep(20);
+                }
+                DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: cmd0 go SPI retries:(256) %d\n", ii)); 
+
+            } else {
+                status = _IssueSimpleBusRequest(pHcd,CMD0,0,SDREQ_FLAGS_NO_RESP,pReq);  
+            }
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: go-idle failed! \n"));
+                break;  
+            } 
+        } 
+                
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Looking for SDIO.. \n"));
+            /* check for SDIO card by trying to read it's OCR */
+        status = ReadOCR(pHcd,CARD_SDIO,pReq,0,&OCRvalue);                                               
+        if (SDIO_SUCCESS(status)) {
+                /* we got a response, this is an SDIO card */ 
+            if (IS_HCD_BUS_MODE_SPI(pHcd)) {                    
+                    /* handle SPI */     
+                pHcd->CardProperties.IOFnCount = SPI_SDIO_R4_GET_IO_FUNC_COUNT(pReq->Response); 
+                if (SPI_SDIO_R4_IS_MEMORY_PRESENT(pReq->Response)) {
+                        /* flag an SD function exists */
+                    pHcd->CardProperties.Flags |= CARD_SD;      
+                }        
+            } else {
+                    /* handle native SD */
+                pHcd->CardProperties.IOFnCount = SD_SDIO_R4_GET_IO_FUNC_COUNT(pReq->Response); 
+                if (SD_SDIO_R4_IS_MEMORY_PRESENT(pReq->Response)) {
+                        /* flag an SD function exists */
+                    pHcd->CardProperties.Flags |= CARD_SD;      
+                }
+                             
+            }                        
+            if (0 == pHcd->CardProperties.IOFnCount) {
+                DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: SDIO Card reports no functions \n"));
+                status = SDIO_STATUS_DEVICE_ERROR;
+                pHcd->CardProperties.Flags = 0;
+                break;  
+            }
+            pHcd->CardProperties.Flags |= CARD_SDIO; 
+            
+            DBG_PRINT(SDDBG_TRACE, 
+                ("SDIO Bus Driver: SDIO Card, Functions: %d Card Info Flags:0x%X OCR:0x%8.8X\n",
+                      pHcd->CardProperties.IOFnCount, pHcd->CardProperties.Flags, OCRvalue));
+                /* adjust slot power for this SDIO card */          
+            status = AdjustSlotPower(pHcd, &OCRvalue);
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to set power in hcd \n"));
+                break;  
+            }
+                /* poll for SDIO card ready */          
+            status = PollCardReady(pHcd,OCRvalue,CARD_SDIO);
+            if (!SDIO_SUCCESS(status)) {
+                break;   
+            }
+        } else if (status != SDIO_STATUS_BUS_RESP_TIMEOUT){
+                /* major error in hcd, bail */
+            break;   
+        }
+       
+            /* check if this is an SDIO-only card before continuing  */    
+        if (!(pHcd->CardProperties.Flags & CARD_SD) && (pHcd->CardProperties.Flags & CARD_SDIO)) {
+                /* this is an SDIO card with no memory function */
+            goto prepareCard;
+        }
+        
+        if (!(pHcd->CardProperties.Flags & CARD_SDIO)) {
+                /* issue go idle only if we did not find an SDIO function in our earlier test */
+            if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+                status = _IssueSimpleBusRequest(pHcd,CMD0,0,SDREQ_FLAGS_RESP_R1,pReq);  
+            } else {
+                status = _IssueSimpleBusRequest(pHcd,CMD0,0,SDREQ_FLAGS_NO_RESP,pReq);  
+            }
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: go-idle failed! \n"));
+                break;  
+            } 
+        }
+                        
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Looking for SD Memory.. \n"));
+            /* SD Memory Card checking */       
+            /* test for present of SD card (stand-alone or combo card) */
+        status = TestPresence(pHcd, CARD_SD, pReq);        
+        if (SDIO_SUCCESS(status)) {
+                /* there is an SD Card present, could be part of a combo system */
+            pHcd->CardProperties.Flags |= CARD_SD;            
+            if (0 == OCRvalue) {
+                DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: SD Memory card detected. \n"));
+                    /* no OCR value on entry this is a stand-alone card, go and get it*/
+                status = ReadOCR(pHcd,CARD_SD,pReq,0,&OCRvalue);       
+                if (!SDIO_SUCCESS(status) || (OCRvalue == 0)) {
+                    DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to get OCR (status:%d) \n",
+                                            status));
+                    break;    
+                }
+                DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: SD Card Reports OCR:0x%8.8X \n", OCRvalue));
+                status = AdjustSlotPower(pHcd, &OCRvalue);
+                if (!SDIO_SUCCESS(status)) {
+                    DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to adjust power \n"));
+                    break;  
+                }            
+            } else {
+                 DBG_ASSERT((pHcd->CardProperties.Flags & (CARD_SD | CARD_SDIO)));
+                 DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: SDIO Combo Card detected \n"));
+            }          
+                /* poll for SD card ready */          
+            status = PollCardReady(pHcd,OCRvalue,CARD_SD);
+            if (!SDIO_SUCCESS(status)) {
+                    /* check if this card has an SDIO function */
+                if (pHcd->CardProperties.Flags & CARD_SDIO) {
+                    DBG_PRINT(SDDBG_WARN, ("SDIO Bus Driver: Combo Detected but SD memory function failed \n"));
+                        /* allow SDIO functions to load normally */
+                    status = SDIO_STATUS_SUCCESS;
+                        /* remove SD flag */
+                    pHcd->CardProperties.Flags &= ~CARD_SD; 
+                } else {
+                    break;  
+                } 
+            } else {
+                DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: SD Memory ready. \n"));
+            }  
+                /* we're done, no need to check for MMC */            
+            goto prepareCard;                  
+        } else if (status != SDIO_STATUS_BUS_RESP_TIMEOUT){
+                /* major error in hcd, bail */
+            break;   
+        }
+         
+        /* MMC card checking */
+        /* if we get here, these better not be set */
+        DBG_ASSERT(!(pHcd->CardProperties.Flags & (CARD_SD | CARD_SDIO)));
+           /* issue go idle */
+        if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+            status = _IssueSimpleBusRequest(pHcd,CMD0,0,SDREQ_FLAGS_RESP_R1,pReq);  
+        } else {
+            status = _IssueSimpleBusRequest(pHcd,CMD0,0,SDREQ_FLAGS_NO_RESP,pReq);  
+        }
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: go-idle failed! \n"));
+            break;  
+        } 
+        
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Looking for MMC.. \n"));
+        status = TestPresence(pHcd, CARD_MMC, pReq);
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: unknown card detected \n"));
+            break;    
+        }
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: MMC Card Detected \n"));
+        pHcd->CardProperties.Flags |= CARD_MMC;         
+            /* read the OCR value */        
+        status = ReadOCR(pHcd,CARD_MMC,pReq,0,&OCRvalue);                       
+        if (!SDIO_SUCCESS(status) || (OCRvalue == 0)) {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Failed to get OCR (status:%d)",
+                                    status));
+            break;   
+        }
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: MMC Card Reports OCR:0x%8.8X \n", OCRvalue));
+            /* adjust power */
+        status = AdjustSlotPower(pHcd, &OCRvalue);
+        if (!SDIO_SUCCESS(status)) {
+             DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to adjust power \n"));
+             break;  
+        }
+            /* poll for MMC card ready */          
+        status = PollCardReady(pHcd,OCRvalue,CARD_MMC);
+        if (!SDIO_SUCCESS(status)) {
+            break;
+        }
+            /* fall through and prepare MMC card */
+                      
+prepareCard:
+            /* we're done figuring out what was inserted, and setting up
+             * optimal slot voltage, now we need to prepare the card */  
+        if (!IS_HCD_BUS_MODE_SPI(pHcd) &&
+            (pHcd->CardProperties.Flags & (CARD_SD | CARD_MMC))) {
+                /* non-SPI SD or MMC cards need to be moved to the "ident" state before we can get the
+                 * RCA or select the card using the new RCA */  
+            status = _IssueSimpleBusRequest(pHcd,CMD2,0,SDREQ_FLAGS_RESP_R2,pReq);    
+            if (!SDIO_SUCCESS(status)){
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: failed to move SD/MMC card into ident state \n"));
+                break;    
+            }  
+        }
+         
+        if (!IS_HCD_BUS_MODE_SPI(pHcd)) {  
+                /* non-SPI mode cards need their RCA's setup */           
+            if (pHcd->CardProperties.Flags & (CARD_SD | CARD_SDIO)) {
+                    /* issue CMD3 to get RCA on SD/SDIO cards */
+                status = _IssueSimpleBusRequest(pHcd,CMD3,0,SDREQ_FLAGS_RESP_R6,pReq);    
+                if (!SDIO_SUCCESS(status)){
+                    DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: failed to get RCA for SD/SDIO card \n"));
+                    break;    
+                }
+                pHcd->CardProperties.RCA = SD_R6_GET_RCA(pReq->Response); 
+                DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: SD/SDIO RCA:0x%X \n",
+                                        pHcd->CardProperties.RCA));
+            } else if (pHcd->CardProperties.Flags & CARD_MMC) {
+                    /* for MMC cards, we have to assign a relative card address */  
+                    /* just a non-zero number */
+                pHcd->CardProperties.RCA = 1;   
+                    /* issue CMD3 to set the RCA for MMC cards */
+                status = _IssueSimpleBusRequest(pHcd,
+                                                CMD3,(pHcd->CardProperties.RCA << 16),
+                                                SDREQ_FLAGS_RESP_R1,pReq);    
+                if (!SDIO_SUCCESS(status)){
+                    DBG_PRINT(SDDBG_ERROR, 
+                            ("SDIO Bus Driver: failed to set RCA for MMC card! (err=%d) \n",status));
+                    break;    
+                }              
+            } else { 
+                DBG_ASSERT(FALSE);   
+            }
+        }        
+            /* select the card in order to get the rest of the card info, applies 
+             * to SDIO/SD/MMC cards*/
+        status = SelectDeselectCard(pHcd, TRUE);
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: failed to select card! \n"));
+            break;    
+        }  
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver, Card now Selected.. \n"));
+        
+        if (pHcd->CardProperties.Flags & CARD_SDIO) {
+                /* read SDIO revision register */ 
+            status = Cmd52ReadByteCommon(pHcd->pPseudoDev, CCCR_SDIO_REVISION_REG, &temp); 
+            if (!SDIO_SUCCESS(status)) {
+                break;   
+            }             
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Revision Reg: 0x%X \n", temp));
+            switch (temp & SDIO_REV_MASK) {
+                case SDIO_REV_1_00:
+                    DBG_PRINT(SDDBG_TRACE, ("SDIO Spec Revision 1.00 \n"));
+                    pHcd->CardProperties.SDIORevision = SDIO_REVISION_1_00;
+                    break;
+                case SDIO_REV_1_10:
+                    DBG_PRINT(SDDBG_TRACE, ("SDIO Spec Revision 1.10 \n"));
+                    pHcd->CardProperties.SDIORevision = SDIO_REVISION_1_10;
+                    break;   
+                case SDIO_REV_1_20: 
+                    DBG_PRINT(SDDBG_TRACE, ("SDIO Spec Revision 1.20 \n"));
+                    pHcd->CardProperties.SDIORevision = SDIO_REVISION_1_20;
+                    break;    
+                default:
+                    DBG_PRINT(SDDBG_WARN, ("SDIO Warning: unknown SDIO revision, treating like 1.0 device \n")); 
+                    pHcd->CardProperties.SDIORevision = SDIO_REVISION_1_00;
+                    break;
+            }            
+                /* get the common CIS ptr */
+            status = Cmd52ReadMultipleCommon(pHcd->pPseudoDev,
+                                             SDIO_CMN_CIS_PTR_LOW_REG,
+                                             cisBuffer,
+                                             3);                            
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to get CIS ptr, Err:%d", status));
+                break;   
+            }
+                /* this is endian-safe*/
+            pHcd->CardProperties.CommonCISPtr = ((UINT32)cisBuffer[0]) | 
+                                                (((UINT32)cisBuffer[1]) << 8) |
+                                                (((UINT32)cisBuffer[2]) << 16);
+                                                  
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Card CIS Ptr: 0x%X \n", pHcd->CardProperties.CommonCISPtr));
+            temp = sizeof(manfid);
+            tplAddr = pHcd->CardProperties.CommonCISPtr;      
+                /* get the MANFID tuple */
+            status = SDLIB_FindTuple(pHcd->pPseudoDev,
+                                     CISTPL_MANFID,
+                                     &tplAddr, 
+                                     (PUINT8)&manfid,
+                                     &temp); 
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_WARN, ("SDIO Bus Driver: Failed to get MANFID tuple err:%d \n", status));
+                status = SDIO_STATUS_SUCCESS;   
+            } else {  
+                    /* save this off so that it can be copied into each SDIO Func's SDDEVICE structure */          
+                pHcd->CardProperties.SDIO_ManufacturerCode = 
+                                        CT_LE16_TO_CPU_ENDIAN(manfid.ManufacturerCode);
+                pHcd->CardProperties.SDIO_ManufacturerID = 
+                                        CT_LE16_TO_CPU_ENDIAN(manfid.ManufacturerInfo);
+                DBG_PRINT(SDDBG_TRACE, ("SDIO MANFID:0x%X, MANFINFO:0x%X \n",
+                                        pHcd->CardProperties.SDIO_ManufacturerID,
+                                        pHcd->CardProperties.SDIO_ManufacturerCode));
+            }
+            
+            if (pHcd->CardProperties.SDIORevision >= SDIO_REVISION_1_10) { 
+                    /* read power control */
+                status = Cmd52ReadByteCommon(pHcd->pPseudoDev, SDIO_POWER_CONTROL_REG, &temp); 
+                if (SDIO_SUCCESS(status)) {
+                        /* check for power control support which indicates the card may use more
+                         * than 200 mA */
+                    if (temp & SDIO_POWER_CONTROL_SMPC) {
+                            /* check that the host can support this. */
+                        if (pHcd->MaxSlotCurrent >= SDIO_EMPC_CURRENT_THRESHOLD) {
+                            temp = SDIO_POWER_CONTROL_EMPC; 
+                                /* enable power control on the card */ 
+                            status = Cmd52WriteByteCommon(pHcd->pPseudoDev, SDIO_POWER_CONTROL_REG, &temp); 
+                            if (!SDIO_SUCCESS(status)) {
+                                DBG_PRINT(SDDBG_ERROR,
+                                        ("SDIO Busdriver: failed to enable power control (%d) \n",status));
+                                break;   
+                            }   
+                                /* mark that the card is high power */                      
+                            pHcd->CardProperties.Flags |= CARD_HIPWR; 
+                                                        
+                            DBG_PRINT(SDDBG_TRACE,
+                               ("SDIO Busdriver: Power Control Enabled on SDIO (1.10 or greater) card \n"));      
+                        } else {
+                            DBG_PRINT(SDDBG_WARN,
+                               ("SDIO Busdriver: Card can operate higher than 200mA, host cannot (max:%d) \n",
+                               pHcd->MaxSlotCurrent));  
+                            /* this is not fatal, the card should operate at a reduced rate */ 
+                        } 
+                    } else {
+                        DBG_PRINT(SDDBG_TRACE,
+                            ("SDIO Busdriver: SDIO 1.10 (or greater) card draws less than 200mA \n"));    
+                    }
+                } else {                 
+                    DBG_PRINT(SDDBG_WARN,
+                            ("SDIO Busdriver: failed to get POWER CONTROL REG (%d) \n",status)); 
+                    /* fall through and continue on at reduced mode */
+                }
+            } 
+        }      
+            /* get the current bus parameters */
+        busMode.BusModeFlags = pHcd->CardProperties.BusMode;
+        busMode.ClockRate =  pHcd->CardProperties.OperBusClock;
+            /* get the rest of the bus parameters like clock and supported bus width */
+        status = GetBusParameters(pHcd,&busMode);
+        if (!SDIO_SUCCESS(status)) {
+            break;   
+        }
+        
+        if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+                /* check HCD if it wants to run without SPI CRC */
+            if (pHcd->Attributes & SDHCD_ATTRIB_NO_SPI_CRC) {
+                    /* hcd would rather not run with CRC we don't need to tell the card since SPI mode
+                     * cards power up with CRC initially disabled */
+                busMode.BusModeFlags |= SDCONFIG_BUS_MODE_SPI_NO_CRC; 
+            } else {
+                    /* first enable SPI CRC checking if the HCD can handle it */
+                status = SDSPIModeEnableDisableCRC(pHcd->pPseudoDev, TRUE);
+                if (!SDIO_SUCCESS(status)) {
+                    DBG_PRINT(SDDBG_ERROR, 
+                                ("SDIO Bus Driver: Failed to set Enable SPI CRC on card \n"));   
+                    break;   
+                }
+            }            
+        }
+        
+        status = SetOperationalBusMode(pHcd->pPseudoDev, &busMode);
+        
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to set operational bus mode\n"));
+            break;  
+        } 
+        
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Oper. Mode: Clock:%d, Bus:0x%X \n", 
+                                pHcd->CardProperties.OperBusClock,pHcd->CardProperties.BusMode));
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Card in TRANS state, Ready: CardInfo Flags 0x%X \n", 
+                                pHcd->CardProperties.Flags));
+                                                  
+    } while (FALSE);
+    
+    if (pReq != NULL) {
+        FreeRequest(pReq);   
+    } 
+    
+    return status; 
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SDQuerySDMMCInfo - query MMC card info
+  Input:  pDevice - device
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS SDQuerySDMMCInfo(PSDDEVICE pDevice) 
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    PSDREQUEST  pReq = NULL;
+    UINT8       CID[MAX_CSD_CID_BYTES];
+    
+    do {
+        pReq = AllocateRequest();
+        if (NULL == pReq) {
+            status = SDIO_STATUS_NO_RESOURCES;
+            break;    
+        }
+            /* de-select the card */
+        status = SelectDeselectCard(pDevice->pHcd,FALSE);
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to deselect card before getting CID \n"));
+            break;   
+        }
+        
+        if (SDDEVICE_IS_BUSMODE_SPI(pDevice)) {
+                /* in SPI mode, getting the CSD requires a data transfer */
+            status = _IssueBusRequestBd(pDevice->pHcd,CMD10,0,
+                                        SDREQ_FLAGS_RESP_R1 | SDREQ_FLAGS_DATA_TRANS,
+                                        pReq,
+                                        CID, 
+                                        MAX_CSD_CID_BYTES);
+            if (SDIO_SUCCESS(status)) {
+                    /* in SPI mode we need to reorder to the CID since SPI data comes in MSB first*/
+                ReorderBuffer(CID,MAX_CSD_CID_BYTES); 
+            }
+        } else {                                             
+                /* get the CID */
+            status = _IssueSimpleBusRequest(pDevice->pHcd,
+                                            CMD10,
+                                            (SDDEVICE_GET_CARD_RCA(pDevice) << 16),
+                                            SDREQ_FLAGS_RESP_R2,
+                                            pReq); 
+            if (SDIO_SUCCESS(status)) {
+                    /* extract it from the reponse */
+                memcpy(CID,pReq->Response,MAX_CSD_CID_BYTES);
+            }
+        }
+        
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_WARN, ("SDQuerySDMMCInfo: failed to get CID. \n"));
+            status = SDIO_STATUS_SUCCESS;    
+        } else {
+            pDevice->pId[0].SDMMC_ManfacturerID = GET_SD_CID_MANFID(CID);
+            pDevice->pId[0].SDMMC_OEMApplicationID = GET_SD_CID_OEMID(CID);
+#if DEBUG
+            {  
+                char pBuf[7];
+                 
+                pBuf[0] = GET_SD_CID_PN_1(CID);
+                pBuf[1] = GET_SD_CID_PN_2(CID);
+                pBuf[2] = GET_SD_CID_PN_3(CID);
+                pBuf[3] = GET_SD_CID_PN_4(CID);
+                pBuf[4] = GET_SD_CID_PN_5(CID);
+                if (pDevice->pHcd->CardProperties.Flags & CARD_MMC) {
+                    pBuf[5] = GET_SD_CID_PN_6(CID); 
+                    pBuf[6] = 0;   
+                } else {
+                    pBuf[5] = 0;     
+                }
+                DBG_PRINT(SDDBG_TRACE, ("SDQuerySDMMCInfo: Product String: %s\n", pBuf));
+            }
+#endif            
+            DBG_PRINT(SDDBG_TRACE, ("SDQuerySDMMCInfo: ManfID: 0x%X, OEMID:0x%X \n",
+                       pDevice->pId[0].SDMMC_ManfacturerID, pDevice->pId[0].SDMMC_OEMApplicationID));
+        }                                                              
+            /* re-select card */         
+        status = SelectDeselectCard(pDevice->pHcd,TRUE);
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to re-select card after getting CID \n"));   
+            break;    
+        }  
+    } while (FALSE);
+           
+    if (pReq != NULL) {
+        FreeRequest(pReq);    
+    }
+    
+    return status; 
+}
+ 
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SDQuerySDIOInfo - query SDIO card info
+  Input:  pDevice - the device
+  Output:  
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS SDQuerySDIOInfo(PSDDEVICE pDevice) 
+{
+    SDIO_STATUS     status = SDIO_STATUS_SUCCESS;
+    UINT32          faddress;
+    UINT8           fInfo;
+    UINT32          nextTpl;
+    UINT8           tplLength;
+    UINT8           cisPtrBuffer[3];
+    struct SDIO_FUNC_EXT_FUNCTION_TPL_1_1 funcTuple;
+        
+        /* use the card-wide SDIO manufacturer code and ID previously read.*/
+    pDevice->pId[0].SDIO_ManufacturerCode = pDevice->pHcd->CardProperties.SDIO_ManufacturerCode; 
+    pDevice->pId[0].SDIO_ManufacturerID = pDevice->pHcd->CardProperties.SDIO_ManufacturerID; 
+        
+        /* calculate function base address */    
+    faddress = CalculateFBROffset(SDDEVICE_GET_SDIO_FUNCNO(pDevice));  
+    DBG_ASSERT(faddress != 0);
+       
+    do {
+        status = Cmd52ReadByteCommon(pDevice,
+                                     FBR_FUNC_INFO_REG_OFFSET(faddress),
+                                     &fInfo);                                  
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to get function info, Err:%d , using Class:UNKNOWN\n", status));
+            fInfo = 0;
+            pDevice->pId[0].SDIO_FunctionClass = 0;
+            status = SDIO_STATUS_SUCCESS;
+        } else {
+            pDevice->pId[0].SDIO_FunctionClass = fInfo & FUNC_INFO_DEVICE_CODE_MASK; 
+        }    
+          
+        if ((FUNC_INFO_DEVICE_CODE_LAST == pDevice->pId[0].SDIO_FunctionClass) &&
+            SDDEVICE_IS_SDIO_REV_GTEQ_1_10(pDevice)) { 
+                /* if the device code is the last one, check for 1.1 revision and get the
+                 * extended code */ 
+            status = Cmd52ReadByteCommon(pDevice,
+                                         FBR_FUNC_EXT_DEVICE_CODE_OFFSET(faddress),
+                                         &(pDevice->pId[0].SDIO_FunctionClass));                                  
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to get 1.1 extended DC, Err:%d\n",
+                                        status));
+                break;   
+            }  
+        }  
+                                                               
+            /* get the function CIS ptr */
+        status = Cmd52ReadMultipleCommon(pDevice,
+                                         FBR_FUNC_CIS_LOW_OFFSET(faddress),
+                                         cisPtrBuffer,
+                                         3); 
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to get FN CIS ptr, Err:%d\n", status));
+            break;   
+        }
+            /* endian safe */
+        pDevice->DeviceInfo.AsSDIOInfo.FunctionCISPtr = ((UINT32)cisPtrBuffer[0]) | 
+                                                        (((UINT32)cisPtrBuffer[1]) << 8) |
+                                                        (((UINT32)cisPtrBuffer[2]) << 16);
+                                                        
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Function:%d, Class:%d FnCISPtr:0x%X \n",
+                  SDDEVICE_GET_SDIO_FUNCNO(pDevice),
+                  pDevice->pId[0].SDIO_FunctionClass,pDevice->DeviceInfo.AsSDIOInfo.FunctionCISPtr));
+        
+        if (fInfo & FUNC_INFO_SUPPORTS_CSA_MASK) {
+               /* get the function CSA ptr */
+            status = Cmd52ReadMultipleCommon(pDevice,
+                                             FBR_FUNC_CSA_LOW_OFFSET(faddress),
+                                             cisPtrBuffer,
+                                             3); 
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to get FN CSA ptr, Err:%d \n", status));
+                break;   
+            }
+                /* endian safe */ 
+            pDevice->DeviceInfo.AsSDIOInfo.FunctionCSAPtr = ((UINT32)cisPtrBuffer[0]) | 
+                                                            (((UINT32)cisPtrBuffer[1]) << 8) |
+                                                            (((UINT32)cisPtrBuffer[2]) << 16);
+                                                      
+        } 
+        
+        nextTpl = SDDEVICE_GET_SDIO_FUNC_CISPTR(pDevice);
+            /* look for the funce TPL */
+        tplLength = sizeof(funcTuple); 
+            /* go get the func CE tuple */
+        status = SDLIB_FindTuple(pDevice,
+                                 CISTPL_FUNCE,
+                                 &nextTpl,
+                                 (PUINT8)&funcTuple,
+                                 &tplLength);
+        
+        if (!SDIO_SUCCESS(status)){
+            /* handles case of bad CIS or missing tupple, allow function driver to handle */
+            DBG_PRINT(SDDBG_WARN, ("SDIO Bus Driver: Failed to get FuncCE Tuple: %d \n", status));
+            status = SDIO_STATUS_SUCCESS;
+            break;    
+        }
+            /* set the max block size */
+        pDevice->DeviceInfo.AsSDIOInfo.FunctionMaxBlockSize = 
+                                CT_LE16_TO_CPU_ENDIAN(funcTuple.CommonInfo.MaxBlockSize);
+                                                                   
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Function:%d, MaxBlocks:%d \n",
+                  SDDEVICE_GET_SDIO_FUNCNO(pDevice),
+                  pDevice->DeviceInfo.AsSDIOInfo.FunctionMaxBlockSize));
+                  
+            /* check for MANFID function tuple (SDIO 1.1 or greater) */
+        if (SDDEVICE_IS_SDIO_REV_GTEQ_1_10(pDevice)) {
+            struct SDIO_MANFID_TPL      manfid;
+            nextTpl = SDDEVICE_GET_SDIO_FUNC_CISPTR(pDevice);   
+            tplLength = sizeof(manfid);            
+                /* get the MANFID tuple */
+            status = SDLIB_FindTuple(pDevice,
+                                     CISTPL_MANFID,
+                                     &nextTpl, 
+                                     (PUINT8)&manfid,
+                                     &tplLength); 
+            if (SDIO_SUCCESS(status)) {
+                    /* this function has a MANFID tuple */          
+                pDevice->pId[0].SDIO_ManufacturerCode = 
+                                        CT_LE16_TO_CPU_ENDIAN(manfid.ManufacturerCode);
+                pDevice->pId[0].SDIO_ManufacturerID = 
+                                        CT_LE16_TO_CPU_ENDIAN(manfid.ManufacturerInfo);
+                DBG_PRINT(SDDBG_TRACE, ("SDIO 1.1 (Function Specific) MANFID:0x%X, MANFINFO:0x%X \n",
+                                        pDevice->pId[0].SDIO_ManufacturerID,
+                                        pDevice->pId[0].SDIO_ManufacturerCode));
+            } else {
+                DBG_PRINT(SDDBG_WARN, ("SDIO 1.1, No CISTPL_MANFID Tuple in FUNC CIS \n"));       
+                status = SDIO_STATUS_SUCCESS;
+            }
+        }    
+    } while (FALSE);
+    
+    return status; 
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SDEnableFunction - enable function
+  Input:  pDevice - the device/function
+          pEnData - enable data;
+  Output: 
+  Return: status
+  Notes: Note, this performs synchronous calls
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS SDEnableFunction(PSDDEVICE pDevice, PSDCONFIG_FUNC_ENABLE_DISABLE_DATA pEnData)
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    UINT8       registerValue;
+    UINT8       mask;
+    FUNC_ENABLE_TIMEOUT  retry;
+   
+        /* take the configure op lock to make this atomic */
+    status = SemaphorePendInterruptable(&pDevice->pHcd->ConfigureOpsSem);
+    if (!SDIO_SUCCESS(status)) {
+        return status;   
+    } 
+    
+    status = SDIO_STATUS_INVALID_PARAMETER;       
+    do { 
+        if (!(pDevice->pHcd->CardProperties.Flags & CARD_SDIO)){
+                /* nothing to do if it's not an SDIO card */
+            break;  
+        }
+                
+        if (!((SDDEVICE_GET_SDIO_FUNCNO(pDevice) >= SDIO_FIRST_FUNCTION_NUMBER) && 
+              (SDDEVICE_GET_SDIO_FUNCNO(pDevice) <= SDIO_LAST_FUNCTION_NUMBER))){
+            DBG_ASSERT(FALSE);
+            break;
+        }         
+            /* make sure there is a timeout value */ 
+        if (0 == pEnData->TimeOut) {
+            break;  
+        } 
+                   
+        mask = 1 << SDDEVICE_GET_SDIO_FUNCNO(pDevice);
+            /* read the enable register */
+        status = Cmd52ReadByteCommon(pDevice, SDIO_ENABLE_REG, &registerValue);
+        if (!SDIO_SUCCESS(status)){
+            break;    
+        }        
+        if (pEnData->EnableFlags & SDCONFIG_ENABLE_FUNC) {                   
+                /* set the enable register bit */     
+            registerValue |= mask;    
+        } else {
+               /* clear the bit */
+            registerValue &= ~mask;           
+        }
+        
+        DBG_PRINT(SDDBG_TRACE,
+                ("SDIO Bus Driver %s Function, Mask:0x%X Enable Reg Value:0x%2.2X\n",
+                 (pEnData->EnableFlags & SDCONFIG_ENABLE_FUNC) ? "Enabling":"Disabling",
+                 mask,
+                 registerValue));
+  
+            /* write it back out */
+        status = Cmd52WriteByteCommon(pDevice, SDIO_ENABLE_REG, &registerValue);
+        if (!SDIO_SUCCESS(status)){
+            break;    
+        } 
+            /* now poll the ready bit until it sets or clears */
+        retry = pEnData->TimeOut;
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Function Enable/Disable Polling: %d retries \n", 
+                                retry));
+        while (retry) {
+            status = Cmd52ReadByteCommon(pDevice, SDIO_READY_REG, &registerValue);
+            if (!SDIO_SUCCESS(status)){
+                break;    
+            }
+            if (pEnData->EnableFlags & SDCONFIG_ENABLE_FUNC) { 
+                    /* if the bit is set, the device is ready */
+                if (registerValue & mask) {
+                        /* device ready */
+                    break; 
+                }
+            } else {
+                if (!(registerValue & mask)) {
+                        /* device is no longer ready */
+                    break; 
+                }       
+            } 
+                /* sleep before trying again */    
+            status = OSSleep(1);   
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_ERROR, ("OSSleep Failed! \n"));
+                break;   
+            }
+            retry--;
+        } 
+        
+        if (0 == retry) {
+            status = SDIO_STATUS_FUNC_ENABLE_TIMEOUT; 
+            break;
+        }         
+                                                  
+    } while (FALSE);
+        
+    SemaphorePost(&pDevice->pHcd->ConfigureOpsSem);            
+    return status;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SDAllocFreeSlotCurrent - allocate or free slot current
+  Input:  pDevice - the device/function
+          Allocate - Allocate current, else free
+          pData - slotcurrent data (non-NULL if Allocate is TRUE)
+  Output: 
+  Return: status
+  Notes:  if the function returns SDIO_STATUS_NO_RESOURCES, the pData->SlotCurrent field is
+          updated with the available current
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS SDAllocFreeSlotCurrent(PSDDEVICE pDevice, BOOL Allocate, PSDCONFIG_FUNC_SLOT_CURRENT_DATA pData)
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+     
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO Bus Driver: SDAllocFreeSlotCurrent\n"));
+
+        /* take the configure op lock to make this atomic */
+    status = SemaphorePendInterruptable(&pDevice->pHcd->ConfigureOpsSem);
+    if (!SDIO_SUCCESS(status)) {
+        return status;   
+    } 
+    
+    status = SDIO_STATUS_INVALID_PARAMETER;      
+    do {
+            /* check the current budget and allocate */
+        if (Allocate) {
+            if (0 == pData->SlotCurrent) {
+                /* caller must specify current requirement for the power mode */
+                break;    
+            }   
+            if (pDevice->SlotCurrentAlloc != 0) {
+               /* slot current has already been allocated, caller needs to free
+                * first */
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Slot Current Already allocated! \n"));
+                break;  
+            }     
+            if (((UINT32)pDevice->pHcd->SlotCurrentAllocated + (UINT32)pData->SlotCurrent) > 
+                (UINT32)pDevice->pHcd->MaxSlotCurrent) {  
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Slot Current Budget exceeded, Requesting: %d, Allocated already: %d, Max: %d \n", 
+                            pData->SlotCurrent, pDevice->pHcd->SlotCurrentAllocated,
+                            pDevice->pHcd->MaxSlotCurrent));
+                status = SDIO_STATUS_NO_RESOURCES;  
+                    /* return remaining */                  
+                pData->SlotCurrent = pDevice->pHcd->MaxSlotCurrent - 
+                                     pDevice->pHcd->SlotCurrentAllocated;
+                break;   
+            }        
+                /* bump up allocation */   
+            pDevice->pHcd->SlotCurrentAllocated += pData->SlotCurrent;
+                /* save this off for the call to free slot current */  
+            pDevice->SlotCurrentAlloc = pData->SlotCurrent;
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Slot Current Requested: %d, New Total: %d, Max: %d \n", 
+                            pData->SlotCurrent, pDevice->pHcd->SlotCurrentAllocated,
+                            pDevice->pHcd->MaxSlotCurrent));
+            
+        } else {
+            if (0 == pDevice->SlotCurrentAlloc) {
+                    /* no allocation */
+                break;
+            }
+                /* return the allocation back */
+            if (pDevice->SlotCurrentAlloc <= pDevice->pHcd->SlotCurrentAllocated) {
+                pDevice->pHcd->SlotCurrentAllocated -= pDevice->SlotCurrentAlloc;  
+                DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Slot Current Freed: %d, New Total: %d, Max: %d \n", 
+                            pDevice->SlotCurrentAlloc, pDevice->pHcd->SlotCurrentAllocated,
+                            pDevice->pHcd->MaxSlotCurrent));
+            } else {
+                DBG_ASSERT(FALSE);   
+            }
+           
+                /* make sure this is zeroed */
+            pDevice->SlotCurrentAlloc = 0;          
+        }                                   
+        
+        status = SDIO_STATUS_SUCCESS;
+                                             
+    } while (FALSE);
+        
+    SemaphorePost(&pDevice->pHcd->ConfigureOpsSem);            
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO Bus Driver: SDAllocFreeSlotCurrent, %d\n", status));
+    return status;
+}
+
+static void RawHcdIrqControl(PSDHCD pHcd, BOOL Enable)
+{
+    SDIO_STATUS status;
+    SDCONFIG_SDIO_INT_CTRL_DATA irqData;
+    CT_DECLARE_IRQ_SYNC_CONTEXT();
+    
+    ZERO_OBJECT(irqData);  
+    
+    status = _AcquireHcdLock(pHcd);
+    if (!SDIO_SUCCESS(status)) { 
+        return;
+    }
+          
+    do {
+            /* for raw devices, we simply enable/disable in the HCD only */
+        if (Enable) {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver (RAW) Unmasking Int \n"));
+            irqData.IRQDetectMode = IRQ_DETECT_RAW;
+            irqData.SlotIRQEnable = TRUE; 
+        } else {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver (RAW) Masking Int \n"));
+            irqData.SlotIRQEnable = FALSE; 
+        }
+        
+        status = _IssueConfig(pHcd,SDCONFIG_SDIO_INT_CTRL,
+                              (PVOID)&irqData, sizeof(irqData));
+                              
+        if (!SDIO_SUCCESS(status)){
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver failed to enable/disable IRQ in (RAW) hcd :%d\n", 
+                                    status)); 
+        }       
+        
+    } while (FALSE);
+  
+    status = _ReleaseHcdLock(pHcd); 
+}
+
+static void RawHcdEnableIrqPseudoComplete(PSDREQUEST pReq)
+{
+    if (SDIO_SUCCESS(pReq->Status)) {
+        RawHcdIrqControl((PSDHCD)pReq->pCompleteContext, TRUE);  
+    }
+    FreeRequest(pReq);
+}
+
+static void RawHcdDisableIrqPseudoComplete(PSDREQUEST pReq)
+{
+    RawHcdIrqControl((PSDHCD)pReq->pCompleteContext, FALSE);  
+    FreeRequest(pReq);
+}
+
+static void HcdIrqControl(PSDHCD pHcd, BOOL Enable)
+{
+    SDIO_STATUS                 status;
+    SDCONFIG_SDIO_INT_CTRL_DATA irqData;
+    CT_DECLARE_IRQ_SYNC_CONTEXT();
+    
+    ZERO_OBJECT(irqData);  
+    
+    status = _AcquireHcdLock(pHcd);
+    if (!SDIO_SUCCESS(status)) { 
+        return;
+    }
+    
+    do {
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: HcdIrqControl (%s), IrqsEnabled:0x%X \n", 
+                        Enable ? "Enable":"Disable",pHcd->IrqsEnabled ));
+                        
+        if (Enable) {
+            irqData.SlotIRQEnable = TRUE;
+        } else {
+            irqData.SlotIRQEnable = FALSE;
+        }
+                /* setup HCD to enable/disable it's detection hardware */
+        if (irqData.SlotIRQEnable) {
+                /* set the IRQ detection mode */
+            switch (SDCONFIG_GET_BUSWIDTH(pHcd->CardProperties.BusMode)) {                
+                case SDCONFIG_BUS_WIDTH_SPI:
+                    irqData.IRQDetectMode = IRQ_DETECT_SPI;
+                    break;
+                case SDCONFIG_BUS_WIDTH_1_BIT:
+                    irqData.IRQDetectMode = IRQ_DETECT_1_BIT;
+                    break;
+                case SDCONFIG_BUS_WIDTH_4_BIT:  
+                    irqData.IRQDetectMode = IRQ_DETECT_4_BIT;
+                        /* check card and HCD for 4bit multi-block interrupt support */
+                    if ((pHcd->CardProperties.SDIOCaps & SDIO_CAPS_INT_MULTI_BLK) &&
+                        (pHcd->Attributes & SDHCD_ATTRIB_MULTI_BLK_IRQ)) {                           
+                            /* note: during initialization of the card, the mult-blk IRQ support
+                             * is enabled in card caps register */
+                        irqData.IRQDetectMode |= IRQ_DETECT_MULTI_BLK;  
+                        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver enabling IRQ in multi-block mode:\n"));
+                    }  
+                    break;
+                default:
+                    DBG_ASSERT(FALSE);
+                    break;
+            }
+            
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver enabling IRQ in HCD Mode:0x%X\n", 
+                                     irqData.IRQDetectMode));
+        }  
+             
+        status = _IssueConfig(pHcd,SDCONFIG_SDIO_INT_CTRL,
+                                (PVOID)&irqData, sizeof(irqData));
+        if (!SDIO_SUCCESS(status)){
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver failed to enable/disable IRQ in hcd %d\n", 
+                                    status));
+        }
+  
+    } while (FALSE);
+    
+    status = _ReleaseHcdLock(pHcd); 
+}
+
+static BOOL CheckWriteIntEnableSuccess(PSDREQUEST pReq)
+{
+    if (!SDIO_SUCCESS(pReq->Status)){
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to get write INT Enable register Err:%d\n",
+                                     pReq->Status));
+        return FALSE;
+    } 
+                   
+    if (SD_R5_GET_RESP_FLAGS(pReq->Response) & SD_R5_ERRORS) {
+       DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: WriteIntEnableComplete CMD52 resp error: 0x%X \n", 
+                  SD_R5_GET_RESP_FLAGS(pReq->Response)));
+        return FALSE;
+    }  
+    
+    return TRUE;
+}
+
+static void HcdIrqEnableComplete(PSDREQUEST pReq)
+{
+    if (CheckWriteIntEnableSuccess(pReq)) {
+            /* configure HCD */
+        HcdIrqControl((PSDHCD)pReq->pCompleteContext, TRUE);  
+    }
+    FreeRequest(pReq);
+}
+
+static void HcdIrqDisableComplete(PSDREQUEST pReq)
+{
+    CheckWriteIntEnableSuccess(pReq);
+    HcdIrqControl((PSDHCD)pReq->pCompleteContext, FALSE);  
+    FreeRequest(pReq);
+}
+
+static void WriteIntEnableComplete(PSDREQUEST pReq) 
+{  
+   if (CheckWriteIntEnableSuccess(pReq)) {
+       DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: Wrote INT Enable value:0x%X \n", 
+                    (INT)pReq->pCompleteContext));
+   }
+   FreeRequest(pReq); 
+}
+
+static void HcdAckComplete(PSDREQUEST pReq)
+{
+    SDIO_STATUS status;
+    DBG_PRINT(SDIODBG_FUNC_IRQ, ("SDIO Bus Driver: Hcd (0x%X) Irq Ack \n", 
+                    (INT)pReq->pCompleteContext));
+        /* re-arm the HCD */
+    status = _IssueConfig((PSDHCD)pReq->pCompleteContext,SDCONFIG_SDIO_REARM_INT,NULL,0);  
+  
+    if (!SDIO_SUCCESS(status)) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: HCD Re-Arm failed : %d\n", 
+                    status));       
+    }
+    FreeRequest(pReq);
+}
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SDFunctionAckInterrupt - handle device interrupt acknowledgement
+  Input:  pDevice - the device 
+  Output: 
+  Return: 
+  Notes: 
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS SDFunctionAckInterrupt(PSDDEVICE pDevice)
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    UCHAR       mask;
+    PSDREQUEST  pReq = NULL;
+    BOOL        setHcd = FALSE;
+    SDIO_STATUS status2;
+    CT_DECLARE_IRQ_SYNC_CONTEXT();
+    
+    pReq = AllocateRequest();        
+    if (NULL == pReq) {
+        return SDIO_STATUS_NO_RESOURCES;
+    }
+    
+    status = _AcquireHcdLock(pDevice->pHcd);
+    
+    if (!SDIO_SUCCESS(status)) {
+        FreeRequest(pReq);
+        return status; 
+    } 
+    
+    do { 
+        if (!((SDDEVICE_GET_SDIO_FUNCNO(pDevice) >= SDIO_FIRST_FUNCTION_NUMBER) && 
+              (SDDEVICE_GET_SDIO_FUNCNO(pDevice) <= SDIO_LAST_FUNCTION_NUMBER))){
+            status = SDIO_STATUS_INVALID_PARAMETER;
+            DBG_ASSERT(FALSE);
+            break;
+        } 
+        mask = 1 << SDDEVICE_GET_SDIO_FUNCNO(pDevice);
+        if (pDevice->pHcd->PendingIrqAcks & mask) { 
+                /* clear the ack bit in question */
+            pDevice->pHcd->PendingIrqAcks &= ~mask;      
+            if (0 == pDevice->pHcd->PendingIrqAcks) {
+                pDevice->pHcd->IrqProcState = SDHCD_IDLE;
+                    /* no pending acks, so re-arm if irqs are stilled enabled */
+                if (pDevice->pHcd->IrqsEnabled) {
+                    setHcd = TRUE;
+                        /* issue pseudo request to sync this with bus requests */
+                    pReq->Status = SDIO_STATUS_SUCCESS;
+                    pReq->pCompletion = HcdAckComplete;
+                    pReq->pCompleteContext = pDevice->pHcd;  
+                    pReq->Flags = SD_PSEUDO_REQ_FLAGS;
+                }     
+            } 
+        } else {
+            DBG_PRINT(SDDBG_WARN, ("SDIO Bus Driver: AckInterrupt: no IRQ pending on Function :%d, \n", 
+                        SDDEVICE_GET_SDIO_FUNCNO(pDevice)));
+        }     
+    } while (FALSE); 
+        
+    status2 = ReleaseHcdLock(pDevice);
+    
+    if (pReq != NULL) {
+        if (SDIO_SUCCESS(status) && (setHcd)) {
+                /* issue request */
+            IssueRequestToHCD(pDevice->pHcd,pReq);       
+        } else {
+            FreeRequest(pReq);   
+        }  
+    }  
+    
+    return status;  
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SDMaskUnmaskFunctionIRQ - mask/unmask function IRQ
+  Input:  pDevice - the device/function
+          MaskInt - mask interrupt
+  Output: 
+  Return: status
+  Notes:  Note, this function can be called from an ISR or completion context
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS SDMaskUnmaskFunctionIRQ(PSDDEVICE pDevice, BOOL MaskInt)
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    UINT8       mask;
+    UINT8       controlVal;
+    BOOL        setHcd;
+    PSDREQUEST  pReq = NULL;
+    SDIO_STATUS status2;
+    
+    CT_DECLARE_IRQ_SYNC_CONTEXT();
+    
+    setHcd = FALSE;
+    
+    pReq = AllocateRequest();        
+    if (NULL == pReq) {
+        return SDIO_STATUS_NO_RESOURCES;
+    }
+    
+    status = _AcquireHcdLock(pDevice->pHcd);
+    
+    if (!SDIO_SUCCESS(status)) {
+        FreeRequest(pReq);
+        return status; 
+    } 
+    
+    do { 
+          
+        if (pDevice->pHcd->CardProperties.Flags & CARD_RAW) {
+            if (!MaskInt) {
+                if (!pDevice->pHcd->IrqsEnabled) {
+                    pReq->pCompletion = RawHcdEnableIrqPseudoComplete; 
+                    setHcd = TRUE; 
+                    pDevice->pHcd->IrqsEnabled = 1 << 1;   
+                } 
+            } else {
+                if (pDevice->pHcd->IrqsEnabled) {
+                    pReq->pCompletion = RawHcdDisableIrqPseudoComplete; 
+                    setHcd = TRUE; 
+                    pDevice->pHcd->IrqsEnabled = 0;   
+                } 
+            }                       
+            
+            if (setHcd) {
+                    /* hcd IRQ control requests must be synched with outstanding 
+                     * bus requests so we issue a pseudo bus request  */
+                pReq->pCompleteContext = pDevice->pHcd;  
+                pReq->Flags = SD_PSEUDO_REQ_FLAGS;
+                pReq->Status = SDIO_STATUS_SUCCESS;
+            } else {
+                    /* no request to submit, just free it */
+                FreeRequest(pReq);   
+                pReq = NULL;  
+            }
+                /* we're done, submit the bus request if any */
+            break;  
+        } 
+        
+        if (!(pDevice->pHcd->CardProperties.Flags & CARD_SDIO)){
+                /* nothing to do if it's not an SDIO card */
+            DBG_ASSERT(FALSE);
+            status = SDIO_STATUS_INVALID_PARAMETER;
+            break;  
+        } 
+        
+        if (!((SDDEVICE_GET_SDIO_FUNCNO(pDevice) >= SDIO_FIRST_FUNCTION_NUMBER) && 
+              (SDDEVICE_GET_SDIO_FUNCNO(pDevice) <= SDIO_LAST_FUNCTION_NUMBER))){
+            status = SDIO_STATUS_INVALID_PARAMETER;
+            DBG_ASSERT(FALSE);
+            break;
+        }   
+               
+        mask = 1 << SDDEVICE_GET_SDIO_FUNCNO(pDevice);      
+        if (!MaskInt) {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver Unmasking Int, Mask:0x%X\n", mask));
+                /* check interrupts that were enabled on entry */
+            if (0 == pDevice->pHcd->IrqsEnabled) {
+                    /* need to turn on interrupts in HCD */
+                setHcd = TRUE;   
+                    /* use this completion routine */
+                pReq->pCompletion = HcdIrqEnableComplete;   
+            } 
+                /* set the enable bit, in the shadow register */     
+            pDevice->pHcd->IrqsEnabled |= mask;
+                /* make sure control value includes the master enable */
+            controlVal = pDevice->pHcd->IrqsEnabled | SDIO_INT_MASTER_ENABLE;
+        } else {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver Masking Int, Mask:0x%X\n", mask));
+                /* clear the bit */
+            pDevice->pHcd->IrqsEnabled &= ~mask;  
+                /* check and see if this clears all the bits */
+            if (0 == pDevice->pHcd->IrqsEnabled){
+                    /* if none of the functions are enabled, clear this register */
+                controlVal = 0;                 
+                    /* disable in host */
+                setHcd = TRUE;
+                    /* use this completion routine */
+                pReq->pCompletion = HcdIrqDisableComplete; 
+            } else {
+                    /* set control value making sure master enable is left on */
+                controlVal = pDevice->pHcd->IrqsEnabled | SDIO_INT_MASTER_ENABLE;
+            }
+        }
+        
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver INT_ENABLE_REG value:0x%X\n", controlVal));
+            /* setup bus request to update the mask register */
+        SDIO_SET_CMD52_WRITE_ARG(pReq->Argument,0,SDIO_INT_ENABLE_REG,controlVal);    
+        pReq->Command = CMD52;
+        pReq->Flags = SDREQ_FLAGS_TRANS_ASYNC | SDREQ_FLAGS_RESP_SDIO_R5;
+            
+        if (setHcd) {
+                /* make this a barrier request and set context*/
+            pReq->Flags |= SDREQ_FLAGS_BARRIER;
+            pReq->pCompleteContext = pDevice->pHcd;     
+        } else {
+                /* does not require an update to the HCD  */
+            pReq->pCompleteContext = (PVOID)(UINT32)controlVal;
+            pReq->pCompletion = WriteIntEnableComplete; 
+        }
+                  
+    } while (FALSE);
+    
+    status2 = _ReleaseHcdLock(pDevice->pHcd);
+        
+    if (pReq != NULL) {
+        if (SDIO_SUCCESS(status)) {
+                /* issue request */
+            IssueRequestToHCD(pDevice->pHcd,pReq);       
+        } else {
+            FreeRequest(pReq);   
+        }  
+    }  
+            
+    return status;
+}
+
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SDSPIModeEnableDisableCRC - Enable/Disable SPI Mode CRC checking
+  Input:  pDevice - the device/function
+          Enable - Enable CRC
+  Output: 
+  Return: status
+  Notes:  Note, this function can be called from an ISR or completion context
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS SDSPIModeEnableDisableCRC(PSDDEVICE pDevice,BOOL Enable)
+{
+    SDCONFIG_BUS_MODE_DATA busMode;
+    SDIO_STATUS            status = SDIO_STATUS_SUCCESS;
+    UINT32                 cmdARG = 0; 
+    
+    if (!SDDEVICE_IS_BUSMODE_SPI(pDevice)) {
+        return SDIO_STATUS_INVALID_PARAMETER;   
+    }   
+       //??we should make these atomic using a barrier
+   
+        /* get the current mode and clock */ 
+    busMode.BusModeFlags = pDevice->pHcd->CardProperties.BusMode;
+    busMode.ClockRate = pDevice->pHcd->CardProperties.OperBusClock;    
+    
+    if (Enable) {
+            /* clear the no-CRC flag */
+        busMode.BusModeFlags &= ~SDCONFIG_BUS_MODE_SPI_NO_CRC;   
+        cmdARG = SD_CMD59_CRC_ON;
+    } else {
+        busMode.BusModeFlags |= SDCONFIG_BUS_MODE_SPI_NO_CRC; 
+        cmdARG = SD_CMD59_CRC_OFF;      
+    } 
+       
+    do { 
+            /* issue CMD59 to turn on/off CRC */
+        status = _IssueSimpleBusRequest(pDevice->pHcd,
+                                        CMD59,
+                                        cmdARG,
+                                        SDREQ_FLAGS_RESP_R1,
+                                        NULL); 
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed issue CMD59 (arg=0x%X) Err:%d \n",
+                                    cmdARG, status));
+            break;   
+        }
+        if (Enable) {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: CRC Enabled in SPI mode \n"));
+        } else {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: CRC Disabled in SPI mode \n"));   
+        }
+        status = SetOperationalBusMode(pDevice,&busMode);
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Failed to set SPI NO CRC mode in hcd : Err:%d \n",
+                                    status));
+            break;  
+        }
+    } while (FALSE);
+    
+    return status; 
+}
+
+
+static UINT32 ConvertSPIStatusToSDCardStatus(UINT8 SpiR1, UINT8 SpiR2) 
+{
+    UINT32 cardStatus = 0;
+    
+    if (SpiR1 != 0) {
+            /* convert the error */
+        if (SpiR1 & SPI_CS_ERASE_RESET) {
+            cardStatus |= SD_CS_ERASE_RESET;
+        }            
+        if (SpiR1 & SPI_CS_ILLEGAL_CMD) {
+            cardStatus |= SD_CS_ILLEGAL_CMD_ERR;
+        }            
+        if (SpiR1 & SPI_CS_CMD_CRC_ERR) {
+            cardStatus |= SD_CS_PREV_CMD_CRC_ERR;
+        }
+        if (SpiR1 & SPI_CS_ERASE_SEQ_ERR) {
+            cardStatus |= SD_CS_ERASE_SEQ_ERR;
+        }
+        if (SpiR1 & SPI_CS_ADDRESS_ERR) {
+            cardStatus |= SD_CS_ADDRESS_ERR;
+        }
+        if (SpiR1 & SPI_CS_PARAM_ERR) {
+            cardStatus |= SD_CS_CMD_OUT_OF_RANGE;
+        }   
+    }
+    
+    if (SpiR2 != 0) {
+            /* convert the error */
+        if (SpiR2 & SPI_CS_CARD_IS_LOCKED) {
+            cardStatus |= SD_CS_CARD_LOCKED;
+        }            
+        if (SpiR2 & SPI_CS_LOCK_UNLOCK_FAILED) {
+                /* this bit is shared, just set both */
+            cardStatus |= (SD_CS_LK_UNLK_FAILED | SD_CS_WP_ERASE_SKIP);
+        }            
+        if (SpiR2 & SPI_CS_ERROR) {
+            cardStatus |= SD_CS_GENERAL_ERR;
+        }
+        if (SpiR2 & SPI_CS_INTERNAL_ERROR) {
+            cardStatus |= SD_CS_CARD_INTERNAL_ERR;
+        }
+        if (SpiR2 & SPI_CS_ECC_FAILED) {
+            cardStatus |= SD_CS_ECC_FAILED;
+        }
+        if (SpiR2 & SPI_CS_WP_VIOLATION) {
+            cardStatus |= SD_CS_WP_ERR;
+        }  
+        if (SpiR2 & SPI_CS_ERASE_PARAM_ERR) {
+            cardStatus |= SD_CS_ERASE_PARAM_ERR;
+        }  
+        if (SpiR2 & SPI_CS_OUT_OF_RANGE) {
+            cardStatus |= SD_CS_CMD_OUT_OF_RANGE;
+        }    
+    }
+    
+    return cardStatus;
+}
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  ConvertSPI_Response - filter the SPI response and convert it to an SD Response
+  Input:  pReq - request
+  Output: pReq - modified response, if pRespBuffer is not NULL
+          pRespBuffer - converted response (optional)
+  Return: 
+  Notes:  This function converts a SPI response into an SD response.  A caller
+          can supply a buffer instead.
+          For SPI bus operation the HCD must send the SPI response as 
+          a stream of bytes, the highest byte contains the first received byte from the
+          card.  This function only filters simple responses (R1 primarily). 
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void ConvertSPI_Response(PSDREQUEST pReq, UINT8 *pRespBuffer)
+{
+
+    UINT32  cardStatus;
+    
+    if (pReq->Flags & SDREQ_FLAGS_RESP_SPI_CONVERTED) {
+            /* already converted */
+        return;    
+    }  
+    if (NULL == pRespBuffer) {
+        pRespBuffer = pReq->Response; 
+    }    
+       
+    switch (GET_SDREQ_RESP_TYPE(pReq->Flags)) {  
+        case SDREQ_FLAGS_RESP_R1:
+        case SDREQ_FLAGS_RESP_R1B:
+            cardStatus = ConvertSPIStatusToSDCardStatus(GET_SPI_R1_RESP_TOKEN(pReq->Response),
+                                                        0);            
+            if (CMD55 == pReq->Command) {
+                    /* we emulate this since SPI does not have such a bit */
+                cardStatus |= SD_CS_APP_CMD;     
+            }
+                /* stuff the SD card status */
+            SD_R1_SET_CMD_STATUS(pRespBuffer,cardStatus);
+                /* stuff the command */
+            SD_R1_SET_CMD(pRespBuffer,pReq->Command);  
+            pReq->Flags |= SDREQ_FLAGS_RESP_SPI_CONVERTED;                                            
+            break;
+        case SDREQ_FLAGS_RESP_SDIO_R5:
+            {
+                UINT8 respFlags;
+                UINT8 readData;
+                
+                readData = GET_SPI_SDIO_R5_RESPONSE_RDATA(pReq->Response);
+                respFlags = GET_SPI_SDIO_R5_RESP_TOKEN(pReq->Response);
+                
+                pRespBuffer[SD_R5_RESP_FLAGS_OFFSET] = 0;            
+                if (respFlags != 0) {
+                    if (respFlags & SPI_R5_ILLEGAL_CMD) {
+                        pRespBuffer[SD_R5_RESP_FLAGS_OFFSET] |= SD_R5_ILLEGAL_CMD;
+                    }
+                    if (respFlags & SPI_R5_CMD_CRC) {
+                        pRespBuffer[SD_R5_RESP_FLAGS_OFFSET] |= SD_R5_RESP_CMD_ERR;
+                    }
+                    if (respFlags & SPI_R5_FUNC_ERR) {
+                        pRespBuffer[SD_R5_RESP_FLAGS_OFFSET] |= SD_R5_INVALID_FUNC;
+                    }
+                    if (respFlags & SPI_R5_PARAM_ERR) {
+                        pRespBuffer[SD_R5_RESP_FLAGS_OFFSET] |= SD_R5_ARG_RANGE_ERR;
+                    }
+                }
+                    /* stuff read data */
+                pRespBuffer[SD_SDIO_R5_READ_DATA_OFFSET] = readData;
+                    /* stuff the command */
+                SD_R5_SET_CMD(pRespBuffer,pReq->Command);
+            } 
+            pReq->Flags |= SDREQ_FLAGS_RESP_SPI_CONVERTED; 
+            break;       
+        case SDREQ_FLAGS_RESP_R2:
+                /* for CMD13 and ACMD13 , SPI uses it's own R2 response format (2 bytes) */
+                /* the issue of CMD13 needs to change the response flag to R2 */            
+            if (CMD13 == pReq->Command) {    
+                cardStatus = ConvertSPIStatusToSDCardStatus(
+                                    GET_SPI_R2_RESP_TOKEN(pReq->Response),
+                                    GET_SPI_R2_STATUS_TOKEN(pReq->Response));    
+                    /* stuff the SD card status */
+                SD_R1_SET_CMD_STATUS(pRespBuffer,cardStatus);
+                    /* stuff the command */
+                SD_R1_SET_CMD(pRespBuffer,pReq->Command);
+                pReq->Flags |= SDREQ_FLAGS_RESP_SPI_CONVERTED; 
+                break; 
+            }
+                /* no other commands should be using R2 when using SPI, if they are
+                 * they should be bypassing the filter  */
+            DBG_ASSERT(FALSE);
+            break;        
+        default: 
+                /* for all others:
+                 * 
+                 * SDREQ_FLAGS_RESP_R6 - SPI mode does not use RCA  
+                 * SDREQ_FLAGS_RESP_R3 - bus driver handles this internally
+                 * SDREQ_FLAGS_RESP_SDIO_R4 - bus driver handles this internally
+                 *
+                 */   
+            DBG_PRINT(SDDBG_ERROR, ("ConvertSPI_Response - invalid response type:0x%2.2X",
+                                    GET_SDREQ_RESP_TYPE(pReq->Flags)));
+            DBG_ASSERT(FALSE);
+            break;
+    }   
+}
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Check an SD/MMC/SDIO response.
+
+  @function name: SDIO_CheckResponse  
+  @prototype: SDIO_STATUS SDIO_CheckResponse(PSDHCD pHcd, PSDREQUEST pReq, SDHCD_RESPONSE_CHECK_MODE CheckMode)
+  @category: HD_Reference
+  
+  @input:  pHcd - the host controller definition structure.
+  @input:  pReq - request containing the response
+  @input:  CheckMode - mode
+
+  @return: SDIO_STATUS 
+ 
+  @notes: Host controller drivers must call into this function to validate various command 
+          responses before continuing with data transfers or for decoding received SPI tokens.
+          The CheckMode option determines the type of validation to perform.  
+          if (CheckMode == SDHCD_CHECK_DATA_TRANS_OK) : 
+             The host controller must check the card response to determine whether it
+          is safe to perform a data transfer.  This API only checks commands that
+          involve data transfers and checks various status fields in the command response.
+          If the card cannot accept data, this function will return a non-successful status that 
+          should be treated as a request failure.  The host driver should complete the request with the
+          returned status. Host controller should only call this function in preparation for a
+          data transfer.    
+          if (CheckMode == SDHCD_CHECK_SPI_TOKEN) : 
+             This API checks the SPI token and returns a timeout status if the illegal command bit is
+          set.  This simulates the behavior of SD 1/4 bit operation where illegal commands result in 
+          a command timeout.  A driver that supports SPI mode should pass every response to this 
+          function to determine the appropriate error status to complete the request with.  If the 
+          API returns success, the response indicates that the card accepted the command. 
+ 
+  @example: Checking the response before starting the data transfer :
+        if (SDIO_SUCCESS(status) && (pReq->Flags & SDREQ_FLAGS_DATA_TRANS)) {
+                // check the response to see if we should continue with data
+            status = SDIO_CheckResponse(pHcd, pReq, SDHCD_CHECK_DATA_TRANS_OK);
+            if (SDIO_SUCCESS(status)) {
+                .... start data transfer phase 
+            } else {
+               ... card response indicates that the card cannot handle data
+                  // set completion status
+               pRequest->Status = status;               
+            }
+        }
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  _SDIO_CheckResponse - check response on behalf of the host controller
+  Input:  pHcd - host controller
+          pReq - request containing the response
+          CheckMode - mode
+  Output: 
+  Return: status
+  Notes: 
+  
+    CheckMode == SDHCD_CHECK_DATA_TRANS_OK : 
+    The host controller requests a check on the response to determine whether it
+    is okay to perform a data transfer.  This function only filters on commands that
+    involve data.  Host controller should only call this function in preparation for a
+    data transfer.
+    
+    CheckMode == SDHCD_CHECK_SPI_TOKEN : 
+    The bus driver checks the SPI token and returns a timeout status if the illegal command bit is
+    set.  This simulates the behavior of SD native operation. 
+    
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS _SDIO_CheckResponse(PSDHCD pHcd, PSDREQUEST pReq, SDHCD_RESPONSE_CHECK_MODE CheckMode)
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+     
+    if (CheckMode == SDHCD_CHECK_DATA_TRANS_OK) {
+        UINT32      cardStatus;
+        UINT8       *pResponse;
+        UINT8       convertedResponse[MAX_CARD_RESPONSE_BYTES];
+        
+        if (!(pReq->Flags & SDREQ_FLAGS_DATA_TRANS) ||
+             (pReq->Flags & SDREQ_FLAGS_DATA_SKIP_RESP_CHK) ||
+             (GET_SDREQ_RESP_TYPE(pReq->Flags) ==  SDREQ_FLAGS_NO_RESP)) {
+            return SDIO_STATUS_SUCCESS;    
+        } 
+        pResponse = pReq->Response;
+            /* check SPI mode */
+        if (IS_HCD_BUS_MODE_SPI(pHcd)) {
+            if (!(pReq->Flags & SDREQ_FLAGS_RESP_SKIP_SPI_FILT)) {
+                    /* apply conversion */
+                ConvertSPI_Response(pReq, NULL);     
+            } else {
+                    /* temporarily convert the response, without altering the original */
+                ConvertSPI_Response(pReq, convertedResponse); 
+                    /* point to the converted one */  
+                pResponse = convertedResponse;
+            } 
+        }
+        
+        switch (GET_SDREQ_RESP_TYPE(pReq->Flags)) {    
+            case SDREQ_FLAGS_RESP_R1:
+            case SDREQ_FLAGS_RESP_R1B:
+                cardStatus = SD_R1_GET_CARD_STATUS(pResponse);
+                if (!(cardStatus & 
+                     (SD_CS_ILLEGAL_CMD_ERR | SD_CS_CARD_INTERNAL_ERR | SD_CS_GENERAL_ERR))) {
+                        /* okay for data */
+                    break; 
+                }
+                    /* figure out what it was */
+                if (cardStatus & SD_CS_ILLEGAL_CMD_ERR) {       
+                    status = SDIO_STATUS_DATA_STATE_INVALID;
+                } else {
+                    status = SDIO_STATUS_DATA_ERROR_UNKNOWN;  
+                }
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Check Response Error. R1 CardStatus:0x%X \n",
+                                        cardStatus));
+                break;
+            case SDREQ_FLAGS_RESP_SDIO_R5:
+                cardStatus = SD_R5_GET_RESP_FLAGS(pResponse);
+                if (!(cardStatus & SD_R5_CURRENT_CMD_ERRORS)){
+                        /* all okay */
+                    break;   
+                }
+               
+                status = ConvertCMD52ResponseToSDIOStatus((UINT8)cardStatus);
+                DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: Check Response Error. R5 CardStatus:0x%X \n",
+                                        cardStatus));
+                break;
+            default:
+                break;
+        }
+        
+        return status;   
+    }
+    
+    {
+        UINT8       spiToken;
+         
+            /* handle SPI token validation */
+        switch (GET_SDREQ_RESP_TYPE(pReq->Flags)) {
+            case SDREQ_FLAGS_RESP_R2: 
+                spiToken = GET_SPI_R2_RESP_TOKEN(pReq->Response);
+                break;
+            case SDREQ_FLAGS_RESP_SDIO_R5: 
+                spiToken = GET_SPI_SDIO_R5_RESP_TOKEN(pReq->Response);
+                break;
+            case SDREQ_FLAGS_RESP_R3:
+                spiToken = GET_SPI_R3_RESP_TOKEN(pReq->Response);
+                break;
+            case SDREQ_FLAGS_RESP_SDIO_R4:
+                spiToken = GET_SPI_SDIO_R4_RESP_TOKEN(pReq->Response);
+                break;
+            default:
+                    /* all other tokesn are SPI R1 type */
+                spiToken = GET_SPI_R1_RESP_TOKEN(pReq->Response);    
+                break;    
+        } 
+        
+        if ((GET_SDREQ_RESP_TYPE(pReq->Flags) == SDREQ_FLAGS_RESP_SDIO_R5) ||
+            (GET_SDREQ_RESP_TYPE(pReq->Flags) == SDREQ_FLAGS_RESP_SDIO_R4)) {
+                /* handle SDIO status tokens */ 
+            if ((spiToken & SPI_R5_ILLEGAL_CMD) ||
+                (spiToken & SPI_R5_CMD_CRC)) {
+                status = SDIO_STATUS_BUS_RESP_TIMEOUT; 
+            }    
+        } else {
+                /* handle all other status tokens */ 
+            if ((spiToken & SPI_CS_ILLEGAL_CMD) ||
+                (spiToken & SPI_CS_CMD_CRC_ERR)) {
+                status = SDIO_STATUS_BUS_RESP_TIMEOUT; 
+            }
+       }
+    }
+            
+    return status;  
+}
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_busdriver.ko
===================================================================
(Binary files differ)


Property changes on: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_busdriver.ko
___________________________________________________________________
Name: svn:mime-type
   + application/octet-stream

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_busdriver.mod.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_busdriver.mod.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_busdriver.mod.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,66 @@
+#include <linux/module.h>
+#include <linux/vermagic.h>
+#include <linux/compiler.h>
+
+MODULE_INFO(vermagic, VERMAGIC_STRING);
+
+struct module __this_module
+__attribute__((section(".gnu.linkonce.this_module"))) = {
+ .name = KBUILD_MODNAME,
+ .init = init_module,
+#ifdef CONFIG_MODULE_UNLOAD
+ .exit = cleanup_module,
+#endif
+};
+
+static const struct modversion_info ____versions[]
+__attribute_used__
+__attribute__((section("__versions"))) = {
+	{ 0x532018d2, "struct_module" },
+	{ 0xa3c0f648, "SDLIB_PrintBuffer" },
+	{ 0xfd7b24ba, "__mod_timer" },
+	{ 0x89b301d4, "param_get_int" },
+	{ 0xd467c828, "del_timer" },
+	{ 0xf837928e, "malloc_sizes" },
+	{ 0x7486345b, "SDLIB_GetMessage" },
+	{ 0x425e773f, "SDLIB_PostMessage" },
+	{ 0x38b0c38f, "_spin_lock" },
+	{ 0xf32d2678, "schedule_work" },
+	{ 0x589b2cf9, "SDLIB_IssueConfig" },
+	{ 0x98bd6f46, "param_set_int" },
+	{ 0x66c8bcd7, "_spin_lock_irqsave" },
+	{ 0x7d11c268, "jiffies" },
+	{ 0xd533bec7, "__might_sleep" },
+	{ 0xf4cf19e6, "pnp_unregister_driver" },
+	{ 0x11067792, "__spin_lock_init" },
+	{ 0xda4008e6, "cond_resched" },
+	{ 0x1b7d4074, "printk" },
+	{ 0x2346dab4, "SDLIB_FindTuple" },
+	{ 0x625acc81, "__down_failed_interruptible" },
+	{ 0x9783f63f, "SDLIB_DeleteMessageQueue" },
+	{ 0x8baed6ae, "_spin_unlock_irqrestore" },
+	{ 0x13d8ce, "SDLIB_OSDeleteHelper" },
+	{ 0x3e848ff6, "pnp_register_driver" },
+	{ 0x90651ced, "_spin_unlock" },
+	{ 0x9bed34a0, "module_put" },
+	{ 0x978086d9, "SDLIB_OSCreateHelper" },
+	{ 0x29caedd7, "kmem_cache_alloc" },
+	{ 0x17d59d01, "schedule_timeout" },
+	{ 0xca7800ab, "SDLIB_CreateMessageQueue" },
+	{ 0x9bde6acc, "init_waitqueue_head" },
+	{ 0x768de002, "init_timer" },
+	{ 0x5401aa1d, "pnp_init_resource_table" },
+	{ 0x37a0cba, "kfree" },
+	{ 0x60a4461c, "__up_wakeup" },
+	{ 0x25da070, "snprintf" },
+	{ 0x96b27088, "__down_failed" },
+	{ 0x586047e3, "SDLIB_IssueCMD52" },
+};
+
+static const char __module_depends[]
+__attribute_used__
+__attribute__((section(".modinfo"))) =
+"depends=sdio_lib";
+
+
+MODULE_INFO(srcversion, "187072040D962892D6320C7");

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_function.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_function.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/busdriver/sdio_function.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,715 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_function.c
+
+ at abstract: OS independent bus driver support for function drivers
+
+ at notes: This file supports the interface between SDIO function drivers and the bus driver.
+ 
+ at notice: Copyright (c), 2004-2005 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define MODULE_NAME  SDBUSDRIVER
+#include "../include/ctsystem.h"
+#include "../include/sdio_busdriver.h"
+#include "../include/sdio_lib.h"
+#include "_busdriver.h"
+
+static SDIO_STATUS ProbeForDevice(PSDFUNCTION pFunction);
+
+#ifdef CT_MAN_CODE_CHECK
+static UINT16 ManCodeCheck = CT_MAN_CODE_CHECK;
+#endif
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Register a function driver with the bus driver.
+
+  @function name: SDIO_RegisterFunction
+  @prototype: SDIO_STATUS SDIO_RegisterFunction(PSDFUNCTION pFunction) 
+  @category: PD_Reference
+  @input:  pFunction - the function definition structure.
+ 
+  @output: none
+
+  @return: SDIO_STATUS - SDIO_STATUS_SUCCESS when succesful.
+ 
+  @notes: Each function driver must register with the bus driver once upon loading.
+          The calling function must be prepared to receive a Probe callback before
+          this function returns. This will occur when an perpheral device is already
+          pluugged in that is supported by this function.
+          The function driver should unregister itself when exiting.
+          The bus driver checks for possible function drivers to support a device
+          in reverse registration order.
+ 
+  @example: Registering a function driver:
+            //list of devices supported by this function driver
+       static SD_PNP_INFO Ids[] = {
+            {.SDIO_ManufacturerID = 0xaa55,  
+             .SDIO_ManufacturerCode = 0x5555, 
+             .SDIO_FunctionNo = 1},
+            {}                      //list is null termintaed
+        };
+        static GENERIC_FUNCTION_CONTEXT FunctionContext = {
+            .Function.pName    = "sdio_generic", //name of the device
+            .Function.Version  = CT_SDIO_STACK_VERSION_CODE, // set stack version
+            .Function.MaxDevices = 1,    //maximum number of devices supported by this driver
+            .Function.NumDevices = 0,    //current number of devices, always zero to start
+            .Function.pIds     = Ids,    //the list of devices supported by this device
+            .Function.pProbe   = Probe,  //pointer to the function drivers Probe function
+                                         //  that will be called when a possibly supported device
+                                         //  is inserted.
+            .Function.pRemove  = Remove, //pointer to the function drivers Remove function
+                                         /  that will be called when a device is removed.
+            .Function.pContext = &FunctionContext, //data value that will be passed into Probe and
+                                         //  Remove callbacks. 
+        }; 
+        SDIO_STATUS status;
+        status = SDIO_RegisterFunction(&FunctionContext.Function)
+        if (!SDIO_SUCCESS(status)) {
+            ...failed to register
+        }
+        
+  @see also: SDIO_UnregisterFunction
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS _SDIO_RegisterFunction(PSDFUNCTION pFunction) 
+{
+	SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    
+#ifdef CT_MAN_CODE_CHECK
+    DBG_PRINT(SDDBG_TRACE,
+        ("SDIO Bus Driver: _SDIO_RegisterFunction: WARNING, this version is locked to Memory cards and SDIO cards with JEDEC IDs of: 0x%X\n",
+            ManCodeCheck));
+#else    
+    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: _SDIO_RegisterFunction\n"));
+#endif 
+
+	DBG_PRINT(SDDBG_TRACE, ("+SDIO Bus Driver: Function Driver Stack Version: %d.%d \n",
+        GET_SDIO_STACK_VERSION_MAJOR(pFunction),GET_SDIO_STACK_VERSION_MINOR(pFunction)));
+        
+    if (!CHECK_FUNCTION_DRIVER_VERSION(pFunction)) {
+        DBG_PRINT(SDDBG_ERROR, 
+           ("SDIO Bus Driver: Function Major Version Mismatch (hcd = %d, bus driver = %d)\n",
+           GET_SDIO_STACK_VERSION_MAJOR(pFunction), CT_SDIO_STACK_VERSION_MAJOR(g_Version)));
+        return SDIO_STATUS_INVALID_PARAMETER;       
+    }
+   
+
+	/* sanity check the driver */
+	if ((pFunction == NULL) ||
+		(pFunction->pProbe == NULL) ||
+		(pFunction->pIds == NULL)) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: _SDIO_RegisterFunction, invalid registration data\n"));
+	    return SDIO_STATUS_INVALID_PARAMETER;
+	}
+    /* protect the function list and add the function */
+    if (!SDIO_SUCCESS((status = SemaphorePendInterruptable(&pBusContext->FunctionListSem)))) {
+      goto cleanup;   /* wait interrupted */
+    }
+    SignalInitialize(&pFunction->CleanupReqSig);
+    SDLIST_INIT(&pFunction->DeviceList);
+    SDListAdd(&pBusContext->FunctionList, &pFunction->SDList);
+    if (!SDIO_SUCCESS((status = SemaphorePost(&pBusContext->FunctionListSem)))) {
+      goto cleanup;   /* wait interrupted */
+    }
+	
+	/* see if we have devices for this new function driver */
+	ProbeForDevice(pFunction);
+	
+	return status;
+cleanup:
+    DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: _SDIO_RegisterFunction, error exit 0x%X\n", status));
+    return status;
+}
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Unregister a function driver with the bus driver.
+
+  @function name: SDIO_UnregisterFunction
+  @prototype: SDIO_STATUS SDIO_UnregisterFunction(PSDFUNCTION pFunction) 
+  @category: PD_Reference
+  
+  @input:  pFunction - the function definition structure.
+ 
+  @output: none
+
+  @return: SDIO_STATUS - SDIO_STATUS_SUCCESS when succesful.
+ 
+  @notes: Each function driver must unregister from the bus driver when the function driver
+          exits.
+          A function driver must disconnect from any interrupts before calling this function.
+ 
+  @example: Unregistering a function driver:
+        SDIO_UnregisterFunction(&FunctionContext.Function);
+        
+  @see also: SDIO_RegisterFunction
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS _SDIO_UnregisterFunction(PSDFUNCTION pFunction) 
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    PSDDEVICE pDevice;
+    
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO Bus Driver: _SDIO_UnregisterFunction\n"));
+
+    /* protect the function list and synchronize with Probe() and Remove()*/
+    if (!SDIO_SUCCESS((status = SemaphorePendInterruptable(&pBusContext->FunctionListSem)))) {
+        goto cleanup;   /* wait interrupted */
+    }
+        /* remove this function from the function list */
+    SDListRemove(&pFunction->SDList);
+        /* now remove this function as the handler for any of its devices */
+    SDITERATE_OVER_LIST_ALLOW_REMOVE(&pFunction->DeviceList, pDevice, SDDEVICE,FuncListLink)  {
+        if (pDevice->pFunction == pFunction) {
+                /* notify removal */
+            NotifyDeviceRemove(pDevice); 
+        }
+    }SDITERATE_END;
+    
+    SignalDelete(&pFunction->CleanupReqSig); 
+
+    if (!SDIO_SUCCESS((status = SemaphorePost(&pBusContext->FunctionListSem)))) {
+        goto cleanup;   /* wait interrupted */
+    }
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO Bus Driver: _SDIO_UnregisterFunction\n"));
+	return status;
+	
+cleanup:
+    DBG_PRINT(SDDBG_ERROR, ("-SDIO Bus Driver: _SDIO_UnregisterFunction, error exit 0x%X\n", status));
+    return status;
+}
+
+/* documentation headers only for Probe and Remove */
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: This function is called by the Busdriver when a device is inserted that can be supported by this function driver.
+  
+  @function name: Probe
+  @prototype: BOOL (*pProbe)(struct _SDFUNCTION *pFunction, struct _SDDEVICE *pDevice)
+  @category: PD_Reference
+  
+  @input:  pFunction - the function definition structure that was passed to Busdriver
+                       via the SDIO_RegisterFunction.
+  @input:  pDevice   - the description of the newly inserted device.            
+ 
+  @output: none
+
+  @return: TRUE  - this function driver will suport this device
+           FALSE - this function driver will not support this device
+ 
+  @notes: The Busdriver calls the Probe function of a function driver to inform it that device is
+          available for the function driver to control. The function driver should initialize the 
+          device and be pepared to acceopt any interrupts from the device before returning.
+  
+  @example: Example of typical Probe function callback:
+  static BOOL Probe(PSDFUNCTION pFunction, PSDDEVICE pDevice) { 
+       ...get the our context info passed into the SDIO_RegisterFunction
+    PSDXXX_DRIVER_CONTEXT pFunctionContext = 
+                                (PSDXXX_DRIVER_CONTEXT)pFunction->pContext;
+    SDIO_STATUS status;
+       //test the identification of this device and ensure we want to support it
+       // we can test based on class, or use more specific tests on SDIO_ManufacturerID, etc.
+    if (pDevice->pId[0].SDIO_FunctionClass == XXX) {
+        DBG_PRINT(SDDBG_TRACE, ("SDIO XXX Function: Probe - card matched (0x%X/0x%X/0x%X)\n",
+                                pDevice->pId[0].SDIO_ManufacturerID,
+                                pDevice->pId[0].SDIO_ManufacturerCode,
+                                pDevice->pId[0].SDIO_FunctionNo));
+        ...
+        
+  @see also: SDIO_RegisterFunction
+  @see also: Remove
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+
+BOOL FilterPnpInfo(PSDDEVICE pDevice) 
+{
+#ifdef CT_MAN_CODE_CHECK
+    if (pDevice->pId[0].CardFlags & CARD_SDIO) {
+        if (pDevice->pId[0].SDIO_ManufacturerCode != ManCodeCheck) {
+            DBG_PRINT(SDDBG_ERROR, 
+             ("SDIO Card with JEDEC ID:0x%X , not Allowed! Driver check halted. "
+              "Please Contact sales at codetelligence.com.\n",
+                    pDevice->pId[0].SDIO_ManufacturerCode));
+            return FALSE;
+        } 
+    }
+    return TRUE;
+#else 
+    return TRUE;
+#endif
+}
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: This function is called by the Busdriver when a device controlled by this function
+             function driver is removed.
+  
+  @function name: Remove
+  @prototype: void (*pRemove)(struct _SDFUNCTION *pFunction, struct _SDDEVICE *pDevice)
+  @category: PD_Reference
+  
+  @input:  pFunction - the function definition structure that was passed to Busdriver
+                       via the SDIO_RegisterFunction.
+  @input:  pDevice   - the description of the device being removed.
+ 
+  @output: none
+
+  @return: none
+ 
+  @notes: The Busdriver calls the Remove function of a function driver to inform it that device it
+          was supporting has been removed. The device has already been removed, so no further I/O
+          to the device can be performed.
+  
+  @example: Example of typical Remove function callback:
+    void Remove(PSDFUNCTION pFunction, PSDDEVICE pDevice) {
+            // get the our context info passed into the SDIO_RegisterFunction
+        PSDXXX_DRIVER_CONTEXT pFunctionContext = 
+                             (PSDXXX_DRIVER_CONTEXT)pFunction->pContext;
+           ...free any acquired resources.
+                
+  @see also: SDIO_RegisterFunction
+  @see also: Probe
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+
+/* 
+ * ProbeForFunction - look for a function driver to handle this card
+ * 
+*/
+SDIO_STATUS ProbeForFunction(PSDDEVICE pDevice, PSDHCD pHcd) {
+    SDIO_STATUS status;
+    PSDLIST pList;
+    PSDFUNCTION pFunction;
+	
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO Bus Driver: ProbeForFunction\n"));
+    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: ProbeForFunction - Dump of Device PNP Data: \n"));
+    DBG_PRINT(SDDBG_TRACE, (" Card Flags 0x%X \n", pDevice->pId[0].CardFlags));
+    if (pDevice->pId[0].CardFlags & CARD_SDIO) {
+        DBG_PRINT(SDDBG_TRACE, (" SDIO MANF:      0x%X \n", pDevice->pId[0].SDIO_ManufacturerID));
+        DBG_PRINT(SDDBG_TRACE, (" SDIO MANFCODE:  0x%X \n", pDevice->pId[0].SDIO_ManufacturerCode));
+        DBG_PRINT(SDDBG_TRACE, (" SDIO FuncNo:    %d \n", pDevice->pId[0].SDIO_FunctionNo));
+        DBG_PRINT(SDDBG_TRACE, (" SDIO FuncClass: %d \n", pDevice->pId[0].SDIO_FunctionClass));
+    }    
+    if (pDevice->pId[0].CardFlags & (CARD_MMC | CARD_SD)) {
+        DBG_PRINT(SDDBG_TRACE, (" SDMMC MANFID: 0x%X \n",pDevice->pId[0].SDMMC_ManfacturerID));
+        DBG_PRINT(SDDBG_TRACE, (" SDMMC OEMID:  0x%X \n",pDevice->pId[0].SDMMC_OEMApplicationID));
+    }
+    
+    if (!FilterPnpInfo(pDevice)) {
+        status = SDIO_STATUS_SUCCESS;
+        goto cleanup;  
+    }
+    
+    /* protect the function list */
+    if (!SDIO_SUCCESS((status = SemaphorePendInterruptable(&pBusContext->FunctionListSem)))) {
+        goto cleanup;   /* wait interrupted */
+    }
+   
+    /* protect against ProbeForDevice */
+    if (!SDIO_SUCCESS((status = SemaphorePendInterruptable(&pBusContext->DeviceListSem)))) {
+            /* release the function list semaphore we just took */
+        SemaphorePost(&pBusContext->FunctionListSem);
+        goto cleanup;
+    }
+    
+    if (pDevice->pFunction != NULL) {
+            /* device already has a function driver handling it */
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: ProbeForFunction, device already has function\n"));
+            /* release function list */
+        SemaphorePost(&pBusContext->DeviceListSem);    
+            /* release function list */
+        SemaphorePost(&pBusContext->FunctionListSem);
+            /* just return success */
+        status = SDIO_STATUS_SUCCESS;
+        goto cleanup;
+    } 
+    
+        /* release device list */
+    SemaphorePost(&pBusContext->DeviceListSem); 
+         
+    /* walk functions looking for one that can handle this device */
+    SDITERATE_OVER_LIST(&pBusContext->FunctionList, pList) {
+        pFunction = CONTAINING_STRUCT(pList, SDFUNCTION, SDList);
+        if (pFunction->NumDevices >=  pFunction->MaxDevices) {
+            /* function can't support any more devices */
+            continue;
+        }
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: ProbeForFunction - checking: %s \n",
+                                pFunction->pName));
+            
+        /* see if this function handles this device */
+        if (IsPotentialIdMatch(pDevice->pId, pFunction->pIds)) {
+            if (!FilterPnpInfo(pDevice)) {
+                break;  
+            } 
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: ProbeForFunction -Got Match, probing: %s \n",
+                                    pFunction->pName));                                 
+            /* we need to setup with the OS bus driver before the probe, so probe can
+              do OS operations. */
+            OS_InitializeDevice(pDevice, pFunction);  
+            if (!SDIO_SUCCESS(OS_AddDevice(pDevice, pFunction))) {
+                break;  
+            }  
+            /* close enough match, ask the function driver if it supports us */
+            if (pFunction->pProbe(pFunction, pDevice)) {
+                /* she accepted the device, add to list */
+                pDevice->pFunction = pFunction;
+                SDListAdd(&pFunction->DeviceList, &pDevice->FuncListLink);
+                pFunction->NumDevices++;
+                break;
+            } else {
+                DBG_PRINT(SDDBG_WARN, ("SDIO Bus Driver: %s did not claim the device \n",
+                  pFunction->pName));
+                /* didn't take this device */
+                OS_RemoveDevice(pDevice);
+            }
+            
+        }
+    }
+    if (!SDIO_SUCCESS((status = SemaphorePost(&pBusContext->FunctionListSem)))) {
+        goto cleanup;   /* wait interrupted */
+    }
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO Bus Driver: ProbeForFunction\n"));
+	return status; 	
+cleanup:
+    DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: ProbeForFunction, error exit 0x%X\n", status));
+    return status;
+}
+
+/* 
+ * ProbeForDevice - look for a device that this function driver supports
+ * 
+*/
+static SDIO_STATUS ProbeForDevice(PSDFUNCTION pFunction) {
+    SDIO_STATUS status;
+    PSDLIST pList;
+    PSDDEVICE pDevice;
+	
+    DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: ProbeForDevice\n"));
+    if (pFunction->NumDevices >=  pFunction->MaxDevices) {
+        /* function can't support any more devices */
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: ProbeForDevice, too many devices in function\n"));
+        return SDIO_STATUS_SUCCESS;
+    }
+  
+     /* protect the driver list */
+    if (!SDIO_SUCCESS((status = SemaphorePendInterruptable(&pBusContext->DeviceListSem)))) {
+      goto cleanup;   /* wait interrupted */
+    }
+    /* walk device list */
+    SDITERATE_OVER_LIST(&pBusContext->DeviceList, pList) {
+        pDevice = CONTAINING_STRUCT(pList, SDDEVICE, SDList);
+        if (pDevice->pFunction != NULL) {
+            /* device already has a function driver handling it */
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: ProbeForDevice, device already has function\n"));
+            continue;
+        }
+        /* see if this function handles this device */
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: ProbeForDevice, matching ID:%d %d class:%d\n",
+                                pDevice->pId[0].SDIO_ManufacturerID,
+                                pDevice->pId[0].SDIO_FunctionNo,
+                                pDevice->pId[0].SDIO_FunctionClass));
+        if (IsPotentialIdMatch(pDevice->pId, pFunction->pIds)) {
+            if (!FilterPnpInfo(pDevice)) {
+                break;  
+            }
+            /* we need to setup with the OS bus driver before the probe, so probe can
+              do OS operations. */
+            OS_InitializeDevice(pDevice, pFunction);  
+            if (!SDIO_SUCCESS(OS_AddDevice(pDevice, pFunction))) {
+                break;  
+            }  
+            /* close enough match, ask the function driver if it supports us */
+            if (pFunction->pProbe(pFunction, pDevice)) {
+                /* she accepted the device, add to list */
+                pDevice->pFunction = pFunction;
+                SDListAdd(&pFunction->DeviceList, &pDevice->FuncListLink);
+                pFunction->NumDevices++;
+                break;
+            } else {
+                DBG_PRINT(SDDBG_WARN, ("SDIO Bus Driver: %s did not claim the device \n",
+                  pFunction->pName));
+                /* didn't take this device */
+                OS_RemoveDevice(pDevice);
+            }
+        }
+    }
+    if (!SDIO_SUCCESS((status = SemaphorePost(&pBusContext->DeviceListSem)))) {
+      goto cleanup;   /* wait interrupted */
+    }
+
+	return status;
+cleanup:
+    DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: ProbeForDevice, error exit 0x%X\n", status));
+    return status;
+}
+
+#if 0
+static void DumpPnpEntry(PSD_PNP_INFO pInfo)
+{
+    DBG_PRINT(SDDBG_TRACE, ("Function PnpInfo Dump: \n"));
+    DBG_PRINT(SDDBG_TRACE, (" Card Flags      0x%X \n", pInfo->CardFlags));
+    DBG_PRINT(SDDBG_TRACE, (" SDIO MANF:      0x%X \n", pInfo->SDIO_ManufacturerID));
+    DBG_PRINT(SDDBG_TRACE, (" SDIO MANFCODE:  0x%X \n", pInfo->SDIO_ManufacturerCode));
+    DBG_PRINT(SDDBG_TRACE, (" SDIO FuncNo:    %d \n", pInfo->SDIO_FunctionNo));
+    DBG_PRINT(SDDBG_TRACE, (" SDIO FuncClass: %d \n", pInfo->SDIO_FunctionClass));
+    DBG_PRINT(SDDBG_TRACE, (" SDMMC MANFID:   0x%X \n", pInfo->SDMMC_ManfacturerID));
+    DBG_PRINT(SDDBG_TRACE, (" SDMMC OEMID:    0x%X \n", pInfo->SDMMC_OEMApplicationID));
+}  
+#endif      
+/* 
+ * IsPotentialIdMatch - test for potential device match
+ * 
+*/
+BOOL IsPotentialIdMatch(PSD_PNP_INFO pIdsDev, PSD_PNP_INFO pIdsFuncList) {
+    PSD_PNP_INFO pTFn;
+	BOOL match = FALSE; 
+    
+	for (pTFn = pIdsFuncList;!IS_LAST_SDPNPINFO_ENTRY(pTFn);pTFn++) {
+        //DumpPnpEntry(pTFn);	
+            /* check specific SDIO Card manufacturer ID, Code and Function number */
+		if ((pIdsDev->SDIO_ManufacturerID != 0) &&
+		    (pTFn->SDIO_ManufacturerID != 0) && 
+		    (pIdsDev->SDIO_ManufacturerID == pTFn->SDIO_ManufacturerID) &&
+		    (pIdsDev->SDIO_ManufacturerCode == pTFn->SDIO_ManufacturerCode) &&
+            ((pIdsDev->SDIO_FunctionNo == pTFn->SDIO_FunctionNo) || 
+             (pTFn->SDIO_FunctionNo == 0)) ) {
+		    match = TRUE;
+            break;
+		}        
+            /* check generic function class */
+        if ((pIdsDev->SDIO_FunctionClass != 0) &&
+            (pTFn->SDIO_FunctionClass != 0) && 
+            (pIdsDev->SDIO_FunctionClass == pTFn->SDIO_FunctionClass)) {
+            match = TRUE;
+            break;	
+        }        
+            /* check specific SDMMC MANFID and APPLICATION ID, NOTE SANDISK
+             * uses a MANFID of zero! */
+        if ((pTFn->SDMMC_OEMApplicationID != 0) && 
+            (pIdsDev->SDMMC_ManfacturerID == pTFn->SDMMC_ManfacturerID) &&
+            (pIdsDev->SDMMC_OEMApplicationID == pTFn->SDMMC_OEMApplicationID)) {
+            match = TRUE;
+            break;
+        }
+        
+            /* check generic SD Card */
+        if ((pIdsDev->CardFlags & CARD_SD) &&
+            (pTFn->CardFlags & CARD_SD)){
+            match = TRUE;
+            break;   
+        }
+        
+            /* check generic MMC Card */
+        if ((pIdsDev->CardFlags & CARD_MMC) &&
+            (pTFn->CardFlags & CARD_MMC)){
+            match = TRUE;
+            break;
+        }
+        
+             /* check raw Card */
+        if ((pIdsDev->CardFlags & CARD_RAW) &&
+            (pTFn->CardFlags & CARD_RAW)){
+            match = TRUE;
+            break;
+        }
+	}
+    
+    return match; 
+}
+
+/* 
+ * NotifyDeviceRemove - tell function driver on this device that the device is being removed
+ * 
+*/
+SDIO_STATUS NotifyDeviceRemove(PSDDEVICE pDevice) {
+    SDIO_STATUS     status; 
+    SDREQUESTQUEUE  cancelQueue;
+    PSDREQUEST      pReq;
+    CT_DECLARE_IRQ_SYNC_CONTEXT();
+    
+    InitializeRequestQueue(&cancelQueue);
+    
+	if ((pDevice->pFunction != NULL) && 
+        (pDevice->pFunction->pRemove != NULL)){
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: removing device 0x%X\n", (INT)pDevice));
+            /* fail any outstanding requests for this device */
+            /* acquire lock for request queue */
+        status = _AcquireHcdLock(pDevice->pHcd);
+        if (!SDIO_SUCCESS(status)) {
+            return status;  
+        }
+            /* mark the function to block any more requests comming down */
+        pDevice->pFunction->Flags |= SDFUNCTION_FLAG_REMOVING;
+            /* walk through HCD queue and remove this function's requests */
+        SDITERATE_OVER_LIST_ALLOW_REMOVE(&pDevice->pHcd->RequestQueue.Queue, pReq, SDREQUEST, SDList) {
+            if (pReq->pFunction == pDevice->pFunction) {
+                /* cancel this request, as this device or function is being removed */
+                /* note that these request are getting completed out of order */
+                DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver - NotifyDeviceRemove: canceling req 0x%X\n", (UINT)pReq));             
+                pReq->Status = SDIO_STATUS_CANCELED;
+                    /* remove it from the HCD queue */
+                SDListRemove(&pReq->SDList);
+                    /* add it to the cancel queue */
+                QueueRequest(&cancelQueue, pReq);
+            }
+        }SDITERATE_END;
+        
+        status = _ReleaseHcdLock(pDevice->pHcd);
+        
+           /* now empty the cancel queue if anything is in there */
+        while (TRUE) {
+            pReq = DequeueRequest(&cancelQueue);
+            if (NULL == pReq) {
+                break;    
+            }
+                /* complete the request */
+            DoRequestCompletion(pReq, pDevice->pHcd);
+        }
+            /* re-acquire the lock to deal with the current request */
+        status = _AcquireHcdLock(pDevice->pHcd);
+        if (!SDIO_SUCCESS(status)) {
+            return status;  
+        }        
+            /* now deal with the current request */
+        pReq = GET_CURRENT_REQUEST(pDevice->pHcd);
+        if ((pReq !=NULL) && (pReq->pFunction == pDevice->pFunction) && (pReq->pFunction != NULL)) {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver - NotifyDeviceRemove: Outstanding Req 0x%X on HCD: 0x%X.. waiting...\n", 
+                (UINT)pReq, (UINT)pDevice->pHcd));                         
+                /* the outstanding request on this device is for the function being removed */
+            pReq->Flags |= SDREQ_FLAGS_CANCELED; 
+                /* wait for this request to get completed normally */
+            status = _ReleaseHcdLock(pDevice->pHcd);
+            SignalWait(&pDevice->pFunction->CleanupReqSig);
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver - NotifyDeviceRemove: Outstanding HCD Req 0x%X completed \n", (UINT)pReq));                         
+        }  else { 
+                /* release lock */
+            status = _ReleaseHcdLock(pDevice->pHcd);
+        }
+        
+            /* synchronize with ISR SYNC Handlers */
+	 	status = SemaphorePendInterruptable(&pBusContext->DeviceListSem);           
+        if (!SDIO_SUCCESS(status)) {
+            return status;
+        }    
+            /* call this devices Remove function */
+        pDevice->pFunction->pRemove(pDevice->pFunction,pDevice);
+        pDevice->pFunction->NumDevices--;
+            /* make sure the sync handler is NULLed out */
+        pDevice->pIrqFunction = NULL;  
+        SemaphorePost(&pBusContext->DeviceListSem);
+        
+        OS_RemoveDevice(pDevice);
+            /* detach this device from the function list it belongs to */
+        SDListRemove(&pDevice->FuncListLink);
+        pDevice->pFunction->Flags &= ~SDFUNCTION_FLAG_REMOVING;
+		pDevice->pFunction = NULL;
+	}
+	return SDIO_STATUS_SUCCESS;
+}
+
+    
+/* 
+ * RemoveHcdFunctions - remove all functions attached to an HCD
+ * 
+*/
+SDIO_STATUS RemoveHcdFunctions(PSDHCD pHcd) {
+    SDIO_STATUS status;
+    PSDLIST pList;
+    PSDFUNCTION pFunction;
+    PSDDEVICE pDevice;
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO Bus Driver: RemoveHcdFunctions\n"));
+    
+    /* walk through the functions and remove the ones associated with this HCD */
+    /* protect the driver list */
+    if (!SDIO_SUCCESS((status = SemaphorePend(&pBusContext->FunctionListSem)))) {
+        goto cleanup;   /* wait interrupted */
+    }
+        /* mark that card is being removed */
+    pHcd->CardProperties.CardState |= CARD_STATE_REMOVED;
+    SDITERATE_OVER_LIST(&pBusContext->FunctionList, pList) {
+        pFunction = CONTAINING_STRUCT(pList, SDFUNCTION, SDList);
+        DBG_PRINT(SDDBG_TRACE, ("SDIO Bus Driver: scanning function 0x%X, %s\n", (INT)pFunction,
+                                (pFunction == NULL)?"NULL":pFunction->pName));
+        
+        /* walk the devices on this function and look for a match */
+        SDITERATE_OVER_LIST_ALLOW_REMOVE(&pFunction->DeviceList, pDevice, SDDEVICE,FuncListLink) {
+            if (pDevice->pHcd == pHcd) {
+                /* match, remove it */
+                NotifyDeviceRemove(pDevice);
+            }
+        SDITERATE_END;
+    SDITERATE_END;    
+    if (!SDIO_SUCCESS((status = SemaphorePost(&pBusContext->FunctionListSem)))) {
+        goto cleanup;   /* wait interrupted */
+    }
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO Bus Driver: RemoveHcdFunctions\n"));
+    return SDIO_STATUS_SUCCESS;
+    
+cleanup:
+    DBG_PRINT(SDDBG_ERROR, ("-SDIO Bus Driver: RemoveHcdFunctions, error exit 0x%X\n", status));
+    return status;   
+}
+
+/* 
+ * RemoveAllFunctions - remove all functions attached
+ * 
+*/
+SDIO_STATUS RemoveAllFunctions() 
+{
+    SDIO_STATUS status;
+    PSDLIST pList;
+    PSDHCD pHcd;
+    
+    /* walk through the HCDs  */
+    /* protect the driver list */
+    if (!SDIO_SUCCESS((status = SemaphorePend(&pBusContext->HcdListSem)))) {
+        goto cleanup;   /* wait interrupted */
+    }
+    SDITERATE_OVER_LIST(&pBusContext->HcdList, pList) {
+        pHcd = CONTAINING_STRUCT(pList, SDHCD, SDList);
+            /* remove the functions */
+        RemoveHcdFunctions(pHcd);
+    }    
+    if (!SDIO_SUCCESS((status = SemaphorePost(&pBusContext->HcdListSem)))) {
+        goto cleanup;   /* wait interrupted */
+    }
+    return SDIO_STATUS_SUCCESS;
+cleanup:
+    DBG_PRINT(SDDBG_ERROR, ("SDIO Bus Driver: RemoveAllFunctions, error exit 0x%X\n", status));
+    return status;   
+}
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/common.mk
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/common.mk	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/common.mk	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,73 @@
+# This is an automatically generated record.
+# The area between QNX Internal Start and QNX Internal End is controlled by
+# the QNX IDE properties.
+
+
+ifndef QCONFIG
+QCONFIG=qconfig.mk
+endif
+include $(QCONFIG)
+
+#===== USEFILE - the file containing the usage message for the application. 
+USEFILE=
+
+
+
+include $(MKFILES_ROOT)/qmacros.mk
+
+
+#===== CCFLAGS - add the flags to the C compiler command line. 
+CCFLAGS=-DQNX$(CCFLAGS_$(TYPE))#QNX internal start
+ifeq ($(filter g, $(VARIANT_LIST)),g)
+DEBUG_SUFFIX=_g
+LIB_SUFFIX=_g
+else
+DEBUG_SUFFIX=$(filter-out $(VARIANT_BUILD_TYPE) le be,$(VARIANT_LIST))
+ifeq ($(DEBUG_SUFFIX),)
+DEBUG_SUFFIX=_r
+else
+DEBUG_SUFFIX:=_$(DEBUG_SUFFIX)
+endif
+endif
+
+EXPRESSION = $(firstword $(foreach a, $(1)_$(CPUDIR)$(DEBUG_SUFFIX)  $(1)$(DEBUG_SUFFIX) \
+			$(1)_$(CPUDIR) $(1), $(if $($(a)),$(a),)))
+MERGE_EXPRESSION= $(foreach a, $(1)_$(CPUDIR)$(DEBUG_SUFFIX) $(1)$(DEBUG_SUFFIX) \
+			$(1)_$(CPUDIR) $(1), $($(a)))
+
+GCC_VERSION:=$($(firstword $(foreach a, GCC_VERSION_$(CPUDIR) GCC_VERSION, \
+			$(if $($(a)), $(a), ))))
+
+EXTRA_LIBVPATH := $(call MERGE_EXPRESSION, EXTRA_LIBVPATH)
+EXTRA_INCVPATH := $(call MERGE_EXPRESSION, EXTRA_INCVPATH)
+EXTRA_SRCVPATH := $(call MERGE_EXPRESSION, EXTRA_SRCVPATH)
+EXTRA_OBJS := $($(call EXPRESSION,EXTRA_OBJS))
+
+CCFLAGS_D = $(CCFLAGS$(DEBUG_SUFFIX)) $(CCFLAGS_$(CPUDIR)$(DEBUG_SUFFIX)) \
+			$(CCFLAGS_@$(basename $@)$(DEBUG_SUFFIX)) 					  \
+			$(CCFLAGS_$(CPUDIR)_@$(basename $@)$(DEBUG_SUFFIX))
+LDFLAGS_D = $(LDFLAGS$(DEBUG_SUFFIX)) $(LDFLAGS_$(CPUDIR)$(DEBUG_SUFFIX))
+
+CCFLAGS += $(CCFLAGS_$(CPUDIR))  $(CCFLAGS_@$(basename $@)) \
+		   $(CCFLAGS_$(CPUDIR)_@$(basename $@))  $(CCFLAGS_D)
+
+LDFLAGS += $(LDFLAGS_$(CPUDIR)) $(LDFLAGS_D)
+
+LIBS:=$(foreach token, $($(call EXPRESSION,LIBS)),$(if $(findstring ^, $(token)), $(subst ^,,$(token))$(LIB_SUFFIX), $(token)))
+libnames:= $(subst lib-Bdynamic.a, ,$(subst lib-Bstatic.a, , $(libnames)))
+libopts := $(subst -l-B,-B, $(libopts))
+
+
+
+
+BUILDNAME:=$($(call EXPRESSION,BUILDNAME))$(if $(suffix $(BUILDNAME)),,$(IMAGE_SUFF_$(BUILD_TYPE)))
+BUILDNAME_SAR:= $(patsubst %$(IMAGE_SUFF_$(BUILD_TYPE)),%S.a,$(BUILDNAME))
+
+POST_BUILD:=$($(call EXPRESSION,POST_BUILD))
+#QNX internal end
+include $(MKFILES_ROOT)/qtargets.mk
+
+
+OPTIMIZE_TYPE=$(OPTIMIZE_TYPE_$(filter g, $(VARIANTS)))
+OPTIMIZE_TYPE_g=none
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/Makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/Makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/Makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,30 @@
+
+# Copyright 2004-2006 Atheros Communications, Inc.
+
+ifeq ($(CT_OS_TYPE),linux)
+
+ifneq ($(CT_OS_SUB_TYPE),linux_2_4)
+# For Linux 2.6 and higher
+obj-m += $(CT_HC_DRIVERS) 
+endif
+
+ifeq ($(CT_OS_SUB_TYPE),linux_2_4)
+# reset CFLAGs, for some reason on 2.4.20, the EXTRA_FLAGS is not propogated from our top-level makefile
+EXTRA_CFLAGS += $(CT_PASS_CFLAGS)
+subdir-m += $(CT_HC_DRIVERS)  
+include $(CT_OS_TOP_LEVEL_RULE)
+endif
+
+endif  
+
+ifeq ($(CT_OS_TYPE),qnx)
+##QNX
+LIST=VARIANT
+ifndef QRECURSE
+QRECURSE=recurse.mk
+ifdef QCONFIG
+QRDIR=$(dir $(QCONFIG))
+endif
+endif
+include $(QRDIR)$(QRECURSE)
+endif

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/Makefile.dnm
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/Makefile.dnm	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/Makefile.dnm	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,2 @@
+#obj-m += pxa255/
+obj-m += pci_ellen/
\ No newline at end of file

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/Makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/Makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/Makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,19 @@
+ifeq ($(CT_OS_TYPE),linux)
+obj-m += sdio_pciellen_hcd.o
+
+sdio_pciellen_hcd-objs := sdio_hcd.o linux/sdio_hcd_os.o
+endif
+
+
+ifeq ($(CT_OS_TYPE),qnx)
+##QNX
+LIST=VARIANT
+ifndef QRECURSE
+QRECURSE=recurse.mk
+ifdef QCONFIG
+QRDIR=$(dir $(QCONFIG))
+endif
+endif
+include $(QRDIR)$(QRECURSE)
+endif
+  
\ No newline at end of file

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/linux/sdio_hcd_linux.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/linux/sdio_hcd_linux.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/linux/sdio_hcd_linux.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,195 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_hcd_linux.h
+
+ at abstract: include file for Tokyo Electron PCI Ellen host controller, linux dependent code
+ 
+ at notice: Copyright (c), 2004-2005 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifndef __SDIO_HCD_LINUX_H___
+#define __SDIO_HCD_LINUX_H___
+
+
+#include <linux/kernel.h>
+#include <linux/interrupt.h>
+#include <linux/list.h>
+#include <linux/errno.h>
+#include <linux/device.h>
+
+
+#include <asm/irq.h>
+
+
+#define SDHCD_MAX_DEVICE_NAME 12
+
+#define CARD_INSERT_POLARITY   FALSE
+#define WP_POLARITY            TRUE
+#define HCD_COMMAND_MIN_POLLING_CLOCK 5000000
+
+/* debounce delay for slot */
+#define SD_SLOT_DEBOUNCE_MS  500
+
+/* the config space slot number and start for SD host */
+#define PCI_CONFIG_SLOT   0x40
+#define GET_SLOT_COUNT(config)\
+    ((((config)>>4)& 0x7) +1)
+#define GET_SLOT_FIRST(config)\
+    ((config) & 0x7)
+
+/* device base name */
+#define SDIO_BD_BASE "sdiobd"
+
+/* mapped memory address */
+typedef struct _SDHCD_MEMORY {
+    ULONG Raw;      /* start of address range */
+    ULONG Length;   /* length of range */
+    PVOID pMapped;  /* the mapped address */
+}SDHCD_MEMORY, *PSDHCD_MEMORY;
+
+typedef enum _SDHCD_TYPE {
+    TYPE_CLASS,     /* standard class device */
+    TYPE_PCIELLEN,  /* Tokuo Electron PCI Ellen card */
+}SDHCD_TYPE, *PSDHCD_TYPE;
+
+/* device data*/
+typedef struct _SDHCD_DEVICE {
+    struct pci_dev *pBusDevice;    /* our device registered with bus driver */
+    SDLIST  List;                  /* linked list */
+    SDHCD   Hcd;                   /* HCD description for bus driver */
+    char    DeviceName[SDHCD_MAX_DEVICE_NAME]; /* our chr device name */
+    SDHCD_MEMORY Address;          /* memory address of this device */ 
+    spinlock_t AddressSpinlock;    /* use to protect reghisters when needed */
+    SDHCD_MEMORY ControlRegs;      /* memory address of shared control registers */ 
+    SDHCD_TYPE Type;               /* type of this device */
+    UINT8   InitStateMask;
+#define SDIO_BAR_MAPPED            0x01
+#define SDIO_LAST_CONTROL_BAR_MAPPED 0x02 /* set on device that will unmap the shared control registers */
+#define SDIO_IRQ_INTERRUPT_INIT    0x04
+#define SDHC_REGISTERED            0x10
+#define SDHC_HW_INIT               0x40
+#define TIMER_INIT                 0x80
+    spinlock_t   Lock;            /* lock against the ISR */
+    BOOL         CardInserted;    /* card inserted flag */
+    BOOL         Cancel;
+    BOOL         ShuttingDown;    /* indicates shut down of HCD) */
+    BOOL         HighSpeed;       /* device supports high speed, 25-50 Mhz */
+    UINT32       BaseClock;       /* base clock in hz */ 
+    UINT32       TimeOut;         /* timeout setting */ 
+    UINT32       ClockSpinLimit;  /* clock limit for command spin loops */
+    BOOL         KeepClockOn;
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+    struct work_struct iocomplete_work; /* work item definintions */
+    struct work_struct carddetect_work; /* work item definintions */
+    struct work_struct sdioirq_work; /* work item definintions */
+#else
+    struct delayed_work iocomplete_work; /* work item definintions */
+    struct delayed_work carddetect_work; /* work item definintions */
+    struct delayed_work sdioirq_work; /* work item definintions */
+#endif
+}SDHCD_DEVICE, *PSDHCD_DEVICE;
+
+
+#define WORK_ITEM_IO_COMPLETE  0
+#define WORK_ITEM_CARD_DETECT  1
+#define WORK_ITEM_SDIO_IRQ     2
+
+ 
+#define READ_HOST_REG32(pDevice, OFFSET)  \
+    _READ_DWORD_REG((((UINT32)((pDevice)->Address.pMapped))) + (OFFSET))
+#define WRITE_HOST_REG32(pDevice, OFFSET, VALUE) \
+    _WRITE_DWORD_REG((((UINT32)((pDevice)->Address.pMapped))) + (OFFSET),(VALUE))
+#define READ_HOST_REG16(pDevice, OFFSET)  \
+    _READ_WORD_REG((((UINT32)((pDevice)->Address.pMapped))) + (OFFSET))
+#define WRITE_HOST_REG16(pDevice, OFFSET, VALUE) \
+    _WRITE_WORD_REG((((UINT32)((pDevice)->Address.pMapped))) + (OFFSET),(VALUE))
+#define READ_HOST_REG8(pDevice, OFFSET)  \
+    _READ_BYTE_REG((((UINT32)((pDevice)->Address.pMapped))) + (OFFSET))
+#define WRITE_HOST_REG8(pDevice, OFFSET, VALUE) \
+    _WRITE_BYTE_REG((((UINT32)((pDevice)->Address.pMapped))) + (OFFSET),(VALUE))
+
+#define READ_CONTROL_REG32(pDevice, OFFSET)  \
+    _READ_DWORD_REG((((UINT32)((pDevice)->ControlRegs.pMapped))) + (OFFSET))
+#define WRITE_CONTROL_REG32(pDevice, OFFSET, VALUE) \
+    _WRITE_DWORD_REG((((UINT32)((pDevice)->ControlRegs.pMapped))) + (OFFSET),(VALUE))
+#define READ_CONTROL_REG16(pDevice, OFFSET)  \
+    _READ_WORD_REG((((UINT32)((pDevice)->ControlRegs.pMapped))) + (OFFSET))
+#define WRITE_CONTROL_REG16(pDevice, OFFSET, VALUE) \
+    _WRITE_WORD_REG((((UINT32)((pDevice)->ControlRegs.pMapped))) + (OFFSET),(VALUE))
+
+/* PLX 9030 control registers */
+#define INTCSR 0x4C
+#define INTCSR_LINTi1ENABLE         (1 << 0)
+#define INTCSR_LINTi1STATUS         (1 << 2)
+#define INTCSR_LINTi2ENABLE         (1 << 3)
+#define INTCSR_LINTi2STATUS         (1 << 5)
+#define INTCSR_PCIINTENABLE         (1 << 6)
+
+#define GPIOCTRL 0x54
+#define GPIO8_PIN_DIRECTION     (1 << 25)
+#define GPIO8_DATA_MASK         (1 << 26)
+#define GPIO3_PIN_SELECT        (1 << 9)
+#define GPIO3_PIN_DIRECTION     (1 << 10)
+#define GPIO3_DATA_MASK         (1 << 11)
+#define GPIO2_PIN_SELECT        (1 << 6)
+#define GPIO2_PIN_DIRECTION     (1 << 7)
+#define GPIO2_DATA_MASK         (1 << 8)
+#define GPIO4_PIN_SELECT        (1 << 12)
+#define GPIO4_PIN_DIRECTION     (1 << 13)
+#define GPIO4_DATA_MASK         (1 << 14)
+
+#define GPIO_CONTROL(pDevice, on,  GpioMask)   \
+{                                   \
+     UINT32 temp;                    \
+     temp = READ_CONTROL_REG32((pDevice),GPIOCTRL);   \
+     if (on) temp |= (GpioMask); else temp &= ~(GpioMask);   \
+     WRITE_CONTROL_REG32((pDevice),GPIOCTRL, temp);   \
+}
+
+//??#define TRACE_SIGNAL_DATA_WRITE(pDevice, on) GPIO_CONTROL((pDevice),(on),GPIO8_DATA_MASK)
+//??#define TRACE_SIGNAL_DATA_READ(pDevice, on) GPIO_CONTROL((pDevice),(on),GPIO2_DATA_MASK)
+//??#define TRACE_SIGNAL_DATA_ISR(pDevice, on) GPIO_CONTROL((pDevice),(on),GPIO4_DATA_MASK)
+//??#define TRACE_SIGNAL_DATA_IOCOMP(pDevice, on) GPIO_CONTROL((pDevice),(on),GPIO3_DATA_MASK)
+#define TRACE_SIGNAL_DATA_WRITE(pDevice, on) 
+#define TRACE_SIGNAL_DATA_READ(pDevice, on) 
+#define TRACE_SIGNAL_DATA_ISR(pDevice, on) 
+#define TRACE_SIGNAL_DATA_IOCOMP(pDevice, on) 
+#define TRACE_SIGNAL_DATA_TIMEOUT(pDevice, on) GPIO_CONTROL((pDevice),(on),GPIO3_DATA_MASK)
+
+/* prototypes */
+#endif /* __SDIO_HCD_LINUX_H___ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/linux/sdio_hcd_os.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/linux/sdio_hcd_os.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/linux/sdio_hcd_os.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,851 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_hcd_os.c
+
+ at abstract: Linux Tokyo Electron PCI Ellen SDIO Host Controller Driver
+
+#notes: includes module load and unload functions
+ 
+ at notice: Copyright (c), 2004-2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+/* debug level for this module*/
+
+#define DBG_DECLARE 4;
+#include "../../../include/ctsystem.h"
+
+#include "../sdio_pciellen_hcd.h"
+#include <linux/fs.h>
+#include <linux/ioport.h>
+#include <asm/io.h>
+#include <asm/uaccess.h>
+#include <linux/workqueue.h>
+#include <linux/delay.h>
+#include <linux/pci.h>
+
+#define DESCRIPTION "SDIO Tokyo Electron PCI Ellen HCD"
+#define AUTHOR "Atheros Communications, Inc."
+
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,19)
+#define ATH_INIT_WORK(_t, _f, _c)	INIT_WORK((_t), (void (*)(void *))(_f), (_c));
+#else
+#define ATH_INIT_WORK(_t, _f, _c)	INIT_DELAYED_WORK((_t), (_f));
+#endif
+
+static SYSTEM_STATUS Probe(struct pci_dev *pPCIdevice, const struct pci_device_id *pId);
+static void Remove(struct pci_dev *pPCIdevice);
+static int MapAddress(struct pci_dev *pPCIdevice, char *pName, UINT8 bar, PSDHCD_MEMORY pAddress);
+static void UnmapAddress(PSDHCD_MEMORY pMap);
+static void RemoveDevice(struct pci_dev *pPCIdevice, PSDHCD_DRIVER_CONTEXT pHcdContext);
+static SDIO_STATUS InitEllen(PSDHCD_DEVICE pDeviceContext);
+static void GetDefaults(PSDHCD_DEVICE pDeviceContext);
+static irqreturn_t hcd_sdio_irq(int irq, void *context
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+, struct pt_regs * r
+#endif
+  );
+
+static void hcd_iocomplete_wqueue_handler(
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+void *context);
+#else
+struct work_struct *work);
+#endif
+
+static void hcd_carddetect_wqueue_handler(
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+void *context);
+#else
+struct work_struct *work);
+#endif
+
+
+static void hcd_sdioirq_wqueue_handler(
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+void *context);
+#else
+struct work_struct *work);
+#endif
+
+/* debug print parameter */
+module_param(debuglevel, int, 0644);
+MODULE_PARM_DESC(debuglevel, "debuglevel 0-7, controls debug prints");
+#define DEFAULT_ATTRIBUTES (SDHCD_ATTRIB_BUS_1BIT      | \
+                            SDHCD_ATTRIB_BUS_4BIT      | \
+                            SDHCD_ATTRIB_MULTI_BLK_IRQ | \
+                            SDHCD_ATTRIB_AUTO_CMD12    | \
+                            SDHCD_ATTRIB_POWER_SWITCH )
+                            
+static UINT32 hcdattributes = DEFAULT_ATTRIBUTES;
+module_param(hcdattributes, int, 0644);
+MODULE_PARM_DESC(hcdattributes, "PCIELLEN Attributes");
+static INT BaseClock = 0;
+module_param(BaseClock, int, 0444);
+MODULE_PARM_DESC(BaseClock, "BaseClock Hz when not present in configuration");
+static UINT32 timeout = HOST_REG_TIMEOUT_CONTROL_DEFAULT;
+module_param(timeout, int, 0644);
+MODULE_PARM_DESC(timeout, "PCIELLEN timeout flags");
+static UINT32 ClockSpinLimit = HCD_COMMAND_MIN_POLLING_CLOCK;
+module_param(ClockSpinLimit, int, 0644);
+MODULE_PARM_DESC(ClockSpinLimit, "PCIELLEN command clock spin time");
+
+
+
+
+/* the driver context data */
+static SDHCD_DRIVER_CONTEXT HcdContext = {
+   .pDescription  = DESCRIPTION,
+   .DeviceCount   = 0,
+};
+
+#define PCI_CLASS_SYSTEM_SDIO    0x0805
+/* PCI devices supported */
+static const struct pci_device_id pci_ids [] = { 
+  {
+    .vendor = 0x1679, .device = 0x3000,
+    .subvendor = PCI_ANY_ID, .subdevice = PCI_ANY_ID,  
+    .driver_data =  (unsigned long) &HcdContext,
+  },
+  {
+   PCI_DEVICE_CLASS(PCI_CLASS_SYSTEM_SDIO << 8, 0xFFFFFF00),
+    .driver_data =  (unsigned long) &HcdContext,
+  },
+ { /* end: all zeroes */ }
+};
+MODULE_DEVICE_TABLE (pci, pci_ids);
+
+/* tell PCI bus driver about us */
+static struct pci_driver sdio_pci_driver = {
+    .name =     "sdio_pciellenhcd",
+    .id_table = pci_ids,
+
+    .probe =    Probe,
+    .remove =   Remove,
+
+#ifdef CONFIG_PM
+    .suspend =  NULL,     
+    .resume =  NULL,      
+#endif
+};
+    
+
+
+/*
+ * Probe - probe to setup our device, if present
+*/
+static SYSTEM_STATUS Probe(struct pci_dev *pPCIdevice, const struct pci_device_id *pId)
+{
+    SYSTEM_STATUS err = 0;
+    SDIO_STATUS   status = SDIO_STATUS_SUCCESS;
+    PSDHCD_DRIVER_CONTEXT pHcdContext;
+    PSDHCD_DEVICE pDeviceContext = NULL;
+    PSDHCD_DEVICE pLastDeviceContext; 
+    int ii;
+    int count;
+    int firstBar;
+    UINT8 config;
+    SDHCD_TYPE type = TYPE_CLASS;
+    
+    DBG_PRINT(SDDBG_TRACE, ("SDIO PCIELLEN HCD: Probe - probing for new device\n"));
+    if ((pId == NULL) || (pId->driver_data == 0)) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO PCIELLEN HCD: Probe - no device\n"));
+        return -EINVAL;
+    } 
+    pHcdContext = (PSDHCD_DRIVER_CONTEXT)pId->driver_data;
+    
+    if (pci_enable_device(pPCIdevice) < 0) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO PCIELLEN HCD: Probe  - failed to enable device\n"));
+        return -ENODEV;
+    }
+    if ((pId->vendor == pci_ids[0].vendor) && (pId->device == pci_ids[0].device)) {
+        type = TYPE_PCIELLEN;
+        DBG_PRINT(SDDBG_TRACE, ("SDIO PCIELLEN HCD: Probe  - setting PCI Ellen type\n"));
+    }
+    /* get the number of slots supported and the initial BAR for it */
+    pci_read_config_byte(pPCIdevice, PCI_CONFIG_SLOT, &config);
+    count = GET_SLOT_COUNT(config);
+    firstBar = GET_SLOT_FIRST(config);
+    if (type == TYPE_PCIELLEN) {
+        /* move the first bar to the right start place */
+        firstBar = 2;
+    }
+    if (count > 0) {
+        DBG_PRINT(SDDBG_TRACE, ("SDIO PCI BD: Probe - slot count: %d, first BAR: %d\n", count, firstBar));
+    } else {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO PCI BD: Probe - no slots defined, first BAR: %d\n", firstBar));
+        pci_disable_device(pPCIdevice);
+        return -ENODEV;
+    }
+    
+    /* create a device for each slot that we have */
+    for(ii = 0; ii < count; ii++, firstBar++) {
+        pLastDeviceContext = pDeviceContext;
+        /* allocate a device context for this new device */
+        pDeviceContext =  (PSDHCD_DEVICE)KernelAlloc(sizeof(SDHCD_DEVICE));
+        if (pDeviceContext == NULL) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCI BD: Probe - no memory for device context\n"));
+            err = -ENOMEM;
+            break;
+        }
+        ZERO_POBJECT(pDeviceContext);
+        SDLIST_INIT(&pDeviceContext->List);
+        pDeviceContext->Type = type;
+        pDeviceContext->pBusDevice = pPCIdevice;
+        spin_lock_init(&pDeviceContext->Lock);
+        spin_lock_init(&pDeviceContext->AddressSpinlock);
+        
+        SET_SDIO_STACK_VERSION(&pDeviceContext->Hcd);
+        pDeviceContext->Hcd.pName = (PTEXT)KernelAlloc(SDHCD_MAX_DEVICE_NAME+1);
+        snprintf(pDeviceContext->Hcd.pName, SDHCD_MAX_DEVICE_NAME, SDIO_BD_BASE"%i:%i",
+                 pHcdContext->DeviceCount++, ii);
+        pDeviceContext->Hcd.Attributes = hcdattributes;
+        pDeviceContext->Hcd.MaxBlocksPerTrans = SDIO_SD_MAX_BLOCKS;
+        pDeviceContext->Hcd.pContext = pDeviceContext;
+        pDeviceContext->Hcd.pRequest = HcdRequest;
+        pDeviceContext->Hcd.pConfigure = HcdConfig;
+        pDeviceContext->Hcd.pDevice = &pPCIdevice->dev;
+        pDeviceContext->Hcd.pModule = THIS_MODULE;
+        pDeviceContext->BaseClock = BaseClock;
+        pDeviceContext->TimeOut = timeout;
+        pDeviceContext->ClockSpinLimit = ClockSpinLimit;
+        /* add device to our list of devices */
+            /* protect the devicelist */
+        if (!SDIO_SUCCESS(status = SemaphorePendInterruptable(&pHcdContext->DeviceListSem))) {
+            break;;   /* wait interrupted */
+        }
+        SDListInsertTail(&pHcdContext->DeviceList, &pDeviceContext->List); 
+        SemaphorePost(&pHcdContext->DeviceListSem);
+        
+        /* map the slots memory BAR */
+        status = MapAddress(pPCIdevice, pDeviceContext->DeviceName, 
+                            (UINT8)firstBar, &pDeviceContext->Address);
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, 
+               ("SDIO PCIELLEN HCD: Probe - failed to map device memory address %s 0x%X, status %d\n",
+                pDeviceContext->DeviceName, (UINT)pci_resource_start(pPCIdevice, firstBar),
+                status));
+               break;                  
+        }
+        pDeviceContext->InitStateMask |= SDIO_BAR_MAPPED;
+
+        if (type == TYPE_PCIELLEN) {
+            if (pLastDeviceContext == NULL) {
+                /* map the slots control register BAR */
+                status = MapAddress(pPCIdevice, pDeviceContext->DeviceName, 
+                                    (UINT8)0, &pDeviceContext->ControlRegs);
+                if (!SDIO_SUCCESS(status)) {
+                    DBG_PRINT(SDDBG_ERROR, 
+                       ("SDIO PCIELLEN HCD: Probe - failed to map device control address %s 0x%X, status %d\n",
+                        pDeviceContext->DeviceName, (UINT)pci_resource_start(pPCIdevice, 0),
+                        status));
+                       break;                  
+                }
+            } else {
+                /* copy the prior mapping */
+                pDeviceContext->ControlRegs = pLastDeviceContext->ControlRegs;
+            }
+            if ((ii+1) == count) {
+                /* mark last one */
+                pDeviceContext->InitStateMask |= SDIO_LAST_CONTROL_BAR_MAPPED;
+            } 
+        }
+        /* initialize work items */
+        ATH_INIT_WORK(&(pDeviceContext->iocomplete_work), hcd_iocomplete_wqueue_handler, pDeviceContext);
+        ATH_INIT_WORK(&(pDeviceContext->carddetect_work), hcd_carddetect_wqueue_handler, pDeviceContext);
+        ATH_INIT_WORK(&(pDeviceContext->sdioirq_work), hcd_sdioirq_wqueue_handler, pDeviceContext);
+
+        /* map the controller interrupt, we map it to each device. 
+           Interrupts can be called from this point on */
+        err = request_irq(pPCIdevice->irq, hcd_sdio_irq, SA_SHIRQ,
+                          pDeviceContext->DeviceName, pDeviceContext);
+        if (err < 0) {
+              DBG_PRINT(SDDBG_ERROR, ("SDIO PCIELLEN - probe, unable to map interrupt \n"));
+              err = -ENODEV;
+              break;
+        }
+        pDeviceContext->InitStateMask |= SDIO_IRQ_INTERRUPT_INIT;
+
+        if (!SDIO_SUCCESS((status = HcdInitialize(pDeviceContext)))) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCIELLEN Probe - failed to init HW, status =%d\n",status));
+            err = SDIOErrorToOSError(status);
+            break;
+        } 
+        pDeviceContext->InitStateMask |= SDHC_HW_INIT;
+        
+           /* register with the SDIO bus driver */
+        if (!SDIO_SUCCESS((status = SDIO_RegisterHostController(&pDeviceContext->Hcd)))) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCIELLEN Probe - failed to register with host, status =%d\n",status));
+            err = SDIOErrorToOSError(status);
+            break;
+        }      
+        pDeviceContext->InitStateMask |= SDHC_REGISTERED;
+        
+        /* queue a work item to check for a card present at start up
+           this call will unmask the insert/remove interrupts */
+        QueueEventResponse(pDeviceContext, WORK_ITEM_CARD_DETECT);
+    }
+        
+    
+    if ((err < 0) || (!SDIO_SUCCESS(status))){
+        pHcdContext->DeviceCount--;
+        RemoveDevice(pPCIdevice, pHcdContext);
+    } else {
+      
+      if (type == TYPE_PCIELLEN) {
+          InitEllen(pDeviceContext);
+      }    
+    
+        DBG_PRINT(SDDBG_ERROR, ("SDIO PCIELLEN Probe - HCD ready! \n"));
+    }
+    return 0;  
+}
+
+/* Remove - remove  device
+ * perform the undo of the Probe
+*/
+static void Remove(struct pci_dev *pPCIdevice) 
+{
+    PSDHCD_DRIVER_CONTEXT pHcdContext = &HcdContext;
+    
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO PCIELLEN HCD: Remove - removing device\n"));
+
+    RemoveDevice(pPCIdevice, pHcdContext);
+    pHcdContext->DeviceCount--;
+    
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO PCIELLEN HCD: Remove\n"));
+    return;
+}
+
+/*
+ * RemoveDevice - remove all devices associated with bus device
+*/
+static void RemoveDevice(struct pci_dev *pPCIdevice, PSDHCD_DRIVER_CONTEXT pHcdContext)
+{
+    PSDHCD_DEVICE pDeviceContext; 
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO PCIELLEN HCD: RemoveDevice\n"));
+    
+    /* protect the devicelist */
+    if (!SDIO_SUCCESS(SemaphorePendInterruptable(&pHcdContext->DeviceListSem))) {
+        return;   /* wait interrupted */
+    }
+    
+    SDITERATE_OVER_LIST_ALLOW_REMOVE(&pHcdContext->DeviceList, pDeviceContext, SDHCD_DEVICE, List)
+        if (pDeviceContext->pBusDevice == pPCIdevice) {
+            if (pDeviceContext->InitStateMask & SDHC_HW_INIT) {
+                HcdDeinitialize(pDeviceContext);
+            }
+
+            if (pDeviceContext->InitStateMask & SDHC_REGISTERED) {
+                SDIO_UnregisterHostController(&pDeviceContext->Hcd);
+            }
+            
+            /* wait for any of our work items to run */
+            flush_scheduled_work();
+            
+            if (pDeviceContext->InitStateMask & SDIO_IRQ_INTERRUPT_INIT) {
+                free_irq(pPCIdevice->irq, pDeviceContext);
+            }
+            
+            if (pDeviceContext->InitStateMask & SDIO_BAR_MAPPED) {
+                UnmapAddress(&pDeviceContext->Address);
+            }
+            
+            if (pDeviceContext->InitStateMask & SDIO_LAST_CONTROL_BAR_MAPPED) {
+                UnmapAddress(&pDeviceContext->ControlRegs);
+            }
+            if (pDeviceContext->Hcd.pName != NULL) {
+                KernelFree(pDeviceContext->Hcd.pName);
+                pDeviceContext->Hcd.pName = NULL;
+            }
+            KernelFree(pDeviceContext);
+        }
+    SDITERATE_END;
+    SemaphorePost(&pHcdContext->DeviceListSem);
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO PCIELLEN HCD: RemoveDevice\n"));
+}
+
+/*
+ * MapAddress - sets up the address for a given BAR
+*/
+static int MapAddress(struct pci_dev *pPCIdevice, char *pName, UINT8 bar, PSDHCD_MEMORY pAddress)
+{
+    if (pci_resource_flags(pPCIdevice, bar) & PCI_BASE_ADDRESS_SPACE  ) {
+        DBG_PRINT(SDDBG_WARN, ("SDIO PCIELLEN HCD: MapAddress, port I/O not supported\n"));
+        return -ENOMEM;
+    } 
+    pAddress->Raw = pci_resource_start(pPCIdevice, bar);
+    pAddress->Length = pci_resource_len(pPCIdevice, bar);
+    if (!request_mem_region (pAddress->Raw, pAddress->Length, pName)) {
+        DBG_PRINT(SDDBG_WARN, ("SDIO PCIELLEN HCD: MapAddress - memory in use: 0x%X(0x%X)\n",
+                               (UINT)pAddress->Raw, (UINT)pAddress->Length));
+        return -EBUSY;
+    }
+    pAddress->pMapped = ioremap_nocache(pAddress->Raw, pAddress->Length);
+    if (pAddress->pMapped == NULL) {
+        DBG_PRINT(SDDBG_WARN, ("SDIO PCIELLEN HCD: MapAddress - unable to map memory\n"));
+        /* cleanup region */
+        release_mem_region (pAddress->Raw, pAddress->Length);
+        return -EFAULT;
+    }
+    DBG_PRINT(SDDBG_TRACE, ("SDIO PCIELLEN HCD: MapAddress - mapped memory: 0x%X(0x%X) to 0x%X\n",
+                            (UINT)pAddress->Raw, (UINT)pAddress->Length, (UINT)pAddress->pMapped));
+    return 0;
+}
+
+ 
+
+/*
+ * UnmapAddress - unmaps the address 
+*/
+static void UnmapAddress(PSDHCD_MEMORY pAddress) {
+    iounmap(pAddress->pMapped);
+    release_mem_region(pAddress->Raw, pAddress->Length);
+    pAddress->pMapped = NULL;
+}
+
+/*
+ * InitEllen - initialize the Ellen card control registers
+ * 
+*/
+static SDIO_STATUS InitEllen(PSDHCD_DEVICE pDeviceContext)
+{
+    UINT32 temp = READ_CONTROL_REG16(pDeviceContext, INTCSR);
+    DBG_PRINT(SDDBG_TRACE, ("SDIO PCIELLEN HCD: InitEllen INTCSR - 0x%X\n", (UINT)temp));
+ 
+    WRITE_CONTROL_REG16(pDeviceContext, INTCSR,
+        (UINT16)temp | INTCSR_LINTi1ENABLE | INTCSR_LINTi2ENABLE | INTCSR_PCIINTENABLE);
+
+    temp = READ_CONTROL_REG32((pDeviceContext),GPIOCTRL);
+        /* set GPIO 2,3 and 8 as output */
+    temp &= ~(GPIO3_PIN_SELECT | GPIO2_PIN_SELECT | GPIO4_PIN_SELECT);  
+    temp |= (GPIO8_PIN_DIRECTION | GPIO3_PIN_DIRECTION | GPIO2_PIN_DIRECTION | GPIO4_PIN_DIRECTION);               
+    WRITE_CONTROL_REG32((pDeviceContext),GPIOCTRL, temp);
+    DBG_PRINT(SDDBG_TRACE, ("SDIO PCIELLEN HCD: InitEllen GPIOCTRL - 0x%X\n", (UINT)temp));
+    TRACE_SIGNAL_DATA_WRITE(pDeviceContext, FALSE);
+    TRACE_SIGNAL_DATA_READ(pDeviceContext, FALSE);
+    TRACE_SIGNAL_DATA_ISR(pDeviceContext, FALSE);
+    TRACE_SIGNAL_DATA_IOCOMP(pDeviceContext, FALSE);
+
+    return SDIO_STATUS_SUCCESS;    
+}
+
+/*
+ * QueueEventResponse - queues an event in a process context back to the bus driver
+ * 
+*/
+SDIO_STATUS QueueEventResponse(PSDHCD_DEVICE pDeviceContext, INT WorkItemID)
+{
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+    struct work_struct  *work;
+#else
+    struct delayed_work *work;
+#endif
+    
+    if (pDeviceContext->ShuttingDown) {
+        return SDIO_STATUS_CANCELED;
+    }
+
+    switch (WorkItemID) {
+        case WORK_ITEM_IO_COMPLETE:
+            work = &pDeviceContext->iocomplete_work;
+            break;
+        case WORK_ITEM_CARD_DETECT:
+            work = &pDeviceContext->carddetect_work;
+            break;
+        case WORK_ITEM_SDIO_IRQ:
+            work = &pDeviceContext->sdioirq_work;
+            break;
+        default:
+            DBG_ASSERT(FALSE);
+            return SDIO_STATUS_ERROR;
+            break;  
+    }
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+    if (schedule_work(work) > 0) {
+#else
+    if (schedule_delayed_work(work,0) > 0) { 
+#endif
+        return SDIO_STATUS_SUCCESS;
+    } else {
+        return SDIO_STATUS_PENDING;
+    }
+}
+
+/*
+ * hcd_iocomplete_wqueue_handler - the work queue for io completion
+*/
+static void hcd_iocomplete_wqueue_handler(
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+void *context)
+{
+    PSDHCD_DEVICE pDeviceContext = (PSDHCD_DEVICE)context;
+#else
+struct work_struct *work)
+{
+    PSDHCD_DEVICE pDeviceContext =
+      container_of( work, SDHCD_DEVICE, iocomplete_work.work );
+#endif
+
+    if (!pDeviceContext->ShuttingDown) {
+        TRACE_SIGNAL_DATA_IOCOMP(pDeviceContext, TRUE);
+        SDIO_HandleHcdEvent(&pDeviceContext->Hcd, EVENT_HCD_TRANSFER_DONE);
+        TRACE_SIGNAL_DATA_IOCOMP(pDeviceContext, FALSE);
+    }
+}
+
+/*
+ * hcd_carddetect_handler - the work queue for card detect debouncing
+*/
+static void hcd_carddetect_wqueue_handler(
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,19)
+void *context)
+{
+    PSDHCD_DEVICE pDeviceContext = (PSDHCD_DEVICE)context;
+#else
+struct work_struct *work)
+{
+    PSDHCD_DEVICE pDeviceContext =
+      container_of( work, SDHCD_DEVICE, carddetect_work.work );
+#endif
+
+    HCD_EVENT event;
+    volatile UINT32 temp;
+    
+    event = EVENT_HCD_NOP;
+    
+    DBG_PRINT(SDDBG_TRACE, ("+ SDIO PCIELLEN Card Detect Work Item \n"));
+    if (pDeviceContext->ShuttingDown) {
+        return;
+    }
+
+    DBG_PRINT(SDDBG_TRACE, ("SDIO PCIELLEN Card Detect Delaying to debounce card... \n"));
+        /* sleep for slot debounce if there is no card */
+    OSSleep(SD_SLOT_DEBOUNCE_MS);
+    
+    /* wait for stable */
+    while(!(temp = READ_HOST_REG32(pDeviceContext, HOST_REG_PRESENT_STATE))& 
+            HOST_REG_PRESENT_STATE_CARD_STATE_STABLE) {
+        ;
+    }
+
+    if (pDeviceContext->CardInserted) { 
+        /* look for removal */
+        if (!(temp & HOST_REG_PRESENT_STATE_CARD_INSERTED)) {
+            /* card not present */
+            event = EVENT_HCD_DETACH;
+            pDeviceContext->CardInserted = FALSE; 
+            pDeviceContext->KeepClockOn = FALSE;   
+            /* turn the power off */
+            SetPowerOn(pDeviceContext, FALSE); 
+            MaskIrq(pDeviceContext, HOST_REG_INT_STATUS_ALL);
+            DBG_PRINT(PXA_TRACE_CARD_INSERT, ("SDIO PCIELLEN Card Detect REMOVE\n"));
+        }
+    } else {
+        /* look for insert */
+        if (temp & HOST_REG_PRESENT_STATE_CARD_INSERTED) {
+            /* card present */
+            event = EVENT_HCD_ATTACH;
+            pDeviceContext->CardInserted = TRUE; 
+            GetDefaults(pDeviceContext);
+
+            DBG_PRINT(PXA_TRACE_CARD_INSERT, ("SDIO PCIELLEN Card Detect INSERT\n"));
+        }
+    }
+                /* clear interrupt */
+    WRITE_HOST_REG16(pDeviceContext, 
+                     HOST_REG_NORMAL_INT_STATUS,
+                     HOST_REG_INT_STATUS_CARD_INSERT_ENABLE | 
+                     HOST_REG_INT_STATUS_CARD_REMOVAL_ENABLE);
+    UnmaskIrq(pDeviceContext, HOST_REG_INT_STATUS_ALLOW_INSERT_REMOVE_ONLY);
+
+    if (event != EVENT_HCD_NOP) {
+        SDIO_HandleHcdEvent(&pDeviceContext->Hcd, event);
+    }
+    
+    DBG_PRINT(PXA_TRACE_CARD_INSERT, ("- SDIO PCIELLEN Card Detect Work Item \n"));
+}
+
+/*
+ * hcd_sdioirq_handler - the work queue for handling SDIO IRQ
+*/
+static void hcd_sdioirq_wqueue_handler(
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,19)
+void *context)
+{
+    PSDHCD_DEVICE pDeviceContext = (PSDHCD_DEVICE)context;
+#else
+struct work_struct *work)
+{
+    PSDHCD_DEVICE pDeviceContext =
+      container_of( work, SDHCD_DEVICE, sdioirq_work.work );
+#endif
+
+    DBG_PRINT(PXA_TRACE_SDIO_INT, ("SDIO PCIELLEN: hcd_sdioirq_wqueue_handler \n"));
+    if (!pDeviceContext->ShuttingDown) {
+        SDIO_HandleHcdEvent(&pDeviceContext->Hcd, EVENT_HCD_SDIO_IRQ_PENDING);
+    }
+}
+
+
+/* SDIO interrupt request */
+static irqreturn_t hcd_sdio_irq(int irq, void *context
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+, struct pt_regs * r  
+#endif
+  )
+  {
+    irqreturn_t retStat;
+    UINT16 intStat;
+    
+    DBG_PRINT(PXA_TRACE_SDIO_INT, ("SDIO PCIELLEN SDIO IRQ \n"));
+    
+    if (((PSDHCD_DEVICE)context)->Type == TYPE_PCIELLEN) {
+        /* see if we interrupted */
+        intStat = READ_CONTROL_REG16((PSDHCD_DEVICE)context, INTCSR);
+        DBG_PRINT(PXA_TRACE_SDIO_INT, ("intStat: 0x%X\n", (UINT)intStat));
+        if (!(intStat & (INTCSR_LINTi1STATUS | INTCSR_LINTi2STATUS))) {
+            return IRQ_NONE;
+        }
+    }
+    
+    TRACE_SIGNAL_DATA_ISR((PSDHCD_DEVICE)context, TRUE);
+        /* call OS independent ISR */
+    if (HcdSDInterrupt((PSDHCD_DEVICE)context)) {
+        retStat = IRQ_HANDLED;
+    } else {
+        retStat = IRQ_NONE;
+    }    
+    TRACE_SIGNAL_DATA_ISR((PSDHCD_DEVICE)context, FALSE);
+    return retStat;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  UnmaskIrq - Unmask SD interrupts
+  Input:    pDevice - host controller
+            Mask - mask value
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+UINT16 UnmaskIrq(PSDHCD_DEVICE pDevice, UINT32 Mask)
+{
+    UINT16 ints;
+    /* protected read-modify-write */
+    spin_lock_irq(&pDevice->AddressSpinlock);
+    ints = READ_HOST_REG16(pDevice, HOST_REG_INT_SIGNAL_ENABLE);
+    ints |= Mask;
+    WRITE_HOST_REG16(pDevice, HOST_REG_INT_SIGNAL_ENABLE, ints);
+    spin_unlock_irq(&pDevice->AddressSpinlock);
+    return ints;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  MaskIrq - Mask SD interrupts
+  Input:    pDevice - host controller
+            Mask - mask value
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+UINT16 MaskIrq(PSDHCD_DEVICE pDevice, UINT32 Mask)
+{
+    UINT16 ints;
+    /* protected read-modify-write */
+    spin_lock_irq(&pDevice->AddressSpinlock);
+    ints = READ_HOST_REG16(pDevice, HOST_REG_INT_SIGNAL_ENABLE);
+    ints &= ~Mask;
+    WRITE_HOST_REG16(pDevice, HOST_REG_INT_SIGNAL_ENABLE, ints);
+    spin_unlock_irq(&pDevice->AddressSpinlock);
+    return ints;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  MaskIrqFromIsr - Mask SD interrupts, called from ISR
+  Input:    pDevice - host controller
+            Mask - mask value
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+UINT16 MaskIrqFromIsr(PSDHCD_DEVICE pDevice, UINT32 Mask)
+{
+    UINT16 ints;
+    /* protected read-modify-write */
+    spin_lock(&pDevice->AddressSpinlock);
+    ints = READ_HOST_REG16(pDevice, HOST_REG_INT_SIGNAL_ENABLE);
+    ints &= ~Mask;
+    WRITE_HOST_REG16(pDevice, HOST_REG_INT_SIGNAL_ENABLE, ints);
+    spin_unlock(&pDevice->AddressSpinlock);
+    return ints;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  UnmaskIrqFromIsr - Unmask SD interrupts
+  Input:    pDevice - host controller
+            Mask - mask value
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+UINT16 UnmaskIrqFromIsr(PSDHCD_DEVICE pDevice, UINT32 Mask)
+{
+    UINT16 ints;
+    /* protected read-modify-write */
+    spin_lock(&pDevice->AddressSpinlock);
+    ints = READ_HOST_REG16(pDevice, HOST_REG_INT_SIGNAL_ENABLE);
+    ints |= Mask;
+    WRITE_HOST_REG16(pDevice, HOST_REG_INT_SIGNAL_ENABLE, ints);
+    spin_unlock(&pDevice->AddressSpinlock);
+    return ints;
+}
+
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  GetDefaults - get the user modifiable data items
+  Input:    pDeviceContext - host controller
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void GetDefaults(PSDHCD_DEVICE pDeviceContext)
+{
+    //can't change this dynanmically: pDeviceContext->BaseClock = BaseClock;
+    pDeviceContext->TimeOut = timeout;
+    pDeviceContext->ClockSpinLimit = ClockSpinLimit;
+}
+    
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  EnableDisableSDIOIRQ - enable SDIO interrupt detection
+  Input:    pDevice - host controller
+            Enable - enable SDIO IRQ detection
+            FromIsr - called from ISR
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void EnableDisableSDIOIRQ(PSDHCD_DEVICE pDevice, BOOL Enable, BOOL FromIsr)
+{
+    UINT16 intsEnables;
+   
+    if (FromIsr) {
+        if (Enable) {
+                // isr should never re-enable 
+            DBG_ASSERT(FALSE);
+        } else {
+            MaskIrqFromIsr(pDevice, HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE);
+        }
+    } else {  
+        if (Enable) { 
+            UnmaskIrq(pDevice, HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE); 
+        } else {             
+            MaskIrq(pDevice, HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE);    
+        }
+    }           
+     
+    /* protected read-modify-write */   
+    if (FromIsr) { 
+        spin_lock(&pDevice->AddressSpinlock);
+    } else {
+        spin_lock_irq(&pDevice->AddressSpinlock);
+    } 
+        
+    intsEnables = READ_HOST_REG16(pDevice, HOST_REG_INT_STATUS_ENABLE);
+    if (Enable) {
+        intsEnables |=  HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE;
+    } else { 
+        intsEnables &= ~HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE;
+    }
+        
+    WRITE_HOST_REG16(pDevice, HOST_REG_INT_STATUS_ENABLE, intsEnables);   
+    
+    if (FromIsr) {
+        spin_unlock(&pDevice->AddressSpinlock);
+    } else {
+        spin_unlock_irq(&pDevice->AddressSpinlock);    
+    }
+    
+    
+}
+
+/*
+ * module init
+*/
+static int __init sdio_pci_hcd_init(void) {
+    SYSTEM_STATUS err;
+    SDIO_STATUS status; 
+    
+    REL_PRINT(SDDBG_TRACE, ("+SDIO PCIELLEN HCD: loaded\n"));
+    
+    SDLIST_INIT(&HcdContext.DeviceList);
+    status = SemaphoreInitialize(&HcdContext.DeviceListSem, 1);
+    if (!SDIO_SUCCESS(status)) {
+       return SDIOErrorToOSError(status);
+    }       
+    
+    /* register with the PCI bus driver */
+    err = pci_module_init(&sdio_pci_driver);
+    if (err < 0) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO PCIELLEN HCD: failed to register with system PCI bus driver, %d\n",
+                                err));
+    }
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO PCIELLEN HCD: sdio_pci_hcd_init\n"));
+    return err;
+}
+
+/*
+ * module cleanup
+*/
+static void __exit sdio_pci_hcd_cleanup(void) {
+    REL_PRINT(SDDBG_TRACE, ("+SDIO PCIELLEN HCD: unloaded\n"));
+    pci_unregister_driver(&sdio_pci_driver);
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO PCIELLEN HCD: leave sdio_pci_hcd_cleanup\n"));
+}
+
+MODULE_LICENSE("GPL and additional rights");
+MODULE_DESCRIPTION(DESCRIPTION);
+MODULE_AUTHOR(AUTHOR);
+
+module_init(sdio_pci_hcd_init);
+module_exit(sdio_pci_hcd_cleanup);
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/pci_ellen_readme.txt
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/pci_ellen_readme.txt	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/pci_ellen_readme.txt	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,31 @@
+Codetelligence Embedded SDIO Stack Host Controller Driver Read Me.
+Copyright 2005, Atheros Communications, Inc.
+
+Tokyo Electron PCI Ellen SD/SDIO Host Controller Driver
+
+General Notes:
+-  SDIO Standard Host 1.0 compliant.
+-  SD 1 and 4 bit modes, up to 24 Mhz Clock rates.
+-  SDIO IRQ detection for 1,4 bit modes.
+-  Programmed I/O mode (hardware does not implement DMA).
+-  Card detect via slot mechanical switch
+    
+Linux Notes:
+
+Module Parameters:
+   
+    "debug" =  set module debug level (default = 4).
+    Module Debug Level:      Description of Kernel Prints:
+           7                   Setup/Initialization
+           8                   Card Insertion (if mechanical card switch implemented)
+           9                   Processing bus requests w/ Data
+          10                   Processing for all bus requests.
+          11                   Configuration Requests.
+          12                   SDIO controller IRQ processing
+          13                   Clock Control
+          14                   SDIO Card Interrupt  
+
+
+
+          
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/sdio_hcd.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/sdio_hcd.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/sdio_hcd.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,1238 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_hcd.c
+
+ at abstract: Tokyo Electron PCI Ellen SDIO Host Controller Driver
+
+#notes: OS independent code
+ 
+ at notice: Copyright (c), 2004-2005 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#include "sdio_pciellen_hcd.h"
+
+#define CLOCK_ON  TRUE
+#define CLOCK_OFF FALSE
+
+void Dbg_DumpBuffer(PUCHAR pBuffer, INT Length);
+SDIO_STATUS SetPowerLevel(PSDHCD_DEVICE pDeviceContext, BOOL On, SLOT_VOLTAGE_MASK Level); 
+
+
+SD_CLOCK_TBL_ENTRY SDClockDivisorTable[SD_CLOCK_MAX_ENTRIES] =
+{   /* clock rate divisor, divisor setting */
+    {1, 0x0000},
+    {2, 0x0100},
+    {4, 0x0200},
+    {8, 0x0400},
+    {16,0x0800},
+    {32,0x1000},
+    {64,0x2000},
+    {128,0x4000},
+    {256,0x8000}, 
+};
+
+
+#define WAIT_REGISTER32_CHANGE(pDevice, pStatus, reg,mask,cmp,timout) \
+    {\
+        if (!WaitRegisterBitsChange((pDevice),    \
+                                    (pStatus),    \
+                                    (reg),        \
+                                    (mask),       \
+                                    (cmp),        \
+                                    (timout))) {  \
+           DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen - Reg Change Timeout : 0x%X src:%s, line:%d \n",\
+           (reg),__FILE__, __LINE__));        \
+        }                                     \
+    }
+ 
+#define WAIT_FOR_DAT_CMD_DAT_READY(pDevice, pStatus) \
+        WAIT_REGISTER32_CHANGE(pDevice,            \
+                             pStatus,            \
+                             HOST_REG_PRESENT_STATE,(HOST_REG_PRESENT_STATE_BUFFER_COMMAND_INHIBIT_DAT | \
+                             HOST_REG_PRESENT_STATE_BUFFER_COMMAND_INHIBIT_CMD), \
+                             0, 30000)
+                              
+   
+INLINE BOOL WaitRegisterBitsChange(PSDHCD_DEVICE pDevice, 
+                                   SDIO_STATUS   *pStatus,
+                                   UINT32         Reg, 
+                                   UINT32         Mask, 
+                                   UINT32         CompareMask, 
+                                   UINT32         Count)
+{
+    while (Count) {
+                
+        if ((READ_HOST_REG32(pDevice, Reg) & Mask) == CompareMask) {
+            break;
+        }
+                
+        Count--;    
+    }    
+    
+    if (0 == Count) {
+        if (pStatus != NULL) {
+            *pStatus = SDIO_STATUS_ERROR;
+        }
+        return FALSE;  
+    }
+    
+    if (pStatus != NULL) {
+        *pStatus = SDIO_STATUS_SUCCESS;
+    }
+    
+    return TRUE;
+}
+
+
+/* reset command data line state machines - xx*/
+void ResetCmdDatLine(PSDHCD_DEVICE pDevice)
+{
+    DBG_PRINT(SDDBG_TRACE, ("SDIO PCI Ellen Issuing CMD DAT Reset \n"));  
+        // issue reset
+    WRITE_HOST_REG32(pDevice, HOST_REG_SW_RESET, 
+            (HOST_REG_SW_RST_CMD_LINE | HOST_REG_SW_RST_DAT_LINE));
+        // wait for bits to clear
+    WAIT_REGISTER32_CHANGE(pDevice, NULL,
+                         HOST_REG_SW_RESET,
+                         HOST_REG_SW_RST_CMD_LINE | HOST_REG_SW_RST_DAT_LINE,
+                         0, 
+                         30000);        
+    DBG_PRINT(SDDBG_TRACE, ("SDIO PCI Ellen CMD DAT Reset Done \n"));  
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  GetResponseData - get the response data 
+  Input:    pDevice - device context
+            pReq - the request
+  Output: 
+  Return: returns status
+  Notes: This function returns SDIO_STATUS_SUCCESS for SD mode.  
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS GetResponseData(PSDHCD_DEVICE pDevice, PSDREQUEST pReq)
+{
+    INT     dwordCount;
+    INT     byteCount;
+    UINT32  readBuffer[4];
+    UINT    ii;
+    
+    if (GET_SDREQ_RESP_TYPE(pReq->Flags) == SDREQ_FLAGS_NO_RESP) {
+        return SDIO_STATUS_SUCCESS;    
+    }
+    
+       
+    byteCount = SD_DEFAULT_RESPONSE_BYTES;        
+    if (GET_SDREQ_RESP_TYPE(pReq->Flags) == SDREQ_FLAGS_RESP_R2) {
+        byteCount = SD_R2_RESPONSE_BYTES;         
+    } 
+    dwordCount = (byteCount + 3) / 4;      
+
+    /* move data into read buffer */
+    for (ii = 0; ii < dwordCount; ii++) {
+        readBuffer[ii] = READ_HOST_REG32(pDevice, HOST_REG_RESPONSE+(ii*4));
+    }
+
+    /* handle normal SD/MMC responses */        
+  
+    /* the standard host strips the CRC for all responses and puts them in 
+     * a nice linear order */
+    memcpy(&pReq->Response[1],readBuffer,byteCount);
+   
+    if (DBG_GET_DEBUG_LEVEL() >= PXA_TRACE_REQUESTS) { 
+        if (GET_SDREQ_RESP_TYPE(pReq->Flags) == SDREQ_FLAGS_RESP_R2) {
+            byteCount = 17; 
+        }
+        SDLIB_PrintBuffer(pReq->Response,byteCount,"SDIO PCI Ellen - Response Dump");
+    }
+    
+    return SDIO_STATUS_SUCCESS;  
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  DumpCurrentRequestInfo - debug dump  
+  Input:    pDevice - device context
+  Output: 
+  Return: 
+  Notes: This function debug prints the current request  
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void DumpCurrentRequestInfo(PSDHCD_DEVICE pDevice)
+{
+    if (pDevice->Hcd.pCurrentRequest != NULL) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen - Current Request Command:%d, ARG:0x%8.8X\n",
+                  pDevice->Hcd.pCurrentRequest->Command, pDevice->Hcd.pCurrentRequest->Argument));
+        if (IS_SDREQ_DATA_TRANS(pDevice->Hcd.pCurrentRequest->Flags)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen - Data %s, Blocks: %d, BlockLen:%d Remaining: %d \n",
+                      IS_SDREQ_WRITE_DATA(pDevice->Hcd.pCurrentRequest->Flags) ? "WRITE":"READ",
+                      pDevice->Hcd.pCurrentRequest->BlockCount,
+                      pDevice->Hcd.pCurrentRequest->BlockLen,
+                      pDevice->Hcd.pCurrentRequest->DataRemaining));
+        }
+    }
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  TranslateSDError - check for an SD error 
+  Input:    pDevice - device context
+            Status -  error interrupt status register value
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS TranslateSDError(PSDHCD_DEVICE pDevice, UINT16 Status)
+{
+    if (Status & HOST_REG_ERROR_INT_STATUS_CRCERR) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen - RESP CRC ERROR \n"));
+        return SDIO_STATUS_BUS_RESP_CRC_ERR;
+    } else if (Status & HOST_REG_ERROR_INT_STATUS_DATATIMEOUTERR) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen - DATA TIMEOUT ERROR \n"));
+        return SDIO_STATUS_BUS_READ_TIMEOUT;
+    } else if (Status & HOST_REG_ERROR_INT_STATUS_DATACRCERR) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen - READDATA CRC ERROR \n"));
+        DumpCurrentRequestInfo(pDevice);
+        return SDIO_STATUS_BUS_READ_CRC_ERR;
+    } else if (Status & HOST_REG_ERROR_INT_STATUS_CMDTIMEOUTERR) {
+        if (pDevice->CardInserted) {
+                /* hide error if we are polling an empty slot */
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen - RESPONSE TIMEOUT \n"));
+        }
+        return SDIO_STATUS_BUS_RESP_TIMEOUT;
+    }
+    DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen - untranslated error 0x%X\n", (UINT)Status));
+    
+    return SDIO_STATUS_DEVICE_ERROR;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  ClockStartStop - SD clock control
+  Input:  pDevice - device object
+          On - turn on or off (TRUE/FALSE)
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void ClockStartStop(PSDHCD_DEVICE pDevice, BOOL On) 
+{
+    /* beware, an unprotected read-modify-write */
+    UINT16 state;
+
+    DBG_PRINT(PXA_TRACE_CLOCK, ("SDIO PCI Ellen - ClockStartStop, %d\n", (UINT)On));
+    
+    state = READ_HOST_REG16(pDevice, HOST_REG_CLOCK_CONTROL);
+
+    if (On) {
+        state |= HOST_REG_CLOCK_CONTROL_SD_ENABLE;
+        WRITE_HOST_REG16(pDevice, HOST_REG_CLOCK_CONTROL, state);
+    } else {
+        state &= ~HOST_REG_CLOCK_CONTROL_SD_ENABLE;
+        WRITE_HOST_REG16(pDevice, HOST_REG_CLOCK_CONTROL, state);
+    }  
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SetBusMode - Set Bus mode
+  Input:  pDevice - device object
+          pMode - mode
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void SetBusMode(PSDHCD_DEVICE pDevice, PSDCONFIG_BUS_MODE_DATA pMode) 
+{
+    int ii;
+    int clockIndex;
+    UINT16 state;
+    UINT32 rate;
+    
+    DBG_PRINT(PXA_TRACE_CONFIG , ("SDIO PCI Ellen - SetMode\n"));
+    
+        /* set clock index to the end, the table is sorted this way */
+    clockIndex = SD_CLOCK_MAX_ENTRIES - 1;
+    pMode->ActualClockRate = (pDevice->BaseClock) / SDClockDivisorTable[clockIndex].ClockRateDivisor;
+    for (ii = 0; ii < SD_CLOCK_MAX_ENTRIES; ii++) {
+        rate = pDevice->BaseClock / SDClockDivisorTable[ii].ClockRateDivisor;
+        if (pMode->ClockRate >= rate) {
+            pMode->ActualClockRate = rate;
+            clockIndex = ii;
+            break; 
+        }   
+    }
+                                        
+    switch (SDCONFIG_GET_BUSWIDTH(pMode->BusModeFlags)) {
+        case SDCONFIG_BUS_WIDTH_1_BIT:
+            WRITE_HOST_REG8(pDevice, HOST_REG_CONTROL, HOST_REG_CONTROL_1BIT_WIDTH);
+            //WRITE_HOST_REG16(pDevice, HOST_REG_CONTROL, HOST_REG_CONTROL_1BIT_WIDTH);        
+            break;        
+        case SDCONFIG_BUS_WIDTH_4_BIT:
+            WRITE_HOST_REG8(pDevice, HOST_REG_CONTROL, HOST_REG_CONTROL_4BIT_WIDTH);
+            //WRITE_HOST_REG16(pDevice, HOST_REG_CONTROL, HOST_REG_CONTROL_4BIT_WIDTH);
+            break;
+        default:
+            break;
+    }
+   
+        /* set the clock divisor, unprotected read modify write */
+    state = SDClockDivisorTable[clockIndex].RegisterValue | HOST_REG_CLOCK_CONTROL_CLOCK_ENABLE;
+    WRITE_HOST_REG16(pDevice, HOST_REG_CLOCK_CONTROL, state);
+    
+        /* wait for stable */
+    while(!(READ_HOST_REG16(pDevice, HOST_REG_CLOCK_CONTROL) & HOST_REG_CLOCK_CONTROL_CLOCK_STABLE)) {
+      ;
+    }
+    WRITE_HOST_REG16(pDevice, HOST_REG_CLOCK_CONTROL, state | HOST_REG_CLOCK_CONTROL_SD_ENABLE);
+    
+    state = READ_HOST_REG16(pDevice, HOST_REG_CLOCK_CONTROL);
+    DBG_PRINT(PXA_TRACE_CONFIG , ("SDIO PCI Ellen - Clock: %d Khz, ClockRate %d (%d) state:0x%X\n", 
+                                   pMode->ActualClockRate, pMode->ClockRate, clockIndex, (UINT)state));
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  HcdTransferTxData - data transmit transfer
+  Input:  pDevice - device object
+          pReq    - transfer request
+  Output: 
+  Return: 
+  Notes: writes request data
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+BOOL HcdTransferTxData(PSDHCD_DEVICE pDevice, PSDREQUEST pReq)
+{
+    INT     dataCopy;
+    PUINT8  pBuf;
+    
+    dataCopy = min(pReq->DataRemaining, (UINT)pReq->BlockLen);   
+    pBuf = (PUINT8)pReq->pHcdContext;
+   
+    /* update remaining count */
+    pReq->DataRemaining -= dataCopy;
+    /* set the block data */
+    while(dataCopy) { 
+        UINT32 outData = 0;
+        UINT   count = 0;
+        if (dataCopy > 4) {
+            outData = ((UINT32)(*(pBuf+0))) | 
+                      (((UINT32)(*(pBuf+1))) << 8) | 
+                      (((UINT32)(*(pBuf+2))) << 16) | 
+                      (((UINT32)(*(pBuf+3))) << 24);
+            WRITE_HOST_REG32(pDevice, HOST_REG_BUFFER_DATA_PORT, outData);
+            dataCopy -= 4; 
+            pBuf += 4;
+        } else {
+            for(count = 0; (dataCopy > 0) && (count < 4); count++) {
+               outData |= (*pBuf) << (count*8); 
+               pBuf++;
+               dataCopy--;
+            }
+            WRITE_HOST_REG32(pDevice, HOST_REG_BUFFER_DATA_PORT, outData);
+        }
+    }
+    
+        /* update pointer position */
+    pReq->pHcdContext = (PVOID)pBuf;
+    if (pReq->DataRemaining) {
+        return FALSE; 
+    }
+    return TRUE;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  HcdTransferRxData - data receive transfer
+  Input:  pDevice - device object
+          pReq    - transfer request
+  Output: 
+  Return: 
+  Notes: reads request data
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void HcdTransferRxData(PSDHCD_DEVICE pDevice, PSDREQUEST pReq)
+{
+    INT     dataCopy;
+    PUINT8  pBuf;
+    
+    dataCopy = min(pReq->DataRemaining, (UINT)pReq->BlockLen);   
+    pBuf = (PUINT8)pReq->pHcdContext;
+   
+    /* update remaining count */
+    pReq->DataRemaining -= dataCopy;
+    /* set the block data */
+    while(dataCopy) { 
+        UINT32 inData;
+        UINT   count = 0;
+        inData = READ_HOST_REG32(pDevice, HOST_REG_BUFFER_DATA_PORT);
+        for(count = 0; (dataCopy > 0) && (count < 4); count++) {
+            *pBuf = (inData >> (count*8)) & 0xFF;
+            dataCopy--;
+            pBuf++;
+        }
+    }
+    
+        /* update pointer position */
+    pReq->pHcdContext = (PVOID)pBuf;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  HcdRequest - SD request handler
+  Input:  pHcd - HCD object
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS HcdRequest(PSDHCD pHcd) 
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    PSDHCD_DEVICE pDevice = (PSDHCD_DEVICE)pHcd->pContext;
+    UINT16                temp;
+    UINT16                ints;
+    PSDREQUEST            pReq;
+    
+    pReq = GET_CURRENT_REQUEST(pHcd);
+    DBG_ASSERT(pReq != NULL);
+        /* make sure clock is off */
+    ClockStartStop(pDevice, CLOCK_OFF);
+    
+    if(pDevice->ShuttingDown) {
+        DBG_PRINT(PXA_TRACE_REQUESTS, ("SDIO PCI Ellen HcdRequest returning canceled\n"));
+        return SDIO_STATUS_CANCELED;
+    }
+    /* make sure error ints are disabled */
+    WRITE_HOST_REG16(pDevice, HOST_REG_INT_ERR_SIGNAL_ENABLE, 
+                (UINT16)(~HOST_REG_ERROR_INT_STATUS_ALL_ERR));
+
+    switch (GET_SDREQ_RESP_TYPE(pReq->Flags)) {    
+        default:
+        case SDREQ_FLAGS_NO_RESP:
+            temp = 0x00;
+            break;
+        case SDREQ_FLAGS_RESP_R2:
+            temp = 0x01 |
+                    HOST_REG_COMMAND_REGISTER_CRC_CHECK_ENABLE;
+            break;
+        case SDREQ_FLAGS_RESP_R3:
+        case SDREQ_FLAGS_RESP_SDIO_R4:
+            temp = 0x02;
+            break;
+        case SDREQ_FLAGS_RESP_R1:
+        case SDREQ_FLAGS_RESP_SDIO_R5:
+        case SDREQ_FLAGS_RESP_R6:
+            temp = 0x02 | HOST_REG_COMMAND_REGISTER_CRC_CHECK_ENABLE 
+                        | HOST_REG_COMMAND_REGISTER_CMD_INDEX_CHECK_ENABLE;
+            break;
+        case SDREQ_FLAGS_RESP_R1B:   
+            temp = 0x03 | HOST_REG_COMMAND_REGISTER_CRC_CHECK_ENABLE
+                        | HOST_REG_COMMAND_REGISTER_CMD_INDEX_CHECK_ENABLE;
+            break;
+    }   
+
+        /* start the clock */
+    ClockStartStop(pDevice, CLOCK_ON);
+    /* mask the remove while we are spinning on the CMD ready bits */
+    MaskIrq(pDevice, HOST_REG_INT_STATUS_ALLOW_INSERT_REMOVE_ONLY);
+    WAIT_FOR_DAT_CMD_DAT_READY(pDevice, &status);
+
+    if (!SDIO_SUCCESS(status)) {
+        ResetCmdDatLine(pDevice); 
+        goto processComplete;   
+    }
+        /* clear any error statuses */
+    WRITE_HOST_REG16(pDevice, HOST_REG_ERROR_INT_STATUS, HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+    WRITE_HOST_REG16(pDevice, HOST_REG_NORMAL_INT_STATUS, HOST_REG_NORMAL_INT_STATUS_ALL_ERR);
+
+    if (pReq->Flags & SDREQ_FLAGS_DATA_TRANS){
+        /* set the block size register */
+        WRITE_HOST_REG16(pDevice, HOST_REG_BLOCK_SIZE, pReq->BlockLen);
+        /* set block count register */
+        WRITE_HOST_REG16(pDevice, HOST_REG_BLOCK_COUNT, pReq->BlockCount);
+        pReq->DataRemaining = pReq->BlockLen * pReq->BlockCount;
+        DBG_PRINT(PXA_TRACE_DATA, ("SDIO PCI Ellen %s Data Transfer, Blocks:%d, BlockLen:%d, Total:%d \n",
+                                   IS_SDREQ_WRITE_DATA(pReq->Flags) ? "TX":"RX",
+                                   pReq->BlockCount, pReq->BlockLen, pReq->DataRemaining));
+            /* use the context to hold where we are in the buffer */
+        pReq->pHcdContext = pReq->pDataBuffer;
+        temp |= HOST_REG_COMMAND_REGISTER_DATA_PRESENT; 
+    }  
+   
+    /* set the argument register */
+    WRITE_HOST_REG32(pDevice, HOST_REG_ARGUMENT, pReq->Argument);
+    /* set transfer mode register */
+    WRITE_HOST_REG16(pDevice, HOST_REG_TRANSFER_MODE, 
+            ((pReq->BlockCount > 1) ? HOST_REG_TRANSFER_MODE_MULTI_BLOCK:0) |
+            ((pReq->BlockCount > 1) ? HOST_REG_TRANSFER_MODE_BLOCKCOUNT_ENABLE:0) |
+            ((pReq->Flags & SDREQ_FLAGS_AUTO_CMD12) ? HOST_REG_TRANSFER_MODE_AUTOCMD12 : 0) |
+            ((IS_SDREQ_WRITE_DATA(pReq->Flags))?0 : HOST_REG_TRANSFER_MODE_READ));
+   
+    /* block cmd timeout errors */
+    WRITE_HOST_REG16(pDevice, HOST_REG_INT_ERR_SIGNAL_ENABLE, 
+                HOST_REG_ERROR_INT_STATUS_ALL_ERR & ~HOST_REG_ERROR_INT_STATUS_CMDTIMEOUTERR);
+
+    /* set command register, make sure it is clear to write */
+    temp |= (pReq->Command << HOST_REG_COMMAND_REGISTER_CMD_SHIFT);
+    DBG_PRINT(PXA_TRACE_REQUESTS, ("SDIO PCI Ellen CMDDAT:0x%X (RespType:%d, Command:0x%X , Arg:0x%X) \n",
+              temp, GET_SDREQ_RESP_TYPE(pReq->Flags), pReq->Command, pReq->Argument));
+    
+    
+    if (SDHCD_GET_OPER_CLOCK(pHcd) < pDevice->ClockSpinLimit) {
+            /* clock rate is very low, need to use interrupts here */
+            /* enable error interrupts */
+        WRITE_HOST_REG16(pDevice, HOST_REG_INT_ERR_SIGNAL_ENABLE, 
+                HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+        UnmaskIrq(pDevice, HOST_REG_INT_STATUS_CMD_COMPLETE_ENABLE);
+        WRITE_HOST_REG16(pDevice, HOST_REG_INT_ERR_SIGNAL_ENABLE, 
+                            HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+                            
+        if (pReq->Flags & SDREQ_FLAGS_DATA_TRANS) {
+             if (IS_SDREQ_WRITE_DATA(pReq->Flags)) {
+                 TRACE_SIGNAL_DATA_WRITE(pDevice, TRUE); 
+             } else {
+                 TRACE_SIGNAL_DATA_READ(pDevice, TRUE);
+             }
+        }
+                
+        WRITE_HOST_REG16(pDevice, HOST_REG_COMMAND_REGISTER, temp);
+        
+        status = SDIO_STATUS_PENDING;
+        if (pReq->Flags & SDREQ_FLAGS_DATA_TRANS) {
+            DBG_PRINT(PXA_TRACE_REQUESTS, ("SDIO PCI Ellen using interrupt for command done.*** with data. (clock:%d, ref:%d)\n",
+                SDHCD_GET_OPER_CLOCK(pHcd),pDevice->ClockSpinLimit));
+        } else {
+            DBG_PRINT(PXA_TRACE_REQUESTS, ("SDIO PCI Ellen using interrupt for command done. (clock:%d, ref:%d) \n",
+                SDHCD_GET_OPER_CLOCK(pHcd),pDevice->ClockSpinLimit));
+        }
+        return status;
+    } else {
+        if (pReq->Flags & SDREQ_FLAGS_DATA_TRANS) {
+             if (IS_SDREQ_WRITE_DATA(pReq->Flags)) {
+                 TRACE_SIGNAL_DATA_WRITE(pDevice, TRUE); 
+             } else {
+                 TRACE_SIGNAL_DATA_READ(pDevice, TRUE);
+             }
+        }
+        WRITE_HOST_REG16(pDevice, HOST_REG_COMMAND_REGISTER, temp);
+        if (pReq->Flags & SDREQ_FLAGS_DATA_TRANS) {
+            WAIT_REGISTER32_CHANGE(pDevice,            
+                                   &status,            
+                                   HOST_REG_PRESENT_STATE,
+                                   HOST_REG_PRESENT_STATE_BUFFER_COMMAND_INHIBIT_CMD,
+                                   0, 30000);
+        } else  {
+            WAIT_FOR_DAT_CMD_DAT_READY(pDevice, &status);
+        }
+        
+        if (!SDIO_SUCCESS(status)) {
+            ResetCmdDatLine(pDevice); 
+            goto processComplete;   
+        }
+    }
+
+    /* check for errors */
+    temp = READ_HOST_REG16(pDevice, HOST_REG_ERROR_INT_STATUS);
+    ints = READ_HOST_REG16(pDevice, HOST_REG_NORMAL_INT_STATUS);
+    if (ints & HOST_REG_NORMAL_INT_STATUS_TRANSFER_COMPLETE) {
+        DBG_PRINT(PXA_TRACE_MMC_INT, ("SDIO PCI Ellen HcdRequest clearing possible data timeout errors: 0x%X, ints: 0x%X \n",
+                                      temp, ints));
+        temp &= ~HOST_REG_ERROR_INT_STATUS_DATATIMEOUTERR;
+    }
+    WRITE_HOST_REG16(pDevice, HOST_REG_NORMAL_INT_STATUS,
+                                HOST_REG_NORMAL_INT_STATUS_CMD_COMPLETE);
+
+    UnmaskIrq(pDevice, HOST_REG_INT_STATUS_ALLOW_INSERT_REMOVE_ONLY);
+
+    if (temp != 0) {
+        if (temp & HOST_REG_ERROR_INT_STATUS_CMDTIMEOUTERR) {
+            /* toggle timeout gpio */
+            TRACE_SIGNAL_DATA_TIMEOUT(pDevice, TRUE);
+            TRACE_SIGNAL_DATA_TIMEOUT(pDevice, FALSE);
+        }
+        status = TranslateSDError(pDevice, temp);
+        /* clear any existing errors - non-synchronized clear */
+        WRITE_HOST_REG16(pDevice, HOST_REG_ERROR_INT_STATUS, HOST_REG_ERROR_INT_STATUS_ALL_ERR);        
+            /* reset statemachine, just in case */
+        ResetCmdDatLine(pDevice);            
+    } else if (pDevice->Cancel) {
+        status = SDIO_STATUS_CANCELED;   
+    } else {
+            /* get the response data for the command */
+        status = GetResponseData(pDevice, pReq);
+    }
+    
+
+        /* check for data */
+    if (SDIO_SUCCESS(status) && (pReq->Flags & SDREQ_FLAGS_DATA_TRANS)){
+       
+            /* check with the bus driver if it is okay to continue with data */
+        status = SDIO_CheckResponse(pHcd, pReq, SDHCD_CHECK_DATA_TRANS_OK);
+        
+        if (SDIO_SUCCESS(status)) {
+            /* re-enable the cmd timeout error */
+            WRITE_HOST_REG16(pDevice, HOST_REG_INT_ERR_SIGNAL_ENABLE, 
+                    HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+            if (IS_SDREQ_WRITE_DATA(pReq->Flags)) {
+                /* see if the buffer is ready, it should be */
+                ints = READ_HOST_REG16(pDevice, HOST_REG_NORMAL_INT_STATUS);
+                if (ints & HOST_REG_INT_STATUS_BUFFER_WRITE_RDY_ENABLE) {
+                    WRITE_HOST_REG16(pDevice, 
+                                    HOST_REG_NORMAL_INT_STATUS, 
+                                    HOST_REG_NORMAL_INT_STATUS_BUFFER_WRITE_RDY);
+                    
+                    /* send the initial buffer */
+                    /* transfer data */
+                    HcdTransferTxData(pDevice, pReq);
+                }
+                    /* expecting interrupt */  
+                UnmaskIrq(pDevice, HOST_REG_INT_STATUS_TRANSFER_COMPLETE_ENABLE 
+                                   | HOST_REG_INT_STATUS_BUFFER_WRITE_RDY_ENABLE);    
+            } else {
+                UnmaskIrq(pDevice, HOST_REG_INT_STATUS_TRANSFER_COMPLETE_ENABLE 
+                                   | HOST_REG_INT_STATUS_BUFFER_READ_RDY_ENABLE);    
+            }
+            DBG_PRINT(PXA_TRACE_DATA, ("SDIO PCI Ellen Pending %s transfer \n",
+                                       IS_SDREQ_WRITE_DATA(pReq->Flags) ? "TX":"RX"));
+                                       
+                /* return pending */  
+            status = SDIO_STATUS_PENDING; 
+        } else {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen : Response for Data transfer error :%d n",status));
+            ResetCmdDatLine(pDevice);  	
+        }
+    }
+
+processComplete: 
+   
+    if (status != SDIO_STATUS_PENDING) {  
+        if (!pDevice->KeepClockOn) {   
+            ClockStartStop(pDevice, CLOCK_OFF);
+        }
+        pReq->Status = status;
+        
+        if (IS_SDREQ_FORCE_DEFERRED_COMPLETE(pReq->Flags)) {
+            DBG_PRINT(PXA_TRACE_REQUESTS, ("SDIO PCI Ellen deferring completion to work item \n"));
+                /* the HCD must do the indication in a separate context and return status pending */
+            QueueEventResponse(pDevice, WORK_ITEM_IO_COMPLETE); 
+            return SDIO_STATUS_PENDING;
+        } else {        
+                /* complete the request */
+            DBG_PRINT(PXA_TRACE_REQUESTS, ("SDIO PCI Ellen Command Done, status:%d \n", status));
+        }
+        pDevice->Cancel = FALSE;  
+    }     
+
+    return status;
+} 
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  HcdConfig - HCD configuration handler
+  Input:  pHcd - HCD object
+          pConfig - configuration setting
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS HcdConfig(PSDHCD pHcd, PSDCONFIG pConfig) 
+{
+    PSDHCD_DEVICE pDevice = (PSDHCD_DEVICE)pHcd->pContext; 
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    UINT16      command;
+    UINT32 temp;
+    
+    if(pDevice->ShuttingDown) {
+        DBG_PRINT(PXA_TRACE_REQUESTS, ("SDIO PCI Ellen HcdConfig returning canceled\n"));
+        return SDIO_STATUS_CANCELED;
+    }
+
+    command = GET_SDCONFIG_CMD(pConfig);
+        
+    switch (command){
+        case SDCONFIG_GET_WP:
+            /* get write protect */
+            temp = READ_HOST_REG32(pDevice, HOST_REG_PRESENT_STATE);
+            /* if write enabled, set WP value to zero */
+            *((SDCONFIG_WP_VALUE *)pConfig->pData) = 
+                    (temp & HOST_REG_PRESENT_STATE_WRITE_ENABLED )? 0 : 1;
+            break;
+        case SDCONFIG_SEND_INIT_CLOCKS:
+            ClockStartStop(pDevice,CLOCK_ON);
+                /* should be at least 80 clocks at our lowest clock setting */
+            status = OSSleep(100);
+            ClockStartStop(pDevice,CLOCK_OFF);          
+            break;
+        case SDCONFIG_SDIO_INT_CTRL:
+            if (GET_SDCONFIG_CMD_DATA(PSDCONFIG_SDIO_INT_CTRL_DATA,pConfig)->SlotIRQEnable) {
+                {
+                    SDIO_IRQ_MODE_FLAGS irqModeFlags;
+                    UINT8               blockGapControl;
+                    
+                    irqModeFlags = GET_SDCONFIG_CMD_DATA(PSDCONFIG_SDIO_INT_CTRL_DATA,pConfig)->IRQDetectMode;
+                    if (irqModeFlags & IRQ_DETECT_4_BIT) {
+                        DBG_PRINT(SDDBG_TRACE, ("SDIO PCI Ellen: 4 Bit IRQ mode \r\n")); 
+                            /* in 4 bit mode, the clock needs to be left on */
+                        pDevice->KeepClockOn = TRUE;
+                        blockGapControl = READ_HOST_REG8(pDevice,HOST_REG_BLOCK_GAP);
+                        if (irqModeFlags & IRQ_DETECT_MULTI_BLK) {
+                            blockGapControl |= HOST_REG_INT_DETECT_AT_BLOCK_GAP;
+                            DBG_PRINT(SDDBG_TRACE, ("SDIO PCI Ellen: 4 Bit Multi-block IRQ detection enabled \r\n")); 
+                        } else {
+                                // no interrupts between blocks
+                            blockGapControl &= ~HOST_REG_INT_DETECT_AT_BLOCK_GAP;   
+                        }  
+                        WRITE_HOST_REG8(pDevice,HOST_REG_BLOCK_GAP,blockGapControl);                         
+                    } else {
+                            /* in 1 bit mode, the clock can be left off */
+                        pDevice->KeepClockOn = FALSE;   
+                    }                   
+                }
+                    /* enable detection */
+                EnableDisableSDIOIRQ(pDevice,TRUE,FALSE); 
+            } else {
+                pDevice->KeepClockOn = FALSE; 
+                EnableDisableSDIOIRQ(pDevice,FALSE,FALSE);
+            }
+            break;
+        case SDCONFIG_SDIO_REARM_INT:
+                /* re-enable IRQ detection */
+            EnableDisableSDIOIRQ(pDevice,TRUE,FALSE);
+            break;
+        case SDCONFIG_BUS_MODE_CTRL:
+            SetBusMode(pDevice, (PSDCONFIG_BUS_MODE_DATA)(pConfig->pData));
+            break;
+        case SDCONFIG_POWER_CTRL:
+            DBG_PRINT(PXA_TRACE_CONFIG, ("SDIO PCI Ellen PwrControl: En:%d, VCC:0x%X \n",
+                      GET_SDCONFIG_CMD_DATA(PSDCONFIG_POWER_CTRL_DATA,pConfig)->SlotPowerEnable,
+                      GET_SDCONFIG_CMD_DATA(PSDCONFIG_POWER_CTRL_DATA,pConfig)->SlotPowerVoltageMask));
+            status = SetPowerLevel(pDevice, 
+                     GET_SDCONFIG_CMD_DATA(PSDCONFIG_POWER_CTRL_DATA,pConfig)->SlotPowerEnable,
+                     GET_SDCONFIG_CMD_DATA(PSDCONFIG_POWER_CTRL_DATA,pConfig)->SlotPowerVoltageMask);
+            break;
+        default:
+            /* invalid request */
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen Local HCD: HcdConfig - bad command: 0x%X\n",
+                                    command));
+            status = SDIO_STATUS_INVALID_PARAMETER;
+    }
+    
+    return status;
+} 
+
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SetPowerLevel - Set power level of board
+  Input:  pDeviceContext - device context
+          On - if true turns power on, else off
+          Level - SLOT_VOLTAGE_MASK level
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS SetPowerLevel(PSDHCD_DEVICE pDeviceContext, BOOL On, SLOT_VOLTAGE_MASK Level) 
+{
+    UINT8 out;
+    UINT32 capCurrent;
+    
+    capCurrent = READ_HOST_REG32(pDeviceContext, HOST_REG_MAX_CURRENT_CAPABILITIES);
+       
+    switch (Level) {
+      case SLOT_POWER_3_3V:
+        out = HOST_REG_POWER_CONTROL_VOLT_3_3;
+            /* extract */
+        capCurrent = (capCurrent & HOST_REG_MAX_CURRENT_CAPABILITIES_3_3_MASK) >>
+                        HOST_REG_MAX_CURRENT_CAPABILITIES_3_3_SHIFT;
+        break;
+      case SLOT_POWER_3_0V:
+        out = HOST_REG_POWER_CONTROL_VOLT_3_0;            
+            /* extract */
+        capCurrent = (capCurrent & HOST_REG_MAX_CURRENT_CAPABILITIES_3_0_MASK) >>
+                        HOST_REG_MAX_CURRENT_CAPABILITIES_3_0_SHIFT;
+        break;
+      case SLOT_POWER_1_8V:
+        out = HOST_REG_POWER_CONTROL_VOLT_1_8;            
+            /* extract */
+        capCurrent = (capCurrent & HOST_REG_MAX_CURRENT_CAPABILITIES_1_8_MASK) >>
+                        HOST_REG_MAX_CURRENT_CAPABILITIES_1_8_SHIFT;       
+        break;
+      default:
+        DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen SetPowerLevel - illegal power level %d\n",
+                                (UINT)Level));
+        return SDIO_STATUS_INVALID_PARAMETER;                        
+    }
+    
+    if (capCurrent != 0) {
+            /* convert to mA and set max current */
+        pDeviceContext->Hcd.MaxSlotCurrent = capCurrent * HOST_REG_MAX_CURRENT_CAPABILITIES_SCALER;
+    } else {
+        DBG_PRINT(SDDBG_WARN, ("SDIO PCI Ellen No Current Caps value for VMask:0x%X, using 200mA \n",
+                  Level));  
+            /* set a value */          
+        pDeviceContext->Hcd.MaxSlotCurrent = 200; 
+    }
+        
+    if (On) {
+        out |= HOST_REG_POWER_CONTROL_ON;
+    }
+        
+    WRITE_HOST_REG8(pDeviceContext, HOST_REG_POWER_CONTROL, out);
+    return SDIO_STATUS_SUCCESS;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SetPowerOn - Set power on or off for card
+  Input:  pDeviceContext - device context
+          On - if true turns power on, else off
+  Output: 
+  Return: 
+  Notes: leavse the level alone
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void SetPowerOn(PSDHCD_DEVICE pDeviceContext, BOOL On) 
+{
+    /* non-synchronized read modify write */
+    UINT8 out = READ_HOST_REG8(pDeviceContext, HOST_REG_POWER_CONTROL);
+    if (On) {
+        out |= HOST_REG_POWER_CONTROL_ON;
+    } else {
+        out &= ~HOST_REG_POWER_CONTROL_ON;
+    }
+    WRITE_HOST_REG8(pDeviceContext, HOST_REG_POWER_CONTROL, out);
+    return;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  HcdInitialize - Initialize MMC controller
+  Input:  pDeviceContext - device context
+  Output: 
+  Return: 
+  Notes: I/O resources must be mapped before calling this function
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS HcdInitialize(PSDHCD_DEVICE pDeviceContext) 
+{
+    UINT32 caps;
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    UINT32 clockValue;
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO PCI Ellen HcdInitialize\n"));
+    
+        /* reset the device */
+    DBG_PRINT(SDDBG_TRACE, ("SDIO PCI Ellen HcdInitialize, resetting\n"));
+    WRITE_HOST_REG8(pDeviceContext, HOST_REG_SW_RESET, HOST_REG_SW_RESET_ALL);
+        /* wait for done */
+    while(READ_HOST_REG8(pDeviceContext, HOST_REG_SW_RESET) &  HOST_REG_SW_RESET_ALL)
+        ;
+    DBG_PRINT(SDDBG_TRACE, ("SDIO PCI Ellen HcdInitialize, reset\n"));
+            
+        /* turn off clock */
+    ClockStartStop(pDeviceContext, CLOCK_OFF);
+        /* display version info */
+    DBG_PRINT(SDDBG_TRACE, ("SDIO PCI Ellen HcdInitialize: Spec verison: %s, Vendor version: %d\n",
+       (((READ_HOST_REG16(pDeviceContext, HOST_REG_VERSION) & HOST_REG_VERSION_SPEC_VERSION_MASK )== 0)?
+        "SD Host Spec. 1.0": "SD Host Spec. **UNKNOWN**"),
+        (READ_HOST_REG16(pDeviceContext, HOST_REG_VERSION) >> HOST_REG_VERSION_VENDOR_VERSION_SHIFT) &&
+        HOST_REG_VERSION_VENDOR_VERSION_MASK));
+        
+        /* get capabilities */
+    caps = READ_HOST_REG32(pDeviceContext, HOST_REG_CAPABILITIES);
+    pDeviceContext->HighSpeed = (caps & HOST_REG_CAPABILITIES_HIGH_SPEED);
+    switch((caps & HOST_REG_CAPABILITIES_MAX_BLOCK_LEN_MASK) >> HOST_REG_CAPABILITIES_MAX_BLOCK_LEN_SHIFT) {
+        case 0x00:
+            pDeviceContext->Hcd.MaxBytesPerBlock = 512;
+            break;
+        case 0x01:
+            pDeviceContext->Hcd.MaxBytesPerBlock = 1024;
+            break;
+        case 0x02:
+            pDeviceContext->Hcd.MaxBytesPerBlock = 2048;
+            break;
+        case 0x03:
+            pDeviceContext->Hcd.MaxBytesPerBlock = 512;
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen invalid buffer length\n"));
+            status = SDIO_STATUS_DEVICE_ERROR;
+            break;
+    }
+    
+    clockValue = (caps & HOST_REG_CAPABILITIES_CLOCK_MASK) >> HOST_REG_CAPABILITIES_CLOCK_SHIFT;
+    if (clockValue != 0) {
+            /* convert to Hz */
+        pDeviceContext->BaseClock = clockValue*1000*1000;   
+    } else {
+        DBG_PRINT(SDDBG_WARN, ("SDIO PCI Ellen base clock is zero! (caps:0x%X) \n",caps));
+            /* fall through and see if a default was setup */   
+    }                                               
+    if (pDeviceContext->BaseClock == 0) {
+         DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen invalid base clock setting\n"));
+         status = SDIO_STATUS_DEVICE_ERROR;
+         return status;
+    }
+            
+    pDeviceContext->Hcd.MaxClockRate =  pDeviceContext->BaseClock;
+    DBG_PRINT(SDDBG_TRACE, ("SDIO PCI Ellen Using clock %dHz, max. block %d, high speed %s\n",
+                            pDeviceContext->BaseClock, pDeviceContext->Hcd.MaxBytesPerBlock, 
+                            (pDeviceContext->HighSpeed)? "supported" : "not supported"));
+    /* setup the supported voltages and max current */
+    pDeviceContext->Hcd.SlotVoltageCaps = 0;
+    /* max current is dynamically set based on the desired voltage, see SetPowerLevel() */
+    pDeviceContext->Hcd.MaxSlotCurrent = 0;
+
+    if (caps & HOST_REG_CAPABILITIES_VOLT_1_8) {
+        pDeviceContext->Hcd.SlotVoltageCaps |= SLOT_POWER_1_8V;
+        pDeviceContext->Hcd.SlotVoltagePreferred = SLOT_POWER_1_8V;
+    } 
+    if(caps & HOST_REG_CAPABILITIES_VOLT_3_0) {
+        pDeviceContext->Hcd.SlotVoltageCaps |= SLOT_POWER_3_0V;
+        pDeviceContext->Hcd.SlotVoltagePreferred = SLOT_POWER_3_0V;
+    }
+    if(caps & HOST_REG_CAPABILITIES_VOLT_3_3) {
+        pDeviceContext->Hcd.SlotVoltageCaps |= SLOT_POWER_3_3V;
+        pDeviceContext->Hcd.SlotVoltagePreferred = SLOT_POWER_3_3V;
+    }
+    
+    DBG_PRINT(SDDBG_TRACE, ("SDIO PCI Ellen HcdInitialize: caps: 0x%X, SlotVoltageCaps: 0x%X, MaxSlotCurrent: 0x%X\n",
+                        (UINT)caps, (UINT)pDeviceContext->Hcd.SlotVoltageCaps, (UINT)pDeviceContext->Hcd.MaxSlotCurrent));
+              
+        /* set the default timeout */
+    WRITE_HOST_REG8(pDeviceContext, HOST_REG_TIMEOUT_CONTROL, pDeviceContext->TimeOut);
+
+    /* clear any existing errors */
+    WRITE_HOST_REG16(pDeviceContext, HOST_REG_NORMAL_INT_STATUS, HOST_REG_NORMAL_INT_STATUS_ALL_ERR);
+    WRITE_HOST_REG16(pDeviceContext, HOST_REG_ERROR_INT_STATUS, HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+    /* enable error interrupts */
+    WRITE_HOST_REG16(pDeviceContext, HOST_REG_ERR_STATUS_ENABLE, HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+//??    WRITE_HOST_REG16(pDeviceContext, HOST_REG_INT_ERR_SIGNAL_ENABLE, 
+//??                HOST_REG_ERROR_INT_STATUS_ALL_ERR & ~HOST_REG_ERROR_INT_STATUS_CMDTIMEOUTERR);
+    /* leave disabled for now */
+    WRITE_HOST_REG16(pDeviceContext, HOST_REG_INT_ERR_SIGNAL_ENABLE, 
+                (UINT16)~HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+    /* enble statuses */
+    WRITE_HOST_REG16(pDeviceContext, HOST_REG_INT_STATUS_ENABLE, HOST_REG_INT_STATUS_ALL);
+    
+    
+    /* interrupts will get enabled by the caller after all of the OS dependent work is done */
+    /*UnmaskIrq(pDeviceContext, HOST_REG_INT_STATUS_ALLOW_INSERT_REMOVE_ONLY);*/
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO PCI Ellen HcdInitialize\n"));
+    return status;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  HcdDeinitialize - deactivate controller
+  Input:  pDeviceContext - context
+  Output: 
+  Return: 
+  Notes:
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void HcdDeinitialize(PSDHCD_DEVICE pDeviceContext)
+{
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO PCI Ellen HcdDeinitialize\n"));
+    pDeviceContext->KeepClockOn = FALSE;
+    MaskIrq(pDeviceContext, HOST_REG_INT_STATUS_ALL);
+    pDeviceContext->ShuttingDown = TRUE;
+    /* disable error interrupts */
+    /* clear any existing errors */
+    WRITE_HOST_REG16(pDeviceContext, HOST_REG_ERROR_INT_STATUS, HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+    /* disable error interrupts */
+    WRITE_HOST_REG16(pDeviceContext, HOST_REG_INT_ERR_SIGNAL_ENABLE, 
+                                     (UINT16)~HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+    WRITE_HOST_REG16(pDeviceContext, HOST_REG_ERR_STATUS_ENABLE, 
+                                     (UINT16)~HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+    ClockStartStop(pDeviceContext, CLOCK_OFF);
+    SetPowerOn(pDeviceContext, FALSE);
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO PCI Ellen HcdDeinitialize\n"));
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  HcdSDInterrupt - process controller interrupt
+  Input:  pDeviceContext - context
+  Output: 
+  Return: TRUE if interrupt was handled
+  Notes:
+               
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+BOOL HcdSDInterrupt(PSDHCD_DEVICE pDeviceContext) 
+{
+    UINT16      ints;
+    UINT16      errors;
+    UINT16 enables;
+    UINT16 statenables;
+    PSDREQUEST  pReq;
+    SDIO_STATUS status = SDIO_STATUS_PENDING;
+    
+    DBG_PRINT(PXA_TRACE_MMC_INT, ("+SDIO PCI Ellen HcdSDInterrupt Int handler \n"));
+    
+
+    ints = READ_HOST_REG16(pDeviceContext, HOST_REG_NORMAL_INT_STATUS);
+    errors = READ_HOST_REG16(pDeviceContext, HOST_REG_ERROR_INT_STATUS);
+    
+    if ((ints == 0) && (errors == 0)) {
+        DBG_PRINT(SDDBG_ERROR, ("-SDIO PCI Ellen HcdSDInterrupt False Interrupt! \n"));
+        return FALSE;   
+    }
+    enables = READ_HOST_REG16(pDeviceContext, HOST_REG_INT_SIGNAL_ENABLE);
+    statenables = READ_HOST_REG16(pDeviceContext, HOST_REG_INT_STATUS_ENABLE);
+    DBG_PRINT(PXA_TRACE_MMC_INT, ("SDIO PCI Ellen HcdSDInterrupt, ints: 0x%X errors: 0x%x, sigenables: 0x%X, statenable: 0x%X\n", 
+            (UINT)ints, (UINT)errors, (UINT)enables, (UINT)statenables));
+                /* clear any error statuses */
+    WRITE_HOST_REG16(pDeviceContext, HOST_REG_ERROR_INT_STATUS, errors);
+    
+    pReq = GET_CURRENT_REQUEST(&pDeviceContext->Hcd);
+    
+    if (ints & HOST_REG_NORMAL_INT_STATUS_TRANSFER_COMPLETE) {
+        DBG_PRINT(PXA_TRACE_MMC_INT, ("SDIO PCI Ellen HcdSDInterrupt clearing possible data timeout errors: 0x%X \n",
+                                      errors));
+        errors &= ~HOST_REG_ERROR_INT_STATUS_DATATIMEOUTERR;
+    }
+    /* handle the error cases first */
+    if (errors != 0) {
+        if (errors & HOST_REG_ERROR_INT_STATUS_VENDOR_MASK) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen HcdSDInterrupt vendor error 0x%X: \n", 
+                        (UINT)((errors & HOST_REG_ERROR_INT_STATUS_VENDOR_MASK) >> 
+                                HOST_REG_ERROR_INT_STATUS_VENDOR_SHIFT)));
+        }
+        if (errors & HOST_REG_ERROR_INT_STATUS_AUTOCMD12ERR) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen HcdSDInterrupt auto cmd12 error\n"));
+        }
+        if (errors & HOST_REG_ERROR_INT_STATUS_CURRENTLIMITERR) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen HcdSDInterrupt current limit error\n"));
+        }
+        if (errors & HOST_REG_ERROR_INT_STATUS_DATAENDBITERR) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen HcdSDInterrupt data end bit error\n"));
+        }
+        if (errors & HOST_REG_ERROR_INT_STATUS_DATACRCERR) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen HcdSDInterrupt data CRC error\n"));
+        }
+        if (errors & HOST_REG_ERROR_INT_STATUS_DATATIMEOUTERR) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen HcdSDInterrupt data timeout error\n"));
+        }
+        if (errors & HOST_REG_ERROR_INT_STATUS_CMDINDEXERR) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen HcdSDInterrupt CMD index error\n"));
+        }
+        if (errors & HOST_REG_ERROR_INT_STATUS_CMDENDBITERR) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen HcdSDInterrupt CMD end bit error\n")); 
+        }
+        if (errors & HOST_REG_ERROR_INT_STATUS_CRCERR) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen HcdSDInterrupt CRC error\n"));
+        }
+        if (errors & HOST_REG_ERROR_INT_STATUS_CMDTIMEOUTERR) {
+            /* toggle timeout gpio */
+            TRACE_SIGNAL_DATA_TIMEOUT(pDeviceContext, TRUE);
+            DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen HcdSDInterrupt CMD timeout error\n"));
+            TRACE_SIGNAL_DATA_TIMEOUT(pDeviceContext, FALSE);
+        }
+        if (ints & HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE) {
+              /* disable SDIO interrupt */
+            EnableDisableSDIOIRQ(pDeviceContext,FALSE,TRUE);
+        }
+        /* process insert/remove even on error conditions */
+        if (ints & 
+            (HOST_REG_INT_STATUS_CARD_INSERT_ENABLE | HOST_REG_INT_STATUS_CARD_REMOVAL_ENABLE)){
+            /* card was inserted or removed, clear interrupt */
+            WRITE_HOST_REG16(pDeviceContext, 
+                             HOST_REG_NORMAL_INT_STATUS, 
+                             HOST_REG_INT_STATUS_CARD_INSERT_ENABLE | 
+                             HOST_REG_INT_STATUS_CARD_REMOVAL_ENABLE);
+            enables = MaskIrqFromIsr(pDeviceContext, HOST_REG_INT_STATUS_ALL);
+            QueueEventResponse(pDeviceContext, WORK_ITEM_CARD_DETECT);
+        } 
+        
+    } else {
+        /* only look at ints that are enabled */
+        ints &= enables;
+        
+        //DBG_PRINT(SDDBG_TRACE, ("SDIO PCI Ellen ints: 0x%X errors: 0x%x, sigenables: 0x%X, statenable: 0x%X\n", 
+        //    (UINT)ints, (UINT)errors, (UINT)enables, (UINT)statenables));         
+        if ((pDeviceContext->CardInserted) && 
+            (ints & HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE)) {               
+              /* SD card interrupt*/
+              /* disable the interrupt, the user must clear the interrupt */
+            EnableDisableSDIOIRQ(pDeviceContext,FALSE,TRUE);            
+            QueueEventResponse(pDeviceContext, WORK_ITEM_SDIO_IRQ);
+            /* continue looking for other interrupt causes */
+        } else if (ints & HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE) {
+              /* disable bogus interrupt */
+            EnableDisableSDIOIRQ(pDeviceContext,FALSE,TRUE);
+        }
+        
+        if (ints & 
+            (HOST_REG_INT_STATUS_CARD_INSERT_ENABLE | HOST_REG_INT_STATUS_CARD_REMOVAL_ENABLE)){
+            /* card was inserted or removed, clear interrupt */
+            WRITE_HOST_REG16(pDeviceContext, 
+                             HOST_REG_NORMAL_INT_STATUS, 
+                             HOST_REG_INT_STATUS_CARD_INSERT_ENABLE | 
+                             HOST_REG_INT_STATUS_CARD_REMOVAL_ENABLE);
+            enables = MaskIrqFromIsr(pDeviceContext, HOST_REG_INT_STATUS_ALL);
+            QueueEventResponse(pDeviceContext, WORK_ITEM_CARD_DETECT);
+            return TRUE;
+        } 
+        
+        if (pDeviceContext->CardInserted && (pReq != NULL)) {
+            if (ints & HOST_REG_NORMAL_INT_STATUS_CMD_COMPLETE) {
+                WRITE_HOST_REG16(pDeviceContext, HOST_REG_NORMAL_INT_STATUS,
+                                HOST_REG_NORMAL_INT_STATUS_CMD_COMPLETE);
+                MaskIrqFromIsr(pDeviceContext, HOST_REG_INT_STATUS_CMD_COMPLETE_ENABLE);
+                    /* get the response data for the command */
+                status = GetResponseData(pDeviceContext, pReq);
+                DBG_PRINT(PXA_TRACE_MMC_INT, ("SDIO PCI Ellen HcdSDInterrupt command complete, status: %d\n",status));
+
+                if (SDIO_SUCCESS(status) && (pReq->Flags & SDREQ_FLAGS_DATA_TRANS)){
+           
+                        /* check with the bus driver if it is okay to continue with data */
+                    status = SDIO_CheckResponse(&pDeviceContext->Hcd, pReq, SDHCD_CHECK_DATA_TRANS_OK);
+
+                    /* re-enable the cmd timeout error */
+                    WRITE_HOST_REG16(pDeviceContext, HOST_REG_INT_ERR_SIGNAL_ENABLE, 
+                            HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+                    
+                    DBG_PRINT(PXA_TRACE_MMC_INT, ("SDIO PCI Ellen HcdSDInterrupt status %d\n", status));
+                    if (SDIO_SUCCESS(status)) {
+                        if (IS_SDREQ_WRITE_DATA(pReq->Flags)) {
+                                /* expecting interrupt */  
+                            DBG_PRINT(PXA_TRACE_MMC_INT, ("SDIO PCI Ellen HcdSDInterrupt unmasking write\n"));
+                            UnmaskIrqFromIsr(pDeviceContext, HOST_REG_INT_STATUS_TRANSFER_COMPLETE_ENABLE 
+                                            | HOST_REG_INT_STATUS_BUFFER_WRITE_RDY_ENABLE);    
+                        } else {
+                            DBG_PRINT(PXA_TRACE_MMC_INT, ("SDIO PCI Ellen HcdSDInterrupt unmasking read\n"));
+                            UnmaskIrqFromIsr(pDeviceContext, HOST_REG_INT_STATUS_TRANSFER_COMPLETE_ENABLE 
+                                            | HOST_REG_INT_STATUS_BUFFER_READ_RDY_ENABLE);    
+                        }
+                        DBG_PRINT(PXA_TRACE_DATA, ("SDIO PCI Ellen Pending from ISR %s transfer \n",
+                                                IS_SDREQ_WRITE_DATA(pReq->Flags) ? "TX":"RX"));               	
+                    	status = SDIO_STATUS_PENDING; 
+                    } else {
+                        DBG_PRINT(SDDBG_ERROR, ("SDIO PCI Ellen : Response for Data transfer error :%d n",status));
+                        ResetCmdDatLine(pDeviceContext);  		
+                    }
+                } else {
+                    status = SDIO_STATUS_SUCCESS; 
+                }
+            } else {
+                if (IS_SDREQ_DATA_TRANS(pReq->Flags)) {
+                    if (IS_SDREQ_WRITE_DATA(pReq->Flags)) {
+                        /* TX processing */
+                        if (ints & 
+                                (HOST_REG_NORMAL_INT_STATUS_BUFFER_WRITE_RDY)) {
+                            /* clear interrupt */
+                            WRITE_HOST_REG16(pDeviceContext, 
+                                            HOST_REG_NORMAL_INT_STATUS, 
+                                            HOST_REG_NORMAL_INT_STATUS_BUFFER_WRITE_RDY);
+                            if (pReq->DataRemaining > 0) {
+                                /* transfer data */
+                                HcdTransferTxData(pDeviceContext, pReq);
+                                return TRUE;
+                            } else {
+                                /* re-read the interrupt status message to allow us to catch the
+                                   transfer complete in one interrupt */
+                                ints = READ_HOST_REG16(pDeviceContext, HOST_REG_NORMAL_INT_STATUS);
+                                ints &= enables;
+                                DBG_PRINT(PXA_TRACE_MMC_INT, ("SDIO PCI Ellen HcdSDInterrupt re-enable \n"));
+                            }
+                        }
+                    } else {
+                        /* RX processing */
+                        if (ints & 
+                            (HOST_REG_NORMAL_INT_STATUS_BUFFER_READ_RDY)) {
+                            /* clear interrupt */
+                            WRITE_HOST_REG16(pDeviceContext, 
+                                            HOST_REG_NORMAL_INT_STATUS, 
+                                            HOST_REG_NORMAL_INT_STATUS_BUFFER_READ_RDY );
+                                /* unload fifo */
+                            HcdTransferRxData(pDeviceContext, pReq);
+                            if (pReq->DataRemaining > 0) {
+                                return TRUE;
+                            }
+                        }
+                    }
+                }
+            }
+
+            if (ints & HOST_REG_NORMAL_INT_STATUS_TRANSFER_COMPLETE) {
+                if (IS_SDREQ_DATA_TRANS(pReq->Flags)) {
+                    DBG_PRINT(PXA_TRACE_MMC_INT, ("SDIO PCI Ellen HcdSDInterrupt Transfer done \n"));
+                    /* clear interrupt */
+                    WRITE_HOST_REG16(pDeviceContext, 
+                                     HOST_REG_NORMAL_INT_STATUS, 
+                                     HOST_REG_NORMAL_INT_STATUS_TRANSFER_COMPLETE);
+                        /* if we get here without an error, we are done with the read
+                         * data operation */
+                    status = SDIO_STATUS_SUCCESS;
+                }   
+            }
+        }
+    }
+    if (errors) {
+            /* alter status based on error */
+        status = TranslateSDError(pDeviceContext, errors);   
+    } 
+    
+    if (status != SDIO_STATUS_PENDING) {
+        if (IS_SDREQ_DATA_TRANS(pReq->Flags)) {
+            if (IS_SDREQ_WRITE_DATA(pReq->Flags)) {
+                TRACE_SIGNAL_DATA_WRITE(pDeviceContext, FALSE);
+            } else {
+                TRACE_SIGNAL_DATA_READ(pDeviceContext, FALSE);
+            } 
+        } 
+            /* turn off interrupts and clock */
+        MaskIrqFromIsr(pDeviceContext, 
+                    ~(HOST_REG_INT_STATUS_ALLOW_INSERT_REMOVE_ONLY | 
+                      HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE) );
+                      
+        if (errors) {
+                /* reset statemachine */
+            ResetCmdDatLine(pDeviceContext);          
+        }
+        
+        if (!pDeviceContext->KeepClockOn) {
+            ClockStartStop(pDeviceContext, CLOCK_OFF);
+        }
+        if (pDeviceContext->CardInserted && (pReq != NULL)) {
+                /* set the status */
+            pReq->Status = status;
+                /* queue work item to notify bus driver of I/O completion */
+            QueueEventResponse(pDeviceContext, WORK_ITEM_IO_COMPLETE);
+        } else {
+            DBG_PRINT(PXA_TRACE_MMC_INT, ("SDIO PCI Ellen HcdSDInterrupt, no request to report: status %d \n",
+                                           status));
+        }
+    }
+    
+    DBG_PRINT(PXA_TRACE_MMC_INT, ("-SDIO PCI Ellen HcdSDInterrupt Int handler \n"));
+    return TRUE;
+}
+
+
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/sdio_pciellen_hcd.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/sdio_pciellen_hcd.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/sdio_pciellen_hcd.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,269 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_pciellen_hcd.h
+
+ at abstract: include file for Tokyo Electron PCI Ellen host controller, OS independent code
+ 
+ at notice: Copyright (c), 2004 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifndef __SDIO_PCIELLEN_HCD_H___
+#define __SDIO_PCIELLEN_HCD_H___
+
+#include "../../include/ctsystem.h"
+
+#include "../../include/sdio_busdriver.h"
+#include "../../include/sdio_lib.h"
+#ifdef VXWORKS
+/* Wind River VxWorks support */
+#include "vxworks/sdio_hcd_vxworks.h"
+#endif /* VXWORKS */
+
+/* QNX Neutrino suppot */
+#ifdef QNX
+#include "nto/sdio_hcd_nto.h"
+#endif /* QNX */
+
+#ifdef LINUX
+#include "linux/sdio_hcd_linux.h"
+#endif /* LINUX */
+
+enum PXA_TRACE_ENUM {
+    PXA_TRACE_CARD_INSERT = (SDDBG_TRACE + 1),
+    PXA_TRACE_DATA = (SDDBG_TRACE + 2),       
+    PXA_TRACE_REQUESTS,   
+    PXA_TRACE_CONFIG,     
+    PXA_TRACE_MMC_INT,    
+    PXA_TRACE_CLOCK,
+    PXA_TRACE_SDIO_INT,
+    PXA_TRACE_LAST
+};
+
+#define HOST_REG_BLOCK_SIZE                         0x04
+
+#define HOST_REG_BLOCK_COUNT                        0x06
+
+#define HOST_REG_ARGUMENT                           0x08
+
+#define HOST_REG_TRANSFER_MODE                      0x0C
+#define HOST_REG_TRANSFER_MODE_MULTI_BLOCK          (1 << 5)
+#define HOST_REG_TRANSFER_MODE_READ                 (1 << 4)
+#define HOST_REG_TRANSFER_MODE_AUTOCMD12            (1 << 2)
+#define HOST_REG_TRANSFER_MODE_BLOCKCOUNT_ENABLE    (1 << 1)
+#define HOST_REG_TRANSFER_MODE_DMA_ENABLE           (1 << 0)
+
+#define HOST_REG_COMMAND_REGISTER                   0x0E
+#define HOST_REG_COMMAND_REGISTER_CMD_SHIFT         8
+#define HOST_REG_COMMAND_REGISTER_DATA_PRESENT      (1 << 5)
+#define HOST_REG_COMMAND_REGISTER_CMD_INDEX_CHECK_ENABLE (1 << 4)
+#define HOST_REG_COMMAND_REGISTER_CRC_CHECK_ENABLE  (1 << 3)
+
+
+#define HOST_REG_RESPONSE                           0x10  /* 32-bit reguisters 0x10 through 0x1C */
+
+#define HOST_REG_BUFFER_DATA_PORT                   0x20
+
+#define HOST_REG_PRESENT_STATE                      0x24
+#define HOST_REG_PRESENT_STATE_WRITE_ENABLED        (1 << 19)
+#define HOST_REG_PRESENT_STATE_CARD_DETECT          (1 << 18)
+#define HOST_REG_PRESENT_STATE_CARD_STATE_STABLE    (1 << 17)
+#define HOST_REG_PRESENT_STATE_CARD_INSERTED        (1 << 16)
+#define HOST_REG_PRESENT_STATE_BUFFER_READ_ENABLE   (1 << 11)
+#define HOST_REG_PRESENT_STATE_BUFFER_WRITE_ENABLE  (1 << 10)
+#define HOST_REG_PRESENT_STATE_BUFFER_READ_TRANSFER_ACTIVE (1 << 9)
+#define HOST_REG_PRESENT_STATE_BUFFER_WRITE_TRANSFER_ACTIVE (1 << 8)
+#define HOST_REG_PRESENT_STATE_BUFFER_DAT_LINE_ACTIVE (1 << 2)
+#define HOST_REG_PRESENT_STATE_BUFFER_COMMAND_INHIBIT_DAT (1 << 1)
+#define HOST_REG_PRESENT_STATE_BUFFER_COMMAND_INHIBIT_CMD (1 << 0)
+
+
+#define HOST_REG_CONTROL                        0x28
+#define HOST_REG_CONTROL_LED_ON                 (1 << 0)
+#define HOST_REG_CONTROL_1BIT_WIDTH             0x00
+#define HOST_REG_CONTROL_4BIT_WIDTH             (1 << 1)
+#define HOST_REG_CONTROL_HI_SPEED               (1 << 2)
+
+#define HOST_REG_POWER_CONTROL                      0x29
+#define HOST_REG_POWER_CONTROL_ON                   (1 << 0)
+#define HOST_REG_POWER_CONTROL_VOLT_3_3             (7 << 1)
+#define HOST_REG_POWER_CONTROL_VOLT_3_0             (6 << 1)
+#define HOST_REG_POWER_CONTROL_VOLT_1_8             (5 << 1)
+
+#define HOST_REG_BLOCK_GAP                          0x2A
+#define HOST_REG_INT_DETECT_AT_BLOCK_GAP             (1 << 3)
+
+#define HOST_REG_CLOCK_CONTROL                      0x2C
+#define HOST_REG_CLOCK_CONTROL_CLOCK_ENABLE         (1 << 0)
+#define HOST_REG_CLOCK_CONTROL_CLOCK_STABLE         (1 << 1)
+#define HOST_REG_CLOCK_CONTROL_SD_ENABLE            (1 << 2)
+
+#define HOST_REG_TIMEOUT_CONTROL                    0x2E
+#define HOST_REG_TIMEOUT_CONTROL_DEFAULT            0x0C
+
+#define HOST_REG_SW_RESET                           0x2F
+#define HOST_REG_SW_RESET_ALL                       (1 << 0)
+#define HOST_REG_SW_RST_CMD_LINE                    (1 << 1)
+#define HOST_REG_SW_RST_DAT_LINE                    (1 << 2)
+
+#define HOST_REG_NORMAL_INT_STATUS                  0x30
+#define HOST_REG_NORMAL_INT_STATUS_ERROR            (1 << 15)
+#define HOST_REG_NORMAL_INT_STATUS_CARD_INTERRUPT   (1 << 8)
+#define HOST_REG_NORMAL_INT_STATUS_CARD_REMOVAL     (1 << 7)
+#define HOST_REG_NORMAL_INT_STATUS_CARD_INSERT      (1 << 6)
+#define HOST_REG_NORMAL_INT_STATUS_BUFFER_READ_RDY  (1 << 5)
+#define HOST_REG_NORMAL_INT_STATUS_BUFFER_WRITE_RDY (1 << 4)
+#define HOST_REG_NORMAL_INT_STATUS_DMA_INT          (1 << 3)
+#define HOST_REG_NORMAL_INT_STATUS_BLOCK_GAP        (1 << 2)
+#define HOST_REG_NORMAL_INT_STATUS_TRANSFER_COMPLETE (1 << 1)
+#define HOST_REG_NORMAL_INT_STATUS_CMD_COMPLETE     (1 << 0)
+#define HOST_REG_NORMAL_INT_STATUS_ALL_ERR          0xFFFF
+
+#define HOST_REG_ERROR_INT_STATUS                   0x32
+#define HOST_REG_ERROR_INT_STATUS_VENDOR_MASK       0xF000
+#define HOST_REG_ERROR_INT_STATUS_VENDOR_SHIFT      12
+#define HOST_REG_ERROR_INT_STATUS_AUTOCMD12ERR      (1 << 8)
+#define HOST_REG_ERROR_INT_STATUS_CURRENTLIMITERR   (1 << 7)
+#define HOST_REG_ERROR_INT_STATUS_DATAENDBITERR     (1 << 6)
+#define HOST_REG_ERROR_INT_STATUS_DATACRCERR        (1 << 5)
+#define HOST_REG_ERROR_INT_STATUS_DATATIMEOUTERR    (1 << 4)
+#define HOST_REG_ERROR_INT_STATUS_CMDINDEXERR       (1 << 3)
+#define HOST_REG_ERROR_INT_STATUS_CMDENDBITERR      (1 << 2)
+#define HOST_REG_ERROR_INT_STATUS_CRCERR            (1 << 1)
+#define HOST_REG_ERROR_INT_STATUS_CMDTIMEOUTERR     (1 << 0)
+#define HOST_REG_ERROR_INT_STATUS_ALL_ERR           0xFFFF
+
+#define HOST_REG_INT_STATUS_ENABLE                  0x34
+#define HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE    (1 << 8)
+#define HOST_REG_INT_STATUS_CARD_REMOVAL_ENABLE     (1 << 7)
+#define HOST_REG_INT_STATUS_CARD_INSERT_ENABLE      (1 << 6)
+#define HOST_REG_INT_STATUS_BUFFER_READ_RDY_ENABLE  (1 << 5)
+#define HOST_REG_INT_STATUS_BUFFER_WRITE_RDY_ENABLE (1 << 4)
+#define HOST_REG_INT_STATUS_DMA_ENABLE              (1 << 3)
+#define HOST_REG_INT_STATUS_BLOCK_GAP_ENABLE        (1 << 2)
+#define HOST_REG_INT_STATUS_TRANSFER_COMPLETE_ENABLE (1 << 1)
+#define HOST_REG_INT_STATUS_CMD_COMPLETE_ENABLE     (1 << 0)
+#define HOST_REG_INT_STATUS_ALL                      0x00F3
+#define HOST_REG_INT_STATUS_ALLOW_INSERT_REMOVE_ONLY 0x00C0
+
+#define HOST_REG_ERR_STATUS_ENABLE                  0x36
+/* same bits as HOST_REG_ERROR_INT_STATUS */
+
+#define HOST_REG_INT_SIGNAL_ENABLE                  0x38
+/* same bits as HOST_REG_INT_STATUS_ENABLE */
+
+#define HOST_REG_INT_ERR_SIGNAL_ENABLE              0x3A
+/* same bits as HOST_REG_ERR_STATUS_ENABLE */
+
+#define HOST_REG_CAPABILITIES                       0x40
+#define HOST_REG_CAPABILITIES_VOLT_1_8              (1 << 26)
+#define HOST_REG_CAPABILITIES_VOLT_3_0              (1 << 25)
+#define HOST_REG_CAPABILITIES_VOLT_3_3              (1 << 24)
+#define HOST_REG_CAPABILITIES_SUSPEND_RESUME        (1 << 23)
+#define HOST_REG_CAPABILITIES_DMA                   (1 << 22)
+#define HOST_REG_CAPABILITIES_HIGH_SPEED            (1 << 21)
+#define HOST_REG_CAPABILITIES_SUSPEND_RESUME        (1 << 23)
+#define HOST_REG_CAPABILITIES_MAX_BLOCK_LEN_MASK    0x30000
+#define HOST_REG_CAPABILITIES_MAX_BLOCK_LEN_SHIFT   16
+#define HOST_REG_CAPABILITIES_CLOCK_MASK            0x3F00
+#define HOST_REG_CAPABILITIES_CLOCK_SHIFT           8
+#define HOST_REG_CAPABILITIES_TIMEOUT_CLOCK_UNITS   (1 << 7)
+#define HOST_REG_CAPABILITIES_TIMEOUT_FREQ_MASK     0x3F
+#define HOST_REG_CAPABILITIES_TIMEOUT_FREQ_SHIFT    0
+
+#define HOST_REG_MAX_CURRENT_CAPABILITIES           0x48
+#define HOST_REG_MAX_CURRENT_CAPABILITIES_1_8_MASK  0xFF0000
+#define HOST_REG_MAX_CURRENT_CAPABILITIES_1_8_SHIFT 16
+#define HOST_REG_MAX_CURRENT_CAPABILITIES_3_0_MASK  0x00FF00
+#define HOST_REG_MAX_CURRENT_CAPABILITIES_3_0_SHIFT 8
+#define HOST_REG_MAX_CURRENT_CAPABILITIES_3_3_MASK  0x0000FF
+#define HOST_REG_MAX_CURRENT_CAPABILITIES_3_3_SHIFT 0
+#define HOST_REG_MAX_CURRENT_CAPABILITIES_SCALER    4
+
+#define HOST_REG_VERSION                            0xFE
+#define HOST_REG_VERSION_SPEC_VERSION_MASK          0xFF
+#define HOST_REG_VERSION_VENDOR_VERSION_MASK        0xFF00
+#define HOST_REG_VERSION_VENDOR_VERSION_SHIFT       8
+
+#define SDIO_BD_MAX_SLOTS                           24
+#define SDIO_SD_MAX_BLOCKS                      ((UINT)0xFFFF)
+#define SDMMC_RESP_TIMEOUT_CLOCKS          64
+#define SDMMC_DATA_TIMEOUT_CLOCKS          0xFFFF
+
+#define SPI_ENABLE_WITH_CRC  (MMC_SPI_CS_ENABLE | MMC_SPI_ENABLE | \
+                              MMC_SPI_CRC_ENABLE | MMC_SPI_SEL_CS0)
+#define SPI_ENABLE_NO_CRC  (MMC_SPI_CS_ENABLE | MMC_SPI_ENABLE | \
+                            MMC_SPI_SEL_CS0)
+
+#define SD_DEFAULT_RESPONSE_BYTES 6
+#define SD_R2_RESPONSE_BYTES      16
+
+#define SD_CLOCK_MAX_ENTRIES 9
+
+typedef struct _SD_CLOCK_TBL_ENTRY {
+    INT       ClockRateDivisor;  /* divisor */
+    UINT16    RegisterValue;     /* register value for clock divisor */  
+}SD_CLOCK_TBL_ENTRY;
+
+/* driver wide data, this driver only supports one device, 
+ * so we include the per device data here also */
+typedef struct _SDHCD_DRIVER_CONTEXT {
+    PTEXT        pDescription;       /* human readable device decsription */
+    SDLIST       DeviceList;         /* the list of current devices handled by this driver */
+    OS_SEMAPHORE DeviceListSem;      /* protection for the DeviceList */
+    UINT         DeviceCount;        /* number of devices currently installed */     
+}SDHCD_DRIVER_CONTEXT, *PSDHCD_DRIVER_CONTEXT;
+
+
+/* prototypes */
+SDIO_STATUS HcdRequest(PSDHCD pHcd);
+SDIO_STATUS HcdConfig(PSDHCD pHcd, PSDCONFIG pReq);
+SDIO_STATUS HcdInitialize(PSDHCD_DEVICE pDeviceContext);
+void HcdDeinitialize(PSDHCD_DEVICE pDeviceContext);
+BOOL HcdSDInterrupt(PSDHCD_DEVICE pDeviceContext);
+SDIO_STATUS QueueEventResponse(PSDHCD_DEVICE pDeviceContext, INT WorkItemID);
+BOOL HcdTransferTxData(PSDHCD_DEVICE pDevice, PSDREQUEST pReq);
+void HcdTransferRxData(PSDHCD_DEVICE pDevice, PSDREQUEST pReq);
+void SetPowerOn(PSDHCD_DEVICE pDeviceContext, BOOL On);
+UINT16 MaskIrq(PSDHCD_DEVICE pDevice, UINT32 Mask);
+UINT16 UnmaskIrq(PSDHCD_DEVICE pDevice, UINT32 Mask);
+UINT16 MaskIrqFromIsr(PSDHCD_DEVICE pDevice, UINT32 Mask);
+UINT16 UnmaskIrqFromIsr(PSDHCD_DEVICE pDevice, UINT32 Mask);
+void EnableDisableSDIOIRQ(PSDHCD_DEVICE pDevice, BOOL Enable, BOOL FromIsr);
+
+
+#endif /* __SDIO_PCIELLEN_HCD_H___ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/sdio_pciellen_hcd.ko
===================================================================
(Binary files differ)


Property changes on: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/sdio_pciellen_hcd.ko
___________________________________________________________________
Name: svn:mime-type
   + application/octet-stream

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/sdio_pciellen_hcd.mod.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/sdio_pciellen_hcd.mod.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_ellen/sdio_pciellen_hcd.mod.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,69 @@
+#include <linux/module.h>
+#include <linux/vermagic.h>
+#include <linux/compiler.h>
+
+MODULE_INFO(vermagic, VERMAGIC_STRING);
+
+struct module __this_module
+__attribute__((section(".gnu.linkonce.this_module"))) = {
+ .name = KBUILD_MODNAME,
+ .init = init_module,
+#ifdef CONFIG_MODULE_UNLOAD
+ .exit = cleanup_module,
+#endif
+};
+
+static const struct modversion_info ____versions[]
+__attribute_used__
+__attribute__((section("__versions"))) = {
+	{ 0x532018d2, "struct_module" },
+	{ 0xa3c0f648, "SDLIB_PrintBuffer" },
+	{ 0x4c3af445, "__request_region" },
+	{ 0x7b615504, "pci_bus_read_config_byte" },
+	{ 0x89b301d4, "param_get_int" },
+	{ 0xdc3eaf70, "iomem_resource" },
+	{ 0xf837928e, "malloc_sizes" },
+	{ 0xdd7ad35b, "pci_disable_device" },
+	{ 0x38b0c38f, "_spin_lock" },
+	{ 0x54186cbc, "SDIO_RegisterHostController" },
+	{ 0x98bd6f46, "param_set_int" },
+	{ 0x90a8e6dd, "SDIO_CheckResponse" },
+	{ 0xd533bec7, "__might_sleep" },
+	{ 0x11067792, "__spin_lock_init" },
+	{ 0x7d04a0f1, "SDIO_HandleHcdEvent" },
+	{ 0xda4008e6, "cond_resched" },
+	{ 0x1b7d4074, "printk" },
+	{ 0xb029887b, "_spin_lock_irq" },
+	{ 0x625acc81, "__down_failed_interruptible" },
+	{ 0x90651ced, "_spin_unlock" },
+	{ 0x29caedd7, "kmem_cache_alloc" },
+	{ 0x3762cb6e, "ioremap_nocache" },
+	{ 0xa596d99e, "schedule_delayed_work" },
+	{ 0x2cf190e3, "request_irq" },
+	{ 0x17d59d01, "schedule_timeout" },
+	{ 0x8bb33e7d, "__release_region" },
+	{ 0x3e378386, "pci_unregister_driver" },
+	{ 0x9bde6acc, "init_waitqueue_head" },
+	{ 0x768de002, "init_timer" },
+	{ 0x1bdd6d27, "SDIO_UnregisterHostController" },
+	{ 0x37a0cba, "kfree" },
+	{ 0x2e60bace, "memcpy" },
+	{ 0x801678, "flush_scheduled_work" },
+	{ 0xedc03953, "iounmap" },
+	{ 0x75b19ede, "__pci_register_driver" },
+	{ 0x60a4461c, "__up_wakeup" },
+	{ 0x25da070, "snprintf" },
+	{ 0xd958becb, "pci_enable_device" },
+	{ 0x8391df7e, "_spin_unlock_irq" },
+	{ 0xf20dabd8, "free_irq" },
+};
+
+static const char __module_depends[]
+__attribute_used__
+__attribute__((section(".modinfo"))) =
+"depends=sdio_lib,sdio_busdriver";
+
+MODULE_ALIAS("pci:v00001679d00003000sv*sd*bc*sc*i*");
+MODULE_ALIAS("pci:v*d*sv*sd*bc08sc05i*");
+
+MODULE_INFO(srcversion, "99791C6942B85A0E5ED808C");

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/Makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/Makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/Makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,19 @@
+ifeq ($(CT_OS_TYPE),linux)
+obj-m += sdio_pcistd_hcd.o
+
+sdio_pcistd_hcd-objs := linux/sdio_hcd_os.o ../stdhost/sdio_std_hcd.o ../stdhost/linux/sdio_std_hcd_os.o
+endif
+
+
+ifeq ($(CT_OS_TYPE),qnx)
+##QNX
+LIST=VARIANT
+ifndef QRECURSE
+QRECURSE=recurse.mk
+ifdef QCONFIG
+QRDIR=$(dir $(QCONFIG))
+endif
+endif
+include $(QRDIR)$(QRECURSE)
+endif
+  
\ No newline at end of file

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/linux/sdio_hcd_os.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/linux/sdio_hcd_os.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/linux/sdio_hcd_os.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,601 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_hcd_os.c
+
+ at abstract: Standard PCI SDIO Host Controller Driver
+
+#notes: includes module load and unload functions
+ 
+ at notice: Copyright (c), 2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+ 
+#include <ctsystem.h>
+#include <sdio_busdriver.h>
+#include "../../stdhost/linux/sdio_std_hcd_linux.h"
+#include "../../stdhost/sdio_std_hcd.h"
+#include "../../stdhost/linux/sdio_std_hcd_linux_lib.h"
+#include <linux/pci.h>
+
+#define DESCRIPTION "SDIO Standard PCI HCD"
+#define AUTHOR "Atheros Communications, Inc."
+
+static INT ForceSDMA = 0;
+module_param(ForceSDMA, int, 0444);
+MODULE_PARM_DESC(ForceSDMA, "Force Host controller to use simple DMA if available");
+
+#define PCI_CLASS_SYSTEM_SDIO    0x0805
+
+/* the config space slot number and start for SD host */
+#define PCI_CONFIG_SLOT   0x40
+#define GET_SLOT_COUNT(config)\
+    ((((config)>>4)& 0x7) +1)
+#define GET_SLOT_FIRST(config)\
+    ((config) & 0x7)
+#define PCI_CONFIG_CLASS  0x09
+#define PCI_SD_DMA_SUPPORTED 0x01  
+
+#define SDIO_PCI_BAR_MAPPED            0x01
+
+typedef enum _SDHCD_TYPE {
+    TYPE_CLASS,     /* standard class device */
+    TYPE_PCIELLEN,  /* Tokyo Electron PCI Ellen card */
+}SDHCD_TYPE, *PSDHCD_TYPE;
+
+    /* PCI devices supported */
+static const struct pci_device_id pci_ids [] = {  
+     /* Ellen I */ 
+  {
+    .vendor = 0x1679, .device = 0x3000,
+    .subvendor = PCI_ANY_ID, .subdevice = PCI_ANY_ID, 
+  },
+  {  /* Ellen II Standard Host */
+    .vendor = 0x10ee, .device = 0x0300,
+    .subvendor = 0x10b5, .subdevice = 0x9030,
+  },  
+  {  /* ENE Standard Host */
+    .vendor = 0x1524, .device = 0x0750,
+    .subvendor = PCI_ANY_ID, .subdevice = PCI_ANY_ID,
+  },
+  {  /* Standard Host */
+   PCI_DEVICE_CLASS(PCI_CLASS_SYSTEM_SDIO << 8, 0xFFFFFF00),
+  },
+ { /* end: all zeroes */ }
+};
+
+MODULE_DEVICE_TABLE (pci, pci_ids);
+
+#define SDHCD_PCI_IRQ_HOOKED 0x01
+
+static SYSTEM_STATUS Probe(struct pci_dev *pPCIdevice, const struct pci_device_id *pId);
+static void Remove(struct pci_dev *pPCIdevice);
+
+static irqreturn_t hcd_sdio_irq(int irq, void *context
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+, struct pt_regs * r);
+#else
+);
+#endif
+
+static SDIO_STATUS InitEllen(struct pci_dev *pPCIdevice);
+
+/* tell PCI bus driver about us */
+static struct pci_driver sdio_pci_driver = {
+    .name =     "sdio_pcistd_hcd",
+    .id_table = pci_ids,
+
+    .probe =    Probe,
+    .remove =   Remove,
+
+#ifdef CONFIG_PM
+    .suspend =  NULL,     
+    .resume =  NULL,      
+#endif
+};
+
+
+    /* Advanced DMA description */
+SDDMA_DESCRIPTION HcdADMADefaults = {
+    .Flags = SDDMA_DESCRIPTION_FLAG_SGDMA,
+    .MaxDescriptors = SDHCD_MAX_ADMA_DESCRIPTOR,
+    .MaxBytesPerDescriptor = SDHCD_MAX_ADMA_LENGTH,
+    .Mask = SDHCD_ADMA_ADDRESS_MASK, 
+    .AddressAlignment = SDHCD_ADMA_ALIGNMENT,
+    .LengthAlignment = SDHCD_ADMA_LENGTH_ALIGNMENT,
+};
+
+    /* simple DMA descriptions */
+SDDMA_DESCRIPTION HcdSDMADefaults = {
+    .Flags = SDDMA_DESCRIPTION_FLAG_DMA,
+    .MaxDescriptors = 1,
+    .MaxBytesPerDescriptor = SDHCD_MAX_SDMA_LENGTH,
+    .Mask = SDHCD_SDMA_ADDRESS_MASK, 
+    .AddressAlignment = SDHCD_SDMA_ALIGNMENT,
+    .LengthAlignment = SDHCD_SDMA_LENGTH_ALIGNMENT,
+};
+
+/*
+ * MapAddress - sets up the address for a given BAR
+*/
+static int MapAddress(struct pci_dev *pPCIdevice, char *pName, UINT8 bar, PSDHCD_MEMORY pAddress)
+{
+    if (pci_resource_flags(pPCIdevice, bar) & PCI_BASE_ADDRESS_SPACE  ) {
+        DBG_PRINT(SDDBG_WARN, ("SDIO STDPCI HCD: MapAddress, port I/O not supported\n"));
+        return -ENOMEM;
+    } 
+    pAddress->Raw = pci_resource_start(pPCIdevice, bar);
+    pAddress->Length = pci_resource_len(pPCIdevice, bar);
+    if (!request_mem_region (pAddress->Raw, pAddress->Length, pName)) {
+        DBG_PRINT(SDDBG_WARN, ("SDIO STDPCI HCD: MapAddress - memory in use: 0x%X(0x%X)\n",
+                               (UINT)pAddress->Raw, (UINT)pAddress->Length));
+        return -EBUSY;
+    }
+    pAddress->pMapped = ioremap_nocache(pAddress->Raw, pAddress->Length);
+    if (pAddress->pMapped == NULL) {
+        DBG_PRINT(SDDBG_WARN, ("SDIO STDPCI HCD: MapAddress - unable to map memory\n"));
+        /* cleanup region */
+        release_mem_region (pAddress->Raw, pAddress->Length);
+        return -EFAULT;
+    }
+    DBG_PRINT(SDDBG_TRACE, ("SDIO STDPCI HCD: MapAddress - mapped memory: 0x%X(0x%X) to 0x%X\n",
+                            (UINT)pAddress->Raw, (UINT)pAddress->Length, (UINT)pAddress->pMapped));
+    return 0;
+}
+
+
+/*
+ * UnmapAddress - unmaps the address 
+*/
+static void UnmapAddress(PSDHCD_MEMORY pAddress) {
+    iounmap(pAddress->pMapped);
+    release_mem_region(pAddress->Raw, pAddress->Length);
+    pAddress->pMapped = NULL;
+}
+   
+/*
+ * CleanupPCIResources - cleanup PCI resources
+*/
+static void CleanupPCIResources(struct pci_dev *pPCIdevice, 
+                                PSDHCD_INSTANCE pHcInstance)
+{    
+    if (pHcInstance->OsSpecific.InitMask & SDIO_PCI_BAR_MAPPED) {
+        UnmapAddress(&pHcInstance->OsSpecific.Address);
+        pHcInstance->OsSpecific.InitMask &= ~SDIO_PCI_BAR_MAPPED;
+    }
+}
+
+SDIO_STATUS SetUpOneSlotController(PSDHCD_CORE_CONTEXT pStdCore,
+                                   struct pci_dev *pPCIdevice,
+                                   const struct pci_device_id *pId,
+                                   UINT       SlotNumber,
+                                   int        BAR,
+                                   BOOL       AllowDMA,
+                                   SDHCD_TYPE Type)
+{
+    SDIO_STATUS status = SDIO_STATUS_ERROR;
+    TEXT nameBuffer[SDHCD_MAX_DEVICE_NAME];
+    PSDHCD_INSTANCE pHcInstance = NULL;
+    UINT startFlags = 0;
+    
+    do {   
+            /* setup the name */
+        snprintf(nameBuffer, SDHCD_MAX_DEVICE_NAME, "pcistd_%X:%i",
+                 (UINT)pPCIdevice,SlotNumber);
+         
+            /* create the instance */        
+        pHcInstance = CreateStdHcdInstance(&pPCIdevice->dev, 
+                                           SlotNumber, 
+                                           nameBuffer);
+      
+        if (NULL == pHcInstance) {
+            status = SDIO_STATUS_NO_RESOURCES;
+            break;     
+        }
+        
+        if ((pId->vendor == 0x1524) && (pId->device == 0x0750)) {            
+            /* ENE card has a card IRQ detect issue */                                 
+            pHcInstance->Idle1BitIRQ = TRUE;  
+            DBG_PRINT(SDDBG_WARN, 
+                ("SDIO STDPCI HCD: ENE Host controller detected, using 1bit IRQ mode workaround \n"));
+        }
+               
+            /* map the memory BAR */
+        status = MapAddress(pPCIdevice, 
+                            pHcInstance->Hcd.pName, 
+                            (UINT8)BAR, 
+                            &pHcInstance->OsSpecific.Address);
+                            
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, 
+               ("SDIO STDPCI HCD: Probe - failed to map device memory address %s 0x%X, status %d\n",
+                pHcInstance->Hcd.pName, (UINT)pci_resource_start(pPCIdevice, BAR),
+                status)); 
+            break;                  
+        }
+        pHcInstance->OsSpecific.InitMask |= SDIO_PCI_BAR_MAPPED;
+    
+        pHcInstance->pRegs = pHcInstance->OsSpecific.Address.pMapped;       
+    
+        if (!AllowDMA) {
+            startFlags |= START_HCD_FLAGS_FORCE_NO_DMA;
+        }
+        
+        if (ForceSDMA) {
+            startFlags |= START_HCD_FLAGS_FORCE_SDMA;
+        }
+        
+            /* startup this instance */
+        status = AddStdHcdInstance(pStdCore,
+                                   pHcInstance,
+                                   startFlags,
+                                   NULL,
+                                   &HcdSDMADefaults,
+                                   &HcdADMADefaults); 
+        
+    } while (FALSE);     
+    
+    if (!SDIO_SUCCESS(status)) {
+        if (pHcInstance != NULL) {
+            CleanupPCIResources(pPCIdevice,pHcInstance);
+            DeleteStdHcdInstance(pHcInstance);
+        }    
+    } else {
+        DBG_PRINT(SDDBG_TRACE, ("SDIO STDPCI Probe - HCD:0x%X ready! \n",(UINT)pHcInstance));    
+    }  
+    
+    return status;
+}
+
+
+static void CleanUpHcdCore(struct pci_dev *pPCIdevice, PSDHCD_CORE_CONTEXT pStdCore)
+{   
+    PSDHCD_INSTANCE pHcInstance;
+    
+        /* make sure interrupts are disabled */
+    if (pStdCore->CoreReserved1 & SDHCD_PCI_IRQ_HOOKED) {
+        pStdCore->CoreReserved1 &= ~SDHCD_PCI_IRQ_HOOKED; 
+        free_irq(pPCIdevice->irq, pStdCore);
+    }
+    
+        /* remove all hcd instances associated with this PCI device  */
+    while (1) {
+        pHcInstance = RemoveStdHcdInstance(pStdCore);
+        if (NULL == pHcInstance) {
+                /* no more instances */
+            break;    
+        }
+        DBG_PRINT(SDDBG_TRACE, (" SDIO STDPCI HCD: Remove - removed HC Instance:0x%X, HCD:0x%X\n",
+            (UINT)pHcInstance, (UINT)&pHcInstance->Hcd));
+            /* hcd is now removed, we can clean it up */            
+        CleanupPCIResources(pPCIdevice,pHcInstance); 
+        DeleteStdHcdInstance(pHcInstance);    
+    }
+    
+    DeleteStdHostCore(pStdCore);     
+}
+
+/*
+ * Probe - probe to setup our device, if present
+*/
+static SYSTEM_STATUS Probe(struct pci_dev *pPCIdevice, const struct pci_device_id *pId)
+{
+    SDIO_STATUS   status = SDIO_STATUS_SUCCESS;
+    int ii;
+    int count;
+    int firstBar;
+    int controllers = 0;
+    UINT8 config;
+    SDHCD_TYPE type = TYPE_CLASS;
+    BOOL dmaSupported = FALSE;
+    PSDHCD_CORE_CONTEXT pStdCore = NULL;
+    SYSTEM_STATUS err = 0;
+    
+    DBG_PRINT(SDDBG_TRACE, ("SDIO STDPCI HCD: Probe - probing for new device\n"));
+    if (NULL == pId) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STDPCI HCD: Probe - no device\n"));
+        return -EINVAL;
+    }
+    
+    if (pci_enable_device(pPCIdevice) < 0) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STDPCI HCD: Probe  - failed to enable device\n"));
+        return -ENODEV;
+    }
+    
+    DBG_PRINT(SDDBG_TRACE, ("SDIO STDPCI HCD: setting up card with vendor:0x%X, dev:0x%X\n",
+        pId->vendor, pId->device));
+    
+    if ((pId->vendor == pci_ids[0].vendor) && (pId->device == pci_ids[0].device)) {
+        type = TYPE_PCIELLEN;
+        DBG_PRINT(SDDBG_TRACE, ("SDIO STDPCI HCD: Probe  - found PCI Ellen type\n"));
+    }
+    
+    do {
+        
+        pStdCore = CreateStdHostCore(pPCIdevice);
+        
+        if (NULL == pStdCore) {
+            err = -ENOMEM; 
+            break;  
+        }        
+            /* get the number of slots supported and the initial BAR for it */
+        pci_read_config_byte(pPCIdevice, PCI_CONFIG_SLOT, &config);
+        count = GET_SLOT_COUNT(config);
+        firstBar = GET_SLOT_FIRST(config);
+    
+        if (type == TYPE_PCIELLEN) {
+            /* move the first bar to the right start place, the original ellen card used a PLX
+             * bridge chip which uses the first BAR for control registers */
+            firstBar = 2;
+            status = InitEllen(pPCIdevice);
+            if (!SDIO_SUCCESS(status)) {
+                err = -ENODEV;    
+                break;
+            }
+        }
+        
+        if (count > 0) {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO STDPCI: Probe - slot count: %d, first BAR: %d\n", count, firstBar));
+        } else {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO STDPCI: Probe - no slots defined, first BAR: %d\n", firstBar));
+            //pci_disable_device(pPCIdevice);
+            err = -ENODEV;
+            break;
+        }
+        /* see if bus mastering DMA is supported */
+        pci_read_config_byte(pPCIdevice, PCI_CONFIG_CLASS, &config);
+        if (config & PCI_SD_DMA_SUPPORTED) {
+            dmaSupported = TRUE;
+        }
+        DBG_PRINT(SDDBG_TRACE, ("SDIO STDPCI: Probe - DMA %s enabled in config space: %d\n", 
+                                (dmaSupported)? "is": "not", dmaSupported));
+        
+        
+            /* setup an hcd instance for each bar that we have */
+        for(ii = 0; ii < count; ii++, firstBar++) {
+            status = SetUpOneSlotController(pStdCore,
+                                            pPCIdevice,    /* pci device instance */
+                                            pId,           /* pci IDs for this instance */
+                                            ii,            /* std host slot number */
+                                            firstBar,      /* pci BAR for the registers */
+                                            dmaSupported,  /* PCI enabled DMA */
+                                            type           /* specific PCI card type */
+                                            );       
+            if (SDIO_SUCCESS(status)) {
+                controllers++;    
+            }
+        }      
+        
+        if (0 == controllers) {
+                /* if none were created, error */
+            err = -ENODEV;    
+            break;
+        }
+                
+            /* enable the single PCI controller interrupt 
+               Interrupts can be called from this point on */
+        err = request_irq(pPCIdevice->irq, hcd_sdio_irq, SA_SHIRQ,
+                          "stdhcdpci", pStdCore);
+                          
+        if (err < 0) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO STDPCI - probe, unable to map interrupt \n"));
+            break;
+        } 
+        
+        pStdCore->CoreReserved1 |= SDHCD_PCI_IRQ_HOOKED; 
+        
+            /* startup the hosts..., this will enable interrupts for card detect */
+        status = StartStdHostCore(pStdCore);
+        
+        if (!SDIO_SUCCESS(status)) {
+            err = -ENODEV;  
+            break;
+        }
+               
+    } while (FALSE);
+    
+    if (err < 0) {
+        if (pStdCore != NULL) {
+            CleanUpHcdCore(pPCIdevice,pStdCore);    
+        }
+    }
+    return err;  
+}
+
+/* Remove - remove  device
+ * perform the undo of the Probe
+*/
+static void Remove(struct pci_dev *pPCIdevice) 
+{
+    PSDHCD_CORE_CONTEXT  pStdCore;
+    
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO STDPCI HCD: Remove - removing device\n"));
+
+    pStdCore = GetStdHostCore(pPCIdevice);
+    
+    if (NULL == pStdCore) {
+        DBG_ASSERT(FALSE);
+        return;    
+    }
+
+    CleanUpHcdCore(pPCIdevice, pStdCore);
+    
+    /* DO NOT CALL : pci_disable_device(pPCIdevice); this destroys the bus mastering settings
+     * on the PCI device, on re-load DMA transfers will fail ***/
+    
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO STDPCI HCD: Remove\n"));
+    return;
+}
+
+/* SDIO interrupt request */
+static irqreturn_t hcd_sdio_irq(int irq, void *context
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+, struct pt_regs * r
+#endif
+)
+{
+    irqreturn_t retStat;
+     
+        /* call shared handling ISR in case this is a mult-slot controller using 1 PCI IRQ.
+         * if this was not a mult-slot controller or each controller has it's own system
+         * interrupt, we could call HcdSDInterrupt((PSDHCD_INSTANCE)context)) instead */
+    if (HandleSharedStdHostInterrupt((PSDHCD_CORE_CONTEXT)context)) {
+        retStat = IRQ_HANDLED;
+    } else {
+        retStat = IRQ_NONE;
+    }    
+    
+    return retStat;
+}
+
+/*
+ * module init
+*/
+static int __init sdio_pci_hcd_init(void) {
+    SYSTEM_STATUS err;
+    
+    REL_PRINT(SDDBG_TRACE, ("+SDIO STDPCI HCD: loading....\n"));
+    InitStdHostLib();
+    
+    /* register with the PCI bus driver */
+    err = pci_module_init(&sdio_pci_driver);
+    if (err < 0) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STDPCI HCD: failed to register with system PCI bus driver, %d\n",
+                                err));
+    }
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO STDPCI HCD \n"));
+    return err;
+}
+
+/*
+ * module cleanup
+*/
+static void __exit sdio_pci_hcd_cleanup(void) {
+    REL_PRINT(SDDBG_TRACE, ("+SDIO STDPCI HCD: unloaded\n"));
+    pci_unregister_driver(&sdio_pci_driver);
+    DeinitStdHostLib();
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO STDPCI HCD: leave sdio_pci_hcd_cleanup\n"));
+}
+
+/* PLX 9030 control registers */
+#define INTCSR 0x4C
+#define INTCSR_LINTi1ENABLE         (1 << 0)
+#define INTCSR_LINTi1STATUS         (1 << 2)
+#define INTCSR_LINTi2ENABLE         (1 << 3)
+#define INTCSR_LINTi2STATUS         (1 << 5)
+#define INTCSR_PCIINTENABLE         (1 << 6)
+
+#define GPIOCTRL 0x54
+#define GPIO8_PIN_DIRECTION     (1 << 25)
+#define GPIO8_DATA_MASK         (1 << 26)
+#define GPIO3_PIN_SELECT        (1 << 9)
+#define GPIO3_PIN_DIRECTION     (1 << 10)
+#define GPIO3_DATA_MASK         (1 << 11)
+#define GPIO2_PIN_SELECT        (1 << 6)
+#define GPIO2_PIN_DIRECTION     (1 << 7)
+#define GPIO2_DATA_MASK         (1 << 8)
+#define GPIO4_PIN_SELECT        (1 << 12)
+#define GPIO4_PIN_DIRECTION     (1 << 13)
+#define GPIO4_DATA_MASK         (1 << 14)
+
+#define GPIO_CONTROL(pDevice, on,  GpioMask)   \
+{                                   \
+     UINT32 temp;                    \
+     temp = READ_CONTROL_REG32((pDevice),GPIOCTRL);   \
+     if (on) temp |= (GpioMask); else temp &= ~(GpioMask);   \
+     WRITE_CONTROL_REG32((pDevice),GPIOCTRL, temp);   \
+}
+
+static SDIO_STATUS InitEllen(struct pci_dev *pPCIdevice)
+{
+    SDIO_STATUS  status = SDIO_STATUS_SUCCESS;
+    SDHCD_MEMORY controlRegs;    
+    UINT32       temp;
+    BOOL         mapped = FALSE;
+    
+    do {      
+            /* map the slots control register BAR */
+        status = MapAddress(pPCIdevice, 
+                            "EllenPCI", 
+                            (UINT8)0, 
+                            &controlRegs);
+    
+        if (!SDIO_SUCCESS(status)) {
+            break;    
+        }
+        
+        mapped = TRUE;
+        
+        temp = _READ_WORD_REG((((UINT32)controlRegs.pMapped) + INTCSR));
+        
+        DBG_PRINT(SDDBG_TRACE, ("SDIO STDPCI HCD: InitEllen Init:INTCSR - 0x%X\n", (UINT)temp));
+        
+        temp |= INTCSR_LINTi1ENABLE | INTCSR_LINTi2ENABLE | INTCSR_PCIINTENABLE;
+        
+            /* enable local to PCI interrupts */  
+        _WRITE_WORD_REG((((UINT32)controlRegs.pMapped) + INTCSR), (UINT16)temp);
+    
+        DBG_PRINT(SDDBG_TRACE, ("SDIO STDPCI HCD: InitEllen Wrote:INTCSR - 0x%X\n", (UINT)temp));
+        
+        /*
+        temp = READ_CONTROL_REG32((pHcInstance),GPIOCTRL);
+        temp &= ~(GPIO3_PIN_SELECT | GPIO2_PIN_SELECT | GPIO4_PIN_SELECT);  
+        temp |= (GPIO8_PIN_DIRECTION | GPIO3_PIN_DIRECTION | GPIO2_PIN_DIRECTION | GPIO4_PIN_DIRECTION);               
+        WRITE_CONTROL_REG32((pHcInstance),GPIOCTRL, temp);
+        DBG_PRINT(SDDBG_TRACE, ("SDIO STDPCI HCD: InitEllen GPIOCTRL - 0x%X\n", (UINT)temp));
+        */
+        
+        TRACE_SIGNAL_DATA_WRITE(pHcInstance, FALSE);
+        TRACE_SIGNAL_DATA_READ(pHcInstance, FALSE);
+        TRACE_SIGNAL_DATA_ISR(pHcInstance, FALSE);
+        TRACE_SIGNAL_DATA_IOCOMP(pHcInstance, FALSE);
+        
+    } while (FALSE);
+    
+    if (mapped) {
+        UnmapAddress(&controlRegs);     
+    }
+    return status;    
+}
+
+
+MODULE_LICENSE("GPL and additional rights");
+MODULE_DESCRIPTION(DESCRIPTION);
+MODULE_AUTHOR(AUTHOR);
+
+module_init(sdio_pci_hcd_init);
+module_exit(sdio_pci_hcd_cleanup);

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/pci_std_readme.txt
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/pci_std_readme.txt	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/pci_std_readme.txt	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,36 @@
+Codetelligence Embedded SDIO Stack Host Controller Driver Read Me.
+Copyright 2007, Atheros Communications, Inc.
+
+PCI Standard Host Controller Driver
+
+General Notes:
+-  SDIO Standard Host 2.0 compliant.
+-  SD 1 and 4 bit modes, up to 50 Mhz Clock rates and SD High Speed Mode.
+-  SDIO IRQ detection for 1,4 bit modes.
+-  Programmed I/O mode (non-DMA).
+-  Simple DMA Support
+-  Advanced DMA Support (scatter-gather)
+-  Supports Tokyo Electron Ellen II MMC8 bus widths.
+-  Card detect via slot mechanical switch
+-  Configurable idle bus clock rate
+    
+Linux Notes:
+
+Module Parameters:
+   
+    "debug" =  set module debug level (default = 4).
+    Module Debug Level:      Description of Kernel Prints:
+           7                   Setup/Initialization
+           8                   Card Insertion (if mechanical card switch implemented)
+           9                   Processing bus requests w/ Data
+          10                   Processing for all bus requests.
+          11                   Configuration Requests.
+          12                   SDIO controller IRQ processing
+          13                   Clock Control
+          14                   SDIO Card Interrupt  
+
+
+    "IdleBusClockRate" - idle bus clock rate in Hz (active when 4-bit interrupt detection is required) 
+                         Lower values will reduce power at the cost of higher interrupt detection
+                         latency.  Typical values are 2000000 (2Mhz), 4000000 (4 Mhz) 
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/sdio_pcistd_hcd.ko
===================================================================
(Binary files differ)


Property changes on: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/sdio_pcistd_hcd.ko
___________________________________________________________________
Name: svn:mime-type
   + application/octet-stream

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/sdio_pcistd_hcd.mod.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/sdio_pcistd_hcd.mod.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/pci_std/sdio_pcistd_hcd.mod.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,70 @@
+#include <linux/module.h>
+#include <linux/vermagic.h>
+#include <linux/compiler.h>
+
+MODULE_INFO(vermagic, VERMAGIC_STRING);
+
+struct module __this_module
+__attribute__((section(".gnu.linkonce.this_module"))) = {
+ .name = KBUILD_MODNAME,
+ .init = init_module,
+#ifdef CONFIG_MODULE_UNLOAD
+ .exit = cleanup_module,
+#endif
+};
+
+static const struct modversion_info ____versions[]
+__attribute_used__
+__attribute__((section("__versions"))) = {
+	{ 0x532018d2, "struct_module" },
+	{ 0xa3c0f648, "SDLIB_PrintBuffer" },
+	{ 0x4c3af445, "__request_region" },
+	{ 0x7b615504, "pci_bus_read_config_byte" },
+	{ 0x12da5bb2, "__kmalloc" },
+	{ 0xed27bb9f, "mem_map" },
+	{ 0x89b301d4, "param_get_int" },
+	{ 0xdc3eaf70, "iomem_resource" },
+	{ 0xe1b7029c, "print_tainted" },
+	{ 0xf837928e, "malloc_sizes" },
+	{ 0x38b0c38f, "_spin_lock" },
+	{ 0x54186cbc, "SDIO_RegisterHostController" },
+	{ 0x98bd6f46, "param_set_int" },
+	{ 0x90a8e6dd, "SDIO_CheckResponse" },
+	{ 0x11067792, "__spin_lock_init" },
+	{ 0x7d04a0f1, "SDIO_HandleHcdEvent" },
+	{ 0x1b7d4074, "printk" },
+	{ 0xb029887b, "_spin_lock_irq" },
+	{ 0xd1f2bae4, "dma_free_coherent" },
+	{ 0x90651ced, "_spin_unlock" },
+	{ 0xb2ef7392, "dma_alloc_coherent" },
+	{ 0x29caedd7, "kmem_cache_alloc" },
+	{ 0x3762cb6e, "ioremap_nocache" },
+	{ 0xa596d99e, "schedule_delayed_work" },
+	{ 0x2cf190e3, "request_irq" },
+	{ 0x17d59d01, "schedule_timeout" },
+	{ 0x6b2dc060, "dump_stack" },
+	{ 0x8bb33e7d, "__release_region" },
+	{ 0x3e378386, "pci_unregister_driver" },
+	{ 0x768de002, "init_timer" },
+	{ 0x1bdd6d27, "SDIO_UnregisterHostController" },
+	{ 0x37a0cba, "kfree" },
+	{ 0x801678, "flush_scheduled_work" },
+	{ 0xedc03953, "iounmap" },
+	{ 0x75b19ede, "__pci_register_driver" },
+	{ 0x25da070, "snprintf" },
+	{ 0xd958becb, "pci_enable_device" },
+	{ 0x8391df7e, "_spin_unlock_irq" },
+	{ 0xf20dabd8, "free_irq" },
+};
+
+static const char __module_depends[]
+__attribute_used__
+__attribute__((section(".modinfo"))) =
+"depends=sdio_lib,sdio_busdriver";
+
+MODULE_ALIAS("pci:v00001679d00003000sv*sd*bc*sc*i*");
+MODULE_ALIAS("pci:v000010EEd00000300sv000010B5sd00009030bc*sc*i*");
+MODULE_ALIAS("pci:v00001524d00000750sv*sd*bc*sc*i*");
+MODULE_ALIAS("pci:v*d*sv*sd*bc08sc05i*");
+
+MODULE_INFO(srcversion, "BD047B127B93B97127C299A");

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/linux/sdio_std_hcd_linux.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/linux/sdio_std_hcd_linux.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/linux/sdio_std_hcd_linux.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,142 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_std_hcd_linux.h
+
+ at abstract: include file for linux dependent code
+ 
+ at notice: Copyright (c), 2005 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifndef __SDIO_STD_HCD_LINUX_H___
+#define __SDIO_STD_HCD_LINUX_H___
+
+#include <linux/kernel.h>
+#include <linux/interrupt.h>
+#include <linux/list.h>
+#include <linux/errno.h>
+#include <linux/device.h>
+#include <asm/irq.h>
+
+#define SDHCD_MAX_DEVICE_NAME        64
+
+/* Advance DMA parameters */
+#define SDHCD_MAX_ADMA_DESCRIPTOR    32
+#define SDHCD_ADMA_DESCRIPTOR_SIZE   (SDHCD_MAX_ADMA_DESCRIPTOR * sizeof(SDHCD_SGDMA_DESCRIPTOR))
+#define SDHCD_MAX_ADMA_LENGTH        0x8000      /* up to 32KB per descriptor */    
+#define SDHCD_ADMA_ADDRESS_MASK      0xFFFFE000  /* 4KB boundaries */
+#define SDHCD_ADMA_ALIGNMENT         0xFFF       /* illegal alignment bits*/
+#define SDHCD_ADMA_LENGTH_ALIGNMENT  0x0         /* any length up to the max */
+
+/* simple DMA */
+#define SDHCD_MAX_SDMA_DESCRIPTOR    1
+#define SDHCD_MAX_SDMA_LENGTH        0x80000     /* up to 512KB for a single descriptor*/    
+#define SDHCD_SDMA_ADDRESS_MASK      0xFFFFFFFF  /* any 32 bit address */
+#define SDHCD_SDMA_ALIGNMENT         0x0         /* any 32 bit address */
+#define SDHCD_SDMA_LENGTH_ALIGNMENT  0x0         /* any length up to the max */
+
+#define HCD_COMMAND_MIN_POLLING_CLOCK 5000000
+
+/* debounce delay for slot */
+#define SD_SLOT_DEBOUNCE_MS  1000
+
+/* mapped memory address */
+typedef struct _SDHCD_MEMORY {
+    ULONG Raw;      /* start of address range */
+    ULONG Length;   /* length of range */
+    PVOID pMapped;  /* the mapped address */
+}SDHCD_MEMORY, *PSDHCD_MEMORY;
+
+typedef struct _SDHCD_OS_SPECIFIC {
+    SDHCD_MEMORY Address;               /* memory address of this device */ 
+    spinlock_t   RegAccessLock;         /* use to protect registers when needed */
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+    struct work_struct iocomplete_work; /* work item definitions */
+    struct work_struct carddetect_work; /* work item definintions */
+    struct work_struct sdioirq_work;    /* work item definintions */
+#else
+    struct delayed_work iocomplete_work; /* work item definitions */ 
+    struct delayed_work carddetect_work; /* work item definintions */
+    struct delayed_work sdioirq_work;    /* work item definintions */
+#endif
+    spinlock_t   Lock;                  /* general purpose lock against the ISR */
+    DMA_ADDRESS  hDmaBuffer;            /* handle for data buffer */
+    PUINT8       pDmaBuffer;            /* virtual address of DMA command buffer */
+    PSDDMA_DESCRIPTOR pDmaList;         /* in use scatter-gather list */
+    UINT         SGcount;               /* count of in-use scatter gather list */
+    UINT         SlotNumber;            /* the STD-host defined slot number assigned to this instance */
+/* everything below this line is used by the implementation that uses this STD core */
+    UINT16        InitMask;             /* implementation specific portion init mask */
+    UINT32        ImpSpecific0;         /* implementation specific storage */           
+    UINT32        ImpSpecific1;         /* implementation specific storage */ 
+} SDHCD_OS_SPECIFIC, *PSDHCD_OS_SPECIFIC;
+
+
+#define WORK_ITEM_IO_COMPLETE  0
+#define WORK_ITEM_CARD_DETECT  1
+#define WORK_ITEM_SDIO_IRQ     2
+ 
+#define READ_HOST_REG32(pHcInstance, OFFSET)  \
+    _READ_DWORD_REG((((UINT32)((pHcInstance)->pRegs))) + (OFFSET))
+#define WRITE_HOST_REG32(pHcInstance, OFFSET, VALUE) \
+    _WRITE_DWORD_REG((((UINT32)((pHcInstance)->pRegs))) + (OFFSET),(VALUE))
+#define READ_HOST_REG16(pHcInstance, OFFSET)  \
+    _READ_WORD_REG((((UINT32)((pHcInstance)->pRegs))) + (OFFSET))
+#define WRITE_HOST_REG16(pHcInstance, OFFSET, VALUE) \
+    _WRITE_WORD_REG((((UINT32)((pHcInstance)->pRegs))) + (OFFSET),(VALUE))
+#define READ_HOST_REG8(pHcInstance, OFFSET)  \
+    _READ_BYTE_REG((((UINT32)((pHcInstance)->pRegs))) + (OFFSET))
+#define WRITE_HOST_REG8(pHcInstance, OFFSET, VALUE) \
+    _WRITE_BYTE_REG((((UINT32)((pHcInstance)->pRegs))) + (OFFSET),(VALUE))
+
+#define TRACE_SIGNAL_DATA_WRITE(pHcInstance, on) 
+#define TRACE_SIGNAL_DATA_READ(pHcInstance, on) 
+#define TRACE_SIGNAL_DATA_ISR(pHcInstance, on) 
+#define TRACE_SIGNAL_DATA_IOCOMP(pHcInstance, on) 
+#define TRACE_SIGNAL_DATA_TIMEOUT(pHcInstance, on) 
+
+
+
+#define IS_HCD_ADMA(pHc) ((pHc)->Hcd.pDmaDescription != NULL) && \
+                           ((pHc)->Hcd.pDmaDescription->Flags & SDDMA_DESCRIPTION_FLAG_SGDMA)
+
+#define IS_HCD_SDMA(pHc) (((pHc)->Hcd.pDmaDescription != NULL) &&   \
+                           (((pHc)->Hcd.pDmaDescription->Flags &   \
+                             (SDDMA_DESCRIPTION_FLAG_SGDMA | SDDMA_DESCRIPTION_FLAG_DMA)) == \
+                             SDDMA_DESCRIPTION_FLAG_DMA))
+
+#endif 

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/linux/sdio_std_hcd_linux_lib.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/linux/sdio_std_hcd_linux_lib.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/linux/sdio_std_hcd_linux_lib.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,83 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_std_hcd_linux_lib.h
+
+ at abstract: include file for linux std host core APIs
+ 
+ at notice: Copyright (c), 2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifndef SDIO_STD_HCD_LINUX_LIB_H_
+#define SDIO_STD_HCD_LINUX_LIB_H_
+
+typedef struct _SDHCD_CORE_CONTEXT {
+    SDLIST       List;
+    PVOID        pBusContext;        /* bus context this one belongs to */
+    SDLIST       SlotList;         /* the list of current slots handled by this driver */
+    spinlock_t   SlotListLock;     /* protection for the slot List */
+    UINT         SlotCount;        /* number of slots currently installed */  
+    /* everything below this line is reserved for the user of this library */
+    UINT32       CoreReserved1; 
+    UINT32       CoreReserved2; 
+}SDHCD_CORE_CONTEXT, *PSDHCD_CORE_CONTEXT;
+
+void  InitStdHostLib(void);
+void  DeinitStdHostLib(void);
+PSDHCD_CORE_CONTEXT CreateStdHostCore(PVOID pBusContext);
+void  DeleteStdHostCore(PSDHCD_CORE_CONTEXT pStdCore);
+PSDHCD_CORE_CONTEXT GetStdHostCore(PVOID pBusContext);
+
+INT GetCurrentHcdInstanceCount(PSDHCD_CORE_CONTEXT pStdCore);
+PSDHCD_INSTANCE CreateStdHcdInstance(POS_DEVICE pOSDevice, 
+                                     UINT       SlotNumber, 
+                                     PTEXT      pName);
+void DeleteStdHcdInstance(PSDHCD_INSTANCE pHcInstance);
+#define START_HCD_FLAGS_FORCE_NO_DMA  0x01  /* don't use DMA even though capabilities indicate it can */
+#define START_HCD_FLAGS_FORCE_SDMA    0x02  /* force SDMA even though the capabilities show advance DMA support */
+
+typedef SDIO_STATUS (*PPLAT_OVERRIDE_CALLBACK)(PSDHCD_INSTANCE);
+SDIO_STATUS AddStdHcdInstance(PSDHCD_CORE_CONTEXT pStdCore, 
+                              PSDHCD_INSTANCE pHcInstance, 
+                              UINT  Flags, 
+                              PPLAT_OVERRIDE_CALLBACK pCallBack,                                
+                              SDDMA_DESCRIPTION       *pSDMADescrip,
+                              SDDMA_DESCRIPTION       *pADMADescrip);                              
+SDIO_STATUS StartStdHostCore(PSDHCD_CORE_CONTEXT pStdCore);  
+PSDHCD_INSTANCE RemoveStdHcdInstance(PSDHCD_CORE_CONTEXT pStdCore);
+BOOL HandleSharedStdHostInterrupt(PSDHCD_CORE_CONTEXT pStdCore);
+#endif /*SDIO_STD_HCD_LINUX_LIB_H_*/

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/linux/sdio_std_hcd_os.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/linux/sdio_std_hcd_os.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/linux/sdio_std_hcd_os.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,899 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_std_hcd_os.c
+
+ at abstract: Generic Linux implementation for the Standard SDIO Host Controller Driver
+
+#notes: 
+ 
+ at notice: Copyright (c), 2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+
+/* debug level for this module*/
+#define DBG_DECLARE 4;
+#include <ctsystem.h>
+#include "../sdio_std_hcd.h"
+#include "sdio_std_hcd_linux_lib.h"
+#include <linux/dma-mapping.h>
+#include <linux/workqueue.h>
+#include <linux/delay.h>
+
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,19)
+#define ATH_INIT_WORK(_t, _f, _c)      INIT_WORK((_t), (void (*)(void *))(_f), (_c));
+#else
+#define ATH_INIT_WORK(_t, _f, _c)      INIT_DELAYED_WORK((_t), (_f));
+#endif
+
+static void hcd_iocomplete_wqueue_handler(
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+void *context); 
+#else
+struct work_struct *work);
+#endif
+
+static void hcd_carddetect_wqueue_handler(
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+void *context); 
+#else
+struct work_struct *work);   
+#endif
+
+static void hcd_sdioirq_wqueue_handler(
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+void *context); 
+#else
+struct work_struct *work);   
+#endif
+
+static SDIO_STATUS SetupDmaBuffers(PSDHCD_INSTANCE pHcInstance);
+static void DeinitializeStdHcdInstance(PSDHCD_INSTANCE pHcInstance);
+
+/* debug print parameter */
+module_param(debuglevel, int, 0644);
+MODULE_PARM_DESC(debuglevel, "debuglevel 0-7, controls debug prints");
+
+    /* defaults for all std hosts, various attributes will be cleared based
+     * on values from the capabilities register */
+#define DEFAULT_ATTRIBUTES (SDHCD_ATTRIB_BUS_1BIT      | \
+                            SDHCD_ATTRIB_BUS_4BIT      | \
+                            SDHCD_ATTRIB_MULTI_BLK_IRQ | \
+                            SDHCD_ATTRIB_AUTO_CMD12    | \
+                            SDHCD_ATTRIB_POWER_SWITCH  | \
+                            SDHCD_ATTRIB_BUS_MMC8BIT   | \
+                            SDHCD_ATTRIB_SD_HIGH_SPEED | \
+                            SDHCD_ATTRIB_MMC_HIGH_SPEED)
+                            
+static UINT32 hcdattributes = DEFAULT_ATTRIBUTES;
+module_param(hcdattributes, int, 0644);
+MODULE_PARM_DESC(hcdattributes, "STD Host Attributes");
+static INT BaseClock = 0;
+module_param(BaseClock, int, 0444);
+MODULE_PARM_DESC(BaseClock, "BaseClock Hz when not present in configuration");
+static UINT32 timeout = HOST_REG_TIMEOUT_CONTROL_DEFAULT;
+module_param(timeout, int, 0644);
+MODULE_PARM_DESC(timeout, "STD Host data timeout control");
+static UINT32 ClockSpinLimit = HCD_COMMAND_MIN_POLLING_CLOCK;
+module_param(ClockSpinLimit, int, 0644);
+MODULE_PARM_DESC(ClockSpinLimit, "STD Host command clock spin time");
+
+static UINT32 IdleBusClockRate = 0;  /* currently disabled by default */
+module_param(IdleBusClockRate, int, 0644);
+MODULE_PARM_DESC(IdleBusClockRate, "STD Host idle clock rate when in 4-bit mode");
+
+static UINT32 CardDetectDebounce = SD_SLOT_DEBOUNCE_MS;  /* default to 1 second */
+module_param(CardDetectDebounce, int, 0644);
+MODULE_PARM_DESC(CardDetectDebounce, "STD Host card detect debounce interval (MS)");
+
+
+typedef struct _STDHCD_DEV {
+    SDLIST       CoreList;           /* the list of core contexts */
+    spinlock_t   CoreListLock;       /* protection for the list */  
+}STDHCD_DEV, *PSTDHCD_DEV;
+
+STDHCD_DEV StdDevices;
+
+void  InitStdHostLib()
+{
+    ZERO_POBJECT(&StdDevices);
+    SDLIST_INIT(&StdDevices.CoreList);
+    spin_lock_init(&StdDevices.CoreListLock); 
+}
+
+void  DeinitStdHostLib()
+{
+    
+    
+}
+
+PSDHCD_CORE_CONTEXT CreateStdHostCore(PVOID pBusContext)
+{
+    PSDHCD_CORE_CONTEXT pStdCore = NULL;
+    
+    do {
+        pStdCore = KernelAlloc(sizeof(SDHCD_CORE_CONTEXT));  
+        if (NULL == pStdCore) {
+            break;    
+        }
+        ZERO_POBJECT(pStdCore);
+        SDLIST_INIT(&pStdCore->SlotList);
+        spin_lock_init(&pStdCore->SlotListLock); 
+        pStdCore->pBusContext = pBusContext;
+        
+            /* add it */
+        spin_lock_irq(&StdDevices.CoreListLock);               
+        SDListInsertHead(&StdDevices.CoreList, &pStdCore->List); 
+        spin_unlock_irq(&StdDevices.CoreListLock);     
+    } while (FALSE);
+    
+    return pStdCore;
+}
+
+void DeleteStdHostCore(PSDHCD_CORE_CONTEXT pStdCore)
+{   
+    spin_lock_irq(&StdDevices.CoreListLock);   
+        /* remove */            
+    SDListRemove(&pStdCore->List);
+    spin_unlock_irq(&StdDevices.CoreListLock);     
+    
+    KernelFree(pStdCore);
+}
+
+/* find the std core associated with this bus context */
+PSDHCD_CORE_CONTEXT GetStdHostCore(PVOID pBusContext)
+{
+    PSDLIST             pListItem;
+    PSDHCD_CORE_CONTEXT pStdCore = NULL;
+    
+    spin_lock_irq(&StdDevices.CoreListLock);    
+    
+    do {
+        if (SDLIST_IS_EMPTY(&StdDevices.CoreList)) {
+            break;    
+        }        
+          
+        SDITERATE_OVER_LIST(&StdDevices.CoreList, pListItem) {
+            pStdCore = CONTAINING_STRUCT(pListItem, SDHCD_CORE_CONTEXT, List);
+            if (pStdCore->pBusContext == pBusContext) {
+                    /* found it */
+                break;   
+            } 
+            pStdCore = NULL; 
+        }
+        
+    } while (FALSE);
+    
+    spin_unlock_irq(&StdDevices.CoreListLock);    
+    return pStdCore;
+}
+
+/* create a standard host memory instance */
+PSDHCD_INSTANCE CreateStdHcdInstance(POS_DEVICE pOSDevice, 
+                                     UINT       SlotNumber, 
+                                     PTEXT      pName)
+{
+    PSDHCD_INSTANCE pHcInstance = NULL;
+    BOOL            success = FALSE;
+    
+    do {
+            /* allocate an instance for this new device */
+        pHcInstance =  (PSDHCD_INSTANCE)KernelAlloc(sizeof(SDHCD_INSTANCE));
+        
+        if (pHcInstance == NULL) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO STD Host: CreateStdHcdInstance - no memory for instance\n"));
+            break;
+        }
+        
+        ZERO_POBJECT(pHcInstance);
+        SET_SDIO_STACK_VERSION(&pHcInstance->Hcd);
+        
+        pHcInstance->OsSpecific.SlotNumber = SlotNumber;
+        spin_lock_init(&pHcInstance->OsSpecific.Lock);
+        spin_lock_init(&pHcInstance->OsSpecific.RegAccessLock);
+            /* initialize work items */
+        ATH_INIT_WORK(&(pHcInstance->OsSpecific.iocomplete_work), hcd_iocomplete_wqueue_handler, pHcInstance);
+        ATH_INIT_WORK(&(pHcInstance->OsSpecific.carddetect_work), hcd_carddetect_wqueue_handler, pHcInstance);
+        ATH_INIT_WORK(&(pHcInstance->OsSpecific.sdioirq_work), hcd_sdioirq_wqueue_handler, pHcInstance);
+            /* allocate space for the name */ 
+        pHcInstance->Hcd.pName = (PTEXT)KernelAlloc(strlen(pName)+1);
+        if (NULL == pHcInstance->Hcd.pName) {
+            break;    
+        }        
+        strcpy(pHcInstance->Hcd.pName,pName);
+            /* set OS device for DMA allocations and mapping */
+        pHcInstance->Hcd.pDevice = pOSDevice;
+        pHcInstance->Hcd.Attributes = hcdattributes;
+        pHcInstance->Hcd.MaxBlocksPerTrans = SDIO_SD_MAX_BLOCKS;
+        pHcInstance->Hcd.pContext = pHcInstance;
+        pHcInstance->Hcd.pRequest = HcdRequest;
+        pHcInstance->Hcd.pConfigure = HcdConfig;
+        pHcInstance->Hcd.pModule = THIS_MODULE;
+        pHcInstance->BaseClock = BaseClock;
+        pHcInstance->TimeOut = timeout;
+        pHcInstance->ClockSpinLimit = ClockSpinLimit;
+        pHcInstance->IdleBusClockRate = IdleBusClockRate;
+        pHcInstance->CardDetectDebounceMS = CardDetectDebounce;
+        success = TRUE;
+    } while (FALSE);
+    
+    if (!success && (pHcInstance != NULL)) {
+        DeleteStdHcdInstance(pHcInstance);
+    }
+    
+    return pHcInstance;
+}
+
+/*
+ * AddStdHcdInstance - add the std host controller instance
+*/
+SDIO_STATUS AddStdHcdInstance(PSDHCD_CORE_CONTEXT pStdCore, 
+                              PSDHCD_INSTANCE pHcInstance, 
+                              UINT Flags,
+                              PPLAT_OVERRIDE_CALLBACK pCallBack,                                
+                              SDDMA_DESCRIPTION       *pSDMADescrip,
+                              SDDMA_DESCRIPTION       *pADMADescrip)
+{
+    
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    
+    do { 
+                
+        if (!SDIO_SUCCESS((status = HcdInitialize(pHcInstance)))) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST: StartStdHcdInstance - failed to init HW, status =%d\n",status));  
+            break;
+        }    
+            /* mark that the hardware was initialized */
+        pHcInstance->InitStateMask |= SDHC_HW_INIT;
+                  
+        pHcInstance->Hcd.pDmaDescription = NULL;
+        
+        if (!(Flags & START_HCD_FLAGS_FORCE_NO_DMA)) {
+                /* check DMA parameters discovered by HcdInitialize */
+            if (!(Flags & START_HCD_FLAGS_FORCE_SDMA) && 
+                  (pHcInstance->Caps & HOST_REG_CAPABILITIES_ADMA) &&
+                  (pADMADescrip != NULL)) {
+                DBG_PRINT(SDDBG_TRACE, ("SDIO STD HOST: StartStdHcdInstance - using Advanced DMA\n"));
+                    /* copy the DMA description for advanced DMA */
+                memcpy(&pHcInstance->DmaDescription, pADMADescrip, sizeof(SDDMA_DESCRIPTION));
+                    /* set DMA description */
+                pHcInstance->Hcd.pDmaDescription = &pHcInstance->DmaDescription;
+            } else if ((pHcInstance->Caps & HOST_REG_CAPABILITIES_DMA) &&
+                       (pSDMADescrip != NULL)) {
+                DBG_PRINT(SDDBG_TRACE, ("SDIO STD HOST: StartStdHcdInstance - using Simple DMA\n"));
+                    /* copy the DMA description for advanced DMA */
+                memcpy(&pHcInstance->DmaDescription, pSDMADescrip, sizeof(SDDMA_DESCRIPTION));
+                    /* set DMA description */
+                pHcInstance->Hcd.pDmaDescription = &pHcInstance->DmaDescription;
+            }
+        }
+        
+        if (IS_HCD_ADMA(pHcInstance)) {
+                /* setup DMA buffers for scatter-gather descriptor tables used in advanced DMA */
+            status = SetupDmaBuffers(pHcInstance);
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO STD Host : StartStdHcdInstance - failed to setup DMA buffer\n"));
+                break;
+            }
+        }  
+        
+        if (pCallBack != NULL) {
+                /* allow the platform to override any settings */
+            status = pCallBack(pHcInstance);
+            if (!SDIO_SUCCESS(status)) {
+                break;    
+            }
+        }             
+            /* add this instance to our list, we will start the HCDs later */
+            /* protect the devicelist */
+        spin_lock_irq(&pStdCore->SlotListLock);               
+        SDListInsertHead(&pStdCore->SlotList, &pHcInstance->List); 
+        pStdCore->SlotCount++;
+        spin_unlock_irq(&pStdCore->SlotListLock);     
+        
+    } while (FALSE);
+        
+    
+    if (SDIO_SUCCESS(status)) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD Host - ready! \n"));
+    } else {
+            /* undo everything */
+        DeinitializeStdHcdInstance(pHcInstance);
+    }
+    
+    return status;  
+}
+
+INT GetCurrentHcdInstanceCount(PSDHCD_CORE_CONTEXT pStdCore)
+{
+    return pStdCore->SlotCount;   
+}
+
+static void DeinitializeStdHcdInstance(PSDHCD_INSTANCE pHcInstance)
+{
+        /* wait for any of our work items to run */
+    flush_scheduled_work();  
+    
+    if (pHcInstance->InitStateMask & SDHC_REGISTERED) {
+        SDIO_UnregisterHostController(&pHcInstance->Hcd);
+        pHcInstance->InitStateMask &= ~SDHC_REGISTERED;
+    }      
+    
+    if (pHcInstance->InitStateMask & SDHC_HW_INIT) {
+        HcdDeinitialize(pHcInstance);
+        pHcInstance->InitStateMask &= ~SDHC_HW_INIT;
+    }        
+        /* free any DMA resources */
+    if (pHcInstance->OsSpecific.hDmaBuffer != (DMA_ADDRESS)NULL) {
+        dma_free_coherent(pHcInstance->Hcd.pDevice, 
+                          SDHCD_ADMA_DESCRIPTOR_SIZE,
+                          pHcInstance->OsSpecific.pDmaBuffer,
+                          pHcInstance->OsSpecific.hDmaBuffer);
+        pHcInstance->OsSpecific.hDmaBuffer = (DMA_ADDRESS)NULL;
+        pHcInstance->OsSpecific.pDmaBuffer = NULL;
+    }     
+    
+}
+void DeleteStdHcdInstance(PSDHCD_INSTANCE pHcInstance)
+{
+    if (pHcInstance->Hcd.pName != NULL) {
+        KernelFree(pHcInstance->Hcd.pName);
+        pHcInstance->Hcd.pName = NULL;
+    }            
+        
+    KernelFree(pHcInstance);    
+}
+
+
+/*
+ * RemoveStdHcdInstance - remove the hcd instance
+*/
+PSDHCD_INSTANCE RemoveStdHcdInstance(PSDHCD_CORE_CONTEXT pStdCore)
+{
+    PSDHCD_INSTANCE pHcInstanceToRemove = NULL;
+    PSDLIST pListItem;
+    
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO STD HCD: RemoveStdHcdInstance\n"));
+    
+        /* protect the devicelist */
+    spin_lock_irq(&pStdCore->SlotListLock);
+    
+    do {        
+        pListItem = SDListRemoveItemFromHead(&pStdCore->SlotList);
+        
+        if (NULL == pListItem) {
+            break;    
+        }
+    
+        pHcInstanceToRemove = CONTAINING_STRUCT(pListItem,SDHCD_INSTANCE,List);
+        
+        pStdCore->SlotCount--;
+    
+    } while (FALSE);
+    
+    spin_unlock_irq(&pStdCore->SlotListLock);
+    
+    if (pHcInstanceToRemove != NULL) {
+        DBG_PRINT(SDDBG_TRACE, (" SDIO STD HCD: Deinitializing 0x%X \n",(UINT)pHcInstanceToRemove));
+        DeinitializeStdHcdInstance(pHcInstanceToRemove);   
+    }           
+           
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO STD HCD: RemoveStdHcdInstance\n"));
+    
+        /* return the instance we found */
+    return pHcInstanceToRemove;
+}
+
+/*
+ * SetupDmaBuffers - allocate required DMA buffers
+ * 
+*/
+static SDIO_STATUS SetupDmaBuffers(PSDHCD_INSTANCE pHcInstance)
+{
+    if (pHcInstance->Hcd.pDmaDescription == NULL) {
+        DBG_ASSERT(FALSE);
+        return SDIO_STATUS_NO_RESOURCES;
+    }    
+    if (pHcInstance->Hcd.pDmaDescription->Flags & SDDMA_DESCRIPTION_FLAG_SGDMA) {
+        /* we are only supporting scatter-gather DMA in this driver */
+        /* allocate a DMA buffer large enough for the command buffers and the data buffers */
+        pHcInstance->OsSpecific.pDmaBuffer =  dma_alloc_coherent(pHcInstance->Hcd.pDevice, 
+                                                  SDHCD_ADMA_DESCRIPTOR_SIZE, 
+                                                  &pHcInstance->OsSpecific.hDmaBuffer, 
+                                                  GFP_DMA);
+        DBG_PRINT(SDDBG_TRACE, ("SDIO STD Host : SetupDmaBuffers - pDmaBuffer: 0x%X, hDmaBuffer: 0x%X\n",
+                                (UINT)pHcInstance->OsSpecific.pDmaBuffer , (UINT)pHcInstance->OsSpecific.hDmaBuffer ));
+        if (pHcInstance->OsSpecific.pDmaBuffer == NULL) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO STD Host : SetupDmaBuffers - unable to get DMA buffer\n"));
+            return SDIO_STATUS_NO_RESOURCES;
+        }        
+        return SDIO_STATUS_SUCCESS;
+    } else {
+        DBG_PRINT(SDDBG_TRACE, ("SDIO STD Host : SetupDmaBuffers - invalid DMA type\n"));
+        return SDIO_STATUS_INVALID_PARAMETER;
+    }
+    
+}
+
+/*
+ * QueueEventResponse - queues an event in a process context back to the bus driver
+ * 
+*/
+SDIO_STATUS QueueEventResponse(PSDHCD_INSTANCE pHcInstance, INT WorkItemID)
+{
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+     struct work_struct *work;
+#else
+    struct delayed_work *work;
+#endif
+
+    if (pHcInstance->ShuttingDown) {
+        return SDIO_STATUS_CANCELED;
+    }
+
+    switch (WorkItemID) {
+        case WORK_ITEM_IO_COMPLETE:
+            work = &pHcInstance->OsSpecific.iocomplete_work;
+            break;
+        case WORK_ITEM_CARD_DETECT:
+            work = &pHcInstance->OsSpecific.carddetect_work;
+            break;
+        case WORK_ITEM_SDIO_IRQ:
+            work = &pHcInstance->OsSpecific.sdioirq_work;
+            break;
+        default:
+            DBG_ASSERT(FALSE);
+            return SDIO_STATUS_ERROR;
+            break;  
+    }
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+    if (schedule_work(work) > 0)
+#else
+    if (schedule_delayed_work(work,0) > 0) 
+#endif
+    {
+        if (WORK_ITEM_IO_COMPLETE == WorkItemID) {            
+            pHcInstance->RequestCompleteQueued = TRUE;
+        }
+        return SDIO_STATUS_SUCCESS;
+    } else {
+        return SDIO_STATUS_PENDING;
+    }
+}
+
+/*
+ * hcd_iocomplete_wqueue_handler - the work queue for io completion
+*/
+static void hcd_iocomplete_wqueue_handler(
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,20)
+void *context)
+ {
+     PSDHCD_INSTANCE pHcInstance = (PSDHCD_INSTANCE)context;
+#else
+struct work_struct *work)
+{
+    PSDHCD_INSTANCE pHcInstance =
+      container_of( work, SDHCD_INSTANCE, OsSpecific.iocomplete_work.work );
+#endif
+ 
+    pHcInstance->RequestCompleteQueued = FALSE;
+    
+    if (!pHcInstance->ShuttingDown) {
+        SDIO_HandleHcdEvent(&pHcInstance->Hcd, EVENT_HCD_TRANSFER_DONE);
+    }
+}
+
+/*
+ * hcd_carddetect_handler - the work queue for card detect debouncing
+*/
+static void hcd_carddetect_wqueue_handler(
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,20)
+struct work_struct *work)
+{
+    PSDHCD_INSTANCE context =
+      container_of( work, SDHCD_INSTANCE, OsSpecific.carddetect_work.work );
+#else
+void *context)
+ {
+#endif
+
+    ProcessDeferredCardDetect((PSDHCD_INSTANCE)context);
+}
+
+/*
+ * hcd_sdioirq_handler - the work queue for handling SDIO IRQ
+*/
+static void hcd_sdioirq_wqueue_handler(
+#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,19)
+void *context)
+ {
+PSDHCD_INSTANCE pHcInstance = (PSDHCD_INSTANCE)context;
+#else
+struct work_struct *work)
+{
+    PSDHCD_INSTANCE pHcInstance  =
+      container_of( work, SDHCD_INSTANCE, OsSpecific.sdioirq_work.work );
+#endif
+
+    DBG_PRINT(STD_HOST_TRACE_SDIO_INT, ("SDIO STD HOST: hcd_sdioirq_wqueue_handler \n"));
+    if (!pHcInstance->ShuttingDown) {
+        SDIO_HandleHcdEvent(&pHcInstance->Hcd, EVENT_HCD_SDIO_IRQ_PENDING);
+    }
+}
+
+
+
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  UnmaskIrq - Unmask SD interrupts
+  Input:    pHcInstance - host controller
+            Mask - mask value
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+UINT16 UnmaskIrq(PSDHCD_INSTANCE pHcInstance, UINT32 Mask, BOOL FromIsr)
+{
+    UINT16 ints;
+
+    if (FromIsr) {
+        
+    } else {
+        /* protected read-modify-write */
+        spin_lock_irq(&pHcInstance->OsSpecific.RegAccessLock);
+    }
+    
+    ints = READ_HOST_REG16(pHcInstance, HOST_REG_INT_SIGNAL_ENABLE);
+    ints |= Mask;
+    WRITE_HOST_REG16(pHcInstance, HOST_REG_INT_SIGNAL_ENABLE, ints);
+    
+    if (FromIsr) {
+        
+    } else {
+        spin_unlock_irq(&pHcInstance->OsSpecific.RegAccessLock);
+    }
+    return ints;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  MaskIrq - Mask SD interrupts
+  Input:    pHcInstance - host controller
+            Mask - mask value
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+UINT16 MaskIrq(PSDHCD_INSTANCE pHcInstance, UINT32 Mask, BOOL FromIsr)
+{
+    UINT16 ints;
+    /* protected read-modify-write */
+    if (FromIsr) {
+    
+    } else {
+        spin_lock_irq(&pHcInstance->OsSpecific.RegAccessLock);
+    }
+    ints = READ_HOST_REG16(pHcInstance, HOST_REG_INT_SIGNAL_ENABLE);
+    ints &= ~Mask;
+    WRITE_HOST_REG16(pHcInstance, HOST_REG_INT_SIGNAL_ENABLE, ints);
+    if (FromIsr) {
+    
+    } else {
+        spin_unlock_irq(&pHcInstance->OsSpecific.RegAccessLock);
+    }
+    return ints;
+}
+
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  EnableDisableSDIOIRQ - enable SDIO interrupt detection
+  Input:    pHcInstance - host controller
+            Enable - enable SDIO IRQ detection
+            FromIsr - called from ISR
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void EnableDisableSDIOIRQ(PSDHCD_INSTANCE pHcInstance, BOOL Enable, BOOL FromIsr)
+{
+    UINT16 intsEnables;
+   
+    if (FromIsr) {
+        if (Enable) {
+                // isr should never re-enable 
+            DBG_ASSERT(FALSE);
+        } else {
+            MaskIrq(pHcInstance, HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE,TRUE);
+        }
+    } else {  
+        if (Enable) { 
+            UnmaskIrq(pHcInstance, HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE, FALSE); 
+        } else {             
+            MaskIrq(pHcInstance, HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE, FALSE);    
+        }
+    }           
+     
+    /* protected read-modify-write */   
+    if (FromIsr) { 
+        spin_lock(&pHcInstance->OsSpecific.RegAccessLock);
+    } else {
+        spin_lock_irq(&pHcInstance->OsSpecific.RegAccessLock);
+    } 
+        
+    intsEnables = READ_HOST_REG16(pHcInstance, HOST_REG_INT_STATUS_ENABLE);
+    if (Enable) {
+        intsEnables |=  HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE;
+    } else { 
+        intsEnables &= ~HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE;
+    }
+        
+    WRITE_HOST_REG16(pHcInstance, HOST_REG_INT_STATUS_ENABLE, intsEnables);   
+    
+    if (FromIsr) {
+        spin_unlock(&pHcInstance->OsSpecific.RegAccessLock);
+    } else {
+        spin_unlock_irq(&pHcInstance->OsSpecific.RegAccessLock);    
+    }
+}
+
+
+SDIO_STATUS SetUpHCDDMA(PSDHCD_INSTANCE pHcInstance, PSDREQUEST pReq)
+{
+    
+    PSDDMA_DESCRIPTOR pReqDescriptor     = (PSDDMA_DESCRIPTOR)pReq->pDataBuffer;  
+    UINT32 totalLength = 0;
+    
+    DBG_PRINT(STD_HOST_TRACE_DATA, ("SDIO STD HOST SetUpHCDDMA (%s) DescCount:%d Blocks:%d, BlockLen:%d\n",
+        IS_SDREQ_WRITE_DATA(pReq->Flags) ?  "TX" : "RX",
+        pReq->DescriptorCount, pReq->BlockCount, pReq->BlockLen));
+    
+    if (IS_HCD_ADMA(pHcInstance) && (pReq->DescriptorCount > SDHCD_MAX_ADMA_DESCRIPTOR)) {
+        DBG_ASSERT(FALSE);
+        return SDIO_STATUS_INVALID_PARAMETER;  
+    } else if (IS_HCD_SDMA(pHcInstance) && (pReq->DescriptorCount > SDHCD_MAX_SDMA_DESCRIPTOR)) {
+        DBG_ASSERT(FALSE);
+        return SDIO_STATUS_INVALID_PARAMETER;  
+    }  
+    
+         /* map this scatter gather entries to address and save for unmap */
+    if (IS_SDREQ_WRITE_DATA(pReq->Flags)) {        
+        dma_map_sg(pHcInstance->Hcd.pDevice, pReqDescriptor, pReq->DescriptorCount, DMA_TO_DEVICE);
+    } else {
+        dma_map_sg(pHcInstance->Hcd.pDevice, pReqDescriptor, pReq->DescriptorCount, DMA_FROM_DEVICE);
+    }
+     
+    pHcInstance->OsSpecific.pDmaList = pReqDescriptor;   
+    pHcInstance->OsSpecific.SGcount = pReq->DescriptorCount; 
+    
+    if (IS_HCD_ADMA(pHcInstance)) {
+        int ii;
+        PSDHCD_SGDMA_DESCRIPTOR  pDescriptor = 
+            (PSDHCD_SGDMA_DESCRIPTOR)pHcInstance->OsSpecific.pDmaBuffer;
+
+        DBG_ASSERT(pDescriptor != NULL);
+            /* for ADMA build the in memory descriptor table */
+        memset(pDescriptor, 0, pReq->DescriptorCount*(sizeof(SDHCD_SGDMA_DESCRIPTOR)));
+        
+        for (ii = 0; ii < pReq->DescriptorCount; ii++,pDescriptor++) {
+            DBG_PRINT(STD_HOST_TRACE_DATA, ("SDIO STD HOST SetUpHCDDMA ADMA Descrp: 0x%X, ReqDescrip: 0x%X, len: %d bytes, addr: 0x%X\n",
+             (UINT)pDescriptor, (UINT)&pReqDescriptor[ii], (UINT)sg_dma_len(&pReqDescriptor[ii]), (UINT)sg_dma_address(&pReqDescriptor[ii])));
+            SET_DMA_LENGTH(pDescriptor, sg_dma_len(&pReqDescriptor[ii]));
+            SET_DMA_ADDRESS(pDescriptor, sg_dma_address(&pReqDescriptor[ii]));
+            totalLength += sg_dma_len(&pReqDescriptor[ii]);
+            if (ii == (pReq->DescriptorCount-1)) {
+                /* last entry, set END, 
+                 ****note: we do NOT want an interrupt generated for this last descriptor,
+                           the controller will generate interrupts indicating:
+                           write CRC acknowledgement and program done -or-
+                           read CRC okay */
+                SET_DMA_END_OF_TRANSFER(pDescriptor);
+            }
+        }
+    } else {
+        DBG_PRINT(STD_HOST_TRACE_DATA, ("SDIO STD HOST SetUpHCDDMA SDMA, ReqDescrip: 0x%X, len: %d bytes, addr: 0x%X\n",
+             (UINT)pReqDescriptor, (UINT)sg_dma_len(pReqDescriptor), (UINT)sg_dma_address(pReqDescriptor)));
+            /* for simple DMA, setup DMA address */            
+        WRITE_HOST_REG32(pHcInstance, HOST_REG_SYSTEM_ADDRESS, sg_dma_address(pReqDescriptor));
+            /* since we only support 1 descriptor of up to 512KB size, we set the boundary up to 512KB 
+               to prevent the DMA from stopping early , we let block count and length stop the DMA*/
+        WRITE_HOST_REG16(pHcInstance, 
+                         HOST_REG_BLOCK_SIZE, 
+                         READ_HOST_REG16(pHcInstance,HOST_REG_BLOCK_SIZE) | HOST_REG_BLOCK_SIZE_DMA_512K_BOUNDARY);   
+        totalLength = sg_dma_len(pReqDescriptor);
+    }
+    
+    if (totalLength != (pReq->BlockCount * pReq->BlockLen)) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST DMA Block Length and Count Mismatch SGList Reports:%d bytes, Bus request : Blocks:%d,Bytes Per Block:%d \n",
+        totalLength,pReq->BlockCount,pReq->BlockLen));
+        return SDIO_STATUS_INVALID_PARAMETER;
+    }
+    
+    if (IS_HCD_ADMA(pHcInstance)) {
+            /* program the controller to execute the descriptor list */ 
+        WRITE_HOST_REG32(pHcInstance, HOST_REG_ADMA_ADDRESS, (UINT32)pHcInstance->OsSpecific.hDmaBuffer);
+            /* unprotect read-modify-write, set 32-bit DMA mode */
+        WRITE_HOST_REG8(pHcInstance, HOST_REG_CONTROL,
+            (READ_HOST_REG8(pHcInstance, HOST_REG_CONTROL) & ~HOST_REG_CONTROL_DMA_MASK) |
+            HOST_REG_CONTROL_DMA_32BIT);
+    }
+            
+    return SDIO_STATUS_PENDING;
+}
+
+/*
+ * HcdTransferDataDMAEnd - cleanup bus master scatter-gather DMA read/write
+*/
+void HcdTransferDataDMAEnd(PSDHCD_INSTANCE pHcInstance, PSDREQUEST pReq)
+{
+    if (pHcInstance->OsSpecific.SGcount > 0) { 
+        if (IS_SDREQ_WRITE_DATA(pReq->Flags)) {
+            dma_unmap_sg(pHcInstance->Hcd.pDevice, 
+                         pHcInstance->OsSpecific.pDmaList, 
+                         pHcInstance->OsSpecific.SGcount, 
+                         DMA_TO_DEVICE);
+        } else {
+            dma_unmap_sg(pHcInstance->Hcd.pDevice, 
+                         pHcInstance->OsSpecific.pDmaList, 
+                         pHcInstance->OsSpecific.SGcount, 
+                         DMA_FROM_DEVICE);
+        }
+        pHcInstance->OsSpecific.SGcount = 0;
+    }
+}
+
+void DumpDMADescriptorsInfo(PSDHCD_INSTANCE pHcInstance)
+{
+    if (IS_HCD_ADMA(pHcInstance)) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST, ADMA Descriptor Start (PHYS):0x%X \n",
+                 (UINT32)pHcInstance->OsSpecific.hDmaBuffer));    
+        SDLIB_PrintBuffer((PUCHAR)pHcInstance->OsSpecific.pDmaBuffer, SDHCD_ADMA_DESCRIPTOR_SIZE, "SDIO STD HOST: ALL DMA Descriptors");                           
+    }
+}
+
+/* handle an interrupting standard host
+ * this route checks the slot interrupting register and calls the interrupt routine
+ * of the interrupting slot, the caller must the std core structure containing a 
+ * list of hcd instances.  This function will use the first hcd instance to read the
+ * slot interrupting register.
+ * */
+BOOL HandleSharedStdHostInterrupt(PSDHCD_CORE_CONTEXT pStdCore)
+{
+    PSDLIST         pListItem;
+    UINT16          interruptingSlots;
+    BOOL            handled = FALSE;
+    UINT            slotIndex;
+    PSDHCD_INSTANCE  pHcInstance;
+    
+    
+        /* this is called at ISR priority, we do not need to protect the list */
+    if (SDLIST_IS_EMPTY(&pStdCore->SlotList)) {
+        return FALSE; 
+    }        
+        /* the first controller will do, the interrupt status register
+         * is mapped to each slot controller */
+    pListItem = SDLIST_GET_ITEM_AT_HEAD(&pStdCore->SlotList);
+
+    pHcInstance = CONTAINING_STRUCT(pListItem, SDHCD_INSTANCE, List);
+        
+    interruptingSlots = READ_HOST_REG16(pHcInstance, HOST_REG_SLOT_INT_STATUS);
+    interruptingSlots &= HOST_REG_SLOT_INT_MASK;
+    
+    if (0 == interruptingSlots) {
+            /* not our interrupt */
+        return FALSE;    
+    }
+    
+    DBG_PRINT(STD_HOST_TRACE_INT, ("SDIO STD HOST HandleSharedStdHostInterrupt : slot ints:0x%X \n",interruptingSlots));
+    
+    slotIndex = 0;
+     
+    SDITERATE_OVER_LIST(&pStdCore->SlotList, pListItem) {
+        pHcInstance = CONTAINING_STRUCT(pListItem, SDHCD_INSTANCE, List);
+            /* is it interrupting ? */        
+        if ((1 << pHcInstance->OsSpecific.SlotNumber) & interruptingSlots) {
+            DBG_PRINT(STD_HOST_TRACE_INT, ("SDIO STD HOST HandleSharedStdHostInterrupt pHcInstance: 0x%X, slot:%d is interrupting \n",
+                    (UINT)pHcInstance,pHcInstance->OsSpecific.SlotNumber));
+   
+                /* this one is interrupting.. */
+            TRACE_SIGNAL_DATA_ISR(pHcInstance, TRUE);  
+            if (HcdSDInterrupt(pHcInstance)) {
+                    /* at least one handled it */
+                handled = TRUE;    
+            }
+            TRACE_SIGNAL_DATA_ISR(pHcInstance, FALSE); 
+        }   
+    }
+        
+    return handled;
+}
+
+/* start the standard host instances 
+ * this function registers the standard host drivers and queues an event to check the slots */
+SDIO_STATUS StartStdHostCore(PSDHCD_CORE_CONTEXT pStdCore)
+{
+    SDIO_STATUS         status = SDIO_STATUS_SUCCESS;
+    PSDHCD_INSTANCE     pHcInstance;
+    PSDLIST             pListItem;
+    INT                 coreStarts = 0;
+    
+    spin_lock_irq(&pStdCore->SlotListLock);
+     
+    do {
+        
+        if (SDLIST_IS_EMPTY(&pStdCore->SlotList)) {
+            break;    
+        }
+         
+        SDITERATE_OVER_LIST(&pStdCore->SlotList, pListItem) {
+            
+            pHcInstance = CONTAINING_STRUCT(pListItem, SDHCD_INSTANCE, List);
+            
+            spin_unlock_irq(&pStdCore->SlotListLock);
+            
+                /* register with the SDIO bus driver */
+            status = SDIO_RegisterHostController(&pHcInstance->Hcd);
+            
+            spin_lock_irq(&pStdCore->SlotListLock);
+            
+            if (!SDIO_SUCCESS(status)) {
+                DBG_PRINT(SDDBG_ERROR, ("SDIO STD Host - failed to register with host, status =%d\n",status));
+                break;    
+            }
+            
+            coreStarts++;
+            
+                /* mark that it has been registered */
+            pHcInstance->InitStateMask |= SDHC_REGISTERED; 
+    
+                /* queue a work item to check for a card present at start up
+                  this call will unmask the insert/remove interrupts */
+            QueueEventResponse(pHcInstance, WORK_ITEM_CARD_DETECT);
+        }
+    
+    } while (FALSE);
+    
+    spin_unlock_irq(&pStdCore->SlotListLock);
+    
+    if (0 == coreStarts) {
+        return SDIO_STATUS_ERROR;    
+    }
+    
+    return SDIO_STATUS_SUCCESS;
+        
+}

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/sdio_std_hcd.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/sdio_std_hcd.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/sdio_std_hcd.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,1785 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_std_hcd.c
+
+ at abstract: SDIO standard host controller implementation
+
+#notes: OS independent code
+ 
+ at notice: Copyright (c), 2005 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#include "sdio_std_hcd.h"
+
+#define CLOCK_ON  TRUE
+#define CLOCK_OFF FALSE
+         
+SDIO_STATUS SetPowerLevel(PSDHCD_INSTANCE pHcInstance, BOOL On, SLOT_VOLTAGE_MASK Level); 
+SDIO_STATUS ProcessCommandDone(PSDHCD_INSTANCE pHcInstance, PSDREQUEST pReq, BOOL FromIsr);
+
+    /* clock divisor table */
+SD_CLOCK_TBL_ENTRY SDClockDivisorTable[SD_CLOCK_MAX_ENTRIES] =
+{   /* clock rate divisor, divisor setting */
+    {1, 0x0000},
+    {2, 0x0100},
+    {4, 0x0200},
+    {8, 0x0400},
+    {16,0x0800},
+    {32,0x1000},
+    {64,0x2000},
+    {128,0x4000},
+    {256,0x8000}, 
+};
+
+    /* register polling change macro */
+#define WAIT_REGISTER32_CHANGE(pHcInstance, pStatus, reg,mask,cmp,timout) \
+    {\
+        if (!WaitRegisterBitsChange((pHcInstance),    \
+                                    (pStatus),    \
+                                    (reg),        \
+                                    (mask),       \
+                                    (cmp),        \
+                                    (timout))) {  \
+           DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST - Reg Change Timeout : 0x%X src:%s, line:%d \n",\
+           (reg),__FILE__, __LINE__));        \
+        }                                     \
+    }
+
+#define WAIT_REGISTER32_CHANGE_OR(pHcInstance, pStatus, reg,mask,ormask,timout) \
+    {\
+        if (!WaitRegisterBitsChangeOR((pHcInstance),    \
+                                    (pStatus),    \
+                                    (reg),        \
+                                    (mask),       \
+                                    (ormask),     \
+                                    (timout))) {  \
+           DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST - Reg Change Timeout : 0x%X src:%s, line:%d \n",\
+           (reg),__FILE__, __LINE__));        \
+        }                                     \
+    }
+
+
+    /* command data ready polling macro */ 
+#define WAIT_FOR_DAT_CMD_DAT_READY(pHcInstance, pStatus) \
+        WAIT_REGISTER32_CHANGE(pHcInstance,            \
+                             pStatus,            \
+                             HOST_REG_PRESENT_STATE,(HOST_REG_PRESENT_STATE_BUFFER_COMMAND_INHIBIT_DAT | \
+                             HOST_REG_PRESENT_STATE_BUFFER_COMMAND_INHIBIT_CMD), \
+                             0, pHcInstance->PresentStateWaitLimit)
+                             
+    /* function to wait for a register bit(s) change */
+static BOOL WaitRegisterBitsChange(PSDHCD_INSTANCE pHcInstance, 
+                            SDIO_STATUS   *pStatus,
+                            UINT32         Reg, 
+                            UINT32         Mask, 
+                            UINT32         CompareMask, 
+                            UINT32         Count)
+{
+    while (Count) {
+                
+        if ((READ_HOST_REG32(pHcInstance, Reg) & Mask) == CompareMask) {
+            break;
+        }
+                
+        Count--;    
+    }    
+    
+    if (0 == Count) {
+        if (pStatus != NULL) {
+            *pStatus = SDIO_STATUS_ERROR;
+        }
+        return FALSE;  
+    }
+    
+    if (pStatus != NULL) {
+        *pStatus = SDIO_STATUS_SUCCESS;
+    }
+        
+    return TRUE;
+}
+
+static BOOL WaitRegisterBitsChangeOR(PSDHCD_INSTANCE pHcInstance, 
+		                            SDIO_STATUS   *pStatus,
+		                            UINT32         Reg, 
+		                            UINT32         Mask, 
+		                            UINT32         OrMask, 
+		                            UINT32         Count)
+{
+    while (Count) {
+                
+        if ((READ_HOST_REG32(pHcInstance, Reg) & Mask) & OrMask) {
+            break;
+        }
+                
+        Count--;    
+    }    
+    
+    if (0 == Count) {
+        if (pStatus != NULL) {
+            *pStatus = SDIO_STATUS_ERROR;
+        }
+        return FALSE;  
+    }
+    
+    if (pStatus != NULL) {
+        *pStatus = SDIO_STATUS_SUCCESS;
+    }
+        
+    return TRUE;
+}
+
+    /* reset command data line state machines */
+void _DoResetCmdDatLine(PSDHCD_INSTANCE pHcInstance)
+{        /* issue reset */
+    WRITE_HOST_REG32(pHcInstance, HOST_REG_SW_RESET, 
+            (HOST_REG_SW_RST_CMD_LINE | HOST_REG_SW_RST_DAT_LINE));
+        /* wait for bits to clear */
+    WAIT_REGISTER32_CHANGE(pHcInstance, 
+                           NULL,
+                           HOST_REG_SW_RESET,
+                           HOST_REG_SW_RST_CMD_LINE | HOST_REG_SW_RST_DAT_LINE,
+                           0, 
+                           pHcInstance->ResetWaitLimit);         
+}
+
+#define ResetCmdDatLine(pHc) \
+{                            \
+    DBG_PRINT(SDDBG_TRACE, ("SDIO STD HOST - **** reseting cmd data at line:%d \n",\
+           __LINE__));        \
+    _DoResetCmdDatLine((pHc));         \
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  GetResponseData - get the response data 
+  Input:    pHcInstance - device context
+            pReq - the request
+  Output: 
+  Return:
+  Notes:  
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void GetResponseData(PSDHCD_INSTANCE pHcInstance, PSDREQUEST pReq)
+{
+    INT     dwordCount;
+    INT     byteCount;
+    UINT32  readBuffer[4];
+    INT    ii;
+    
+    if (GET_SDREQ_RESP_TYPE(pReq->Flags) == SDREQ_FLAGS_NO_RESP) {
+        return;    
+    }
+    
+       
+    byteCount = SD_DEFAULT_RESPONSE_BYTES;        
+    if (GET_SDREQ_RESP_TYPE(pReq->Flags) == SDREQ_FLAGS_RESP_R2) {
+        byteCount = SD_R2_RESPONSE_BYTES;         
+    } 
+    dwordCount = (byteCount + 3) / 4;      
+
+    /* move data into read buffer */
+    for (ii = 0; ii < dwordCount; ii++) {
+        readBuffer[ii] = READ_HOST_REG32(pHcInstance, HOST_REG_RESPONSE+(ii*4));
+    }
+
+    /* handle normal SD/MMC responses */        
+  
+    /* the standard host strips the CRC for all responses and puts them in 
+     * a nice linear order */
+    memcpy(&pReq->Response[1],readBuffer,byteCount);
+   
+    if (DBG_GET_DEBUG_LEVEL() >= STD_HOST_TRACE_REQUESTS) { 
+        if (GET_SDREQ_RESP_TYPE(pReq->Flags) == SDREQ_FLAGS_RESP_R2) {
+            byteCount = 17; 
+        }
+        SDLIB_PrintBuffer(pReq->Response,byteCount,"SDIO STD HOST - Response Dump");
+    }
+    
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  DumpCurrentRequestInfo - debug dump  
+  Input:    pHcInstance - device context
+  Output: 
+  Return: 
+  Notes: This function debug prints the current request  
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void DumpCurrentRequestInfo(PSDHCD_INSTANCE pHcInstance)
+{
+    PSDREQUEST pRequest = GET_CURRENT_REQUEST(&pHcInstance->Hcd);
+    if (pRequest != NULL) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST - Current Request Command:%d, ARG:0x%8.8X\n",
+                 pRequest->Command, pRequest->Argument));
+        if (IS_SDREQ_DATA_TRANS(pRequest->Flags)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST - Data %s, Blocks: %d, BlockLen:%d Remaining: %d \n",
+                      IS_SDREQ_WRITE_DATA(pRequest->Flags) ? "WRITE":"READ",
+                      pRequest->BlockCount,
+                      pRequest->BlockLen,
+                      pRequest->DataRemaining));
+        }
+    }
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  TranslateSDError - check for an SD error 
+  Input:    pHcInstance - device context
+            Status -  error interrupt status register value
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS TranslateSDError(PSDHCD_INSTANCE pHcInstance, UINT16 ErrorMask)
+{
+    SDIO_STATUS status = SDIO_STATUS_DEVICE_ERROR;
+    
+    DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST - TranslateSDError :0x%X \n",ErrorMask));
+    
+    if (ErrorMask & HOST_REG_ERROR_INT_STATUS_CRCERR) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST - RESP CRC ERROR \n"));
+        status = SDIO_STATUS_BUS_RESP_CRC_ERR;
+    }
+    
+    if (ErrorMask & HOST_REG_ERROR_INT_STATUS_DATATIMEOUTERR) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST - DATA TIMEOUT ERROR \n"));
+        status = SDIO_STATUS_BUS_READ_TIMEOUT;
+    } 
+    
+    if (ErrorMask & HOST_REG_ERROR_INT_STATUS_DATACRCERR) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST - READ or WRITE DATA CRC ERROR \n"));
+        status = SDIO_STATUS_BUS_READ_CRC_ERR;
+    } 
+    
+    if (ErrorMask & HOST_REG_ERROR_INT_STATUS_CMDTIMEOUTERR) {
+        if (pHcInstance->CardInserted) {
+                /* hide error if we are polling an empty slot */
+            DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST - RESPONSE TIMEOUT \n"));
+        }
+        status = SDIO_STATUS_BUS_RESP_TIMEOUT;
+    } 
+        
+    if (ErrorMask & HOST_REG_ERROR_INT_STATUS_VENDOR_MASK) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST HcdSDInterrupt vendor error 0x%X: \n", 
+                    (UINT)((ErrorMask & HOST_REG_ERROR_INT_STATUS_VENDOR_MASK) >> 
+                            HOST_REG_ERROR_INT_STATUS_VENDOR_SHIFT)));
+    } 
+    
+    if (ErrorMask & HOST_REG_ERROR_INT_STATUS_AUTOCMD12ERR) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST HcdSDInterrupt auto cmd12 error\n"));
+    }
+    
+    if (ErrorMask & HOST_REG_ERROR_INT_STATUS_CURRENTLIMITERR) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST HcdSDInterrupt current limit error\n"));
+    }
+    if (ErrorMask & HOST_REG_ERROR_INT_STATUS_DATAENDBITERR) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST HcdSDInterrupt data end bit error\n"));
+    }
+    if (ErrorMask & HOST_REG_ERROR_INT_STATUS_DATATIMEOUTERR) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST HcdSDInterrupt data timeout error\n"));
+    }
+    if (ErrorMask & HOST_REG_ERROR_INT_STATUS_CMDINDEXERR) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST HcdSDInterrupt CMD index error\n"));
+    }
+    if (ErrorMask & HOST_REG_ERROR_INT_STATUS_CMDENDBITERR) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST HcdSDInterrupt CMD end bit error\n")); 
+    }
+    if (ErrorMask & HOST_REG_ERROR_INT_STATUS_CRCERR) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST HcdSDInterrupt CRC error\n"));
+    }
+    if (ErrorMask & HOST_REG_ERROR_INT_STATUS_SDMAERR) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST HcdSDInterrupt SDMA error (system address:0x%X\n",
+            READ_HOST_REG32(pHcInstance, HOST_REG_SYSTEM_ADDRESS))); 
+    }
+    if (ErrorMask & HOST_REG_ERROR_INT_STATUS_ADMAERR) {
+        UINT32 dmaErrStatus;
+        dmaErrStatus = READ_HOST_REG32(pHcInstance, HOST_REG_ADMA_ERR_STATUS);
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST HcdSDInterrupt ADMA error status: 0x%X \n",
+        dmaErrStatus));  
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST, ADMA Descriptor Start ADMA %s Address: 0x%X\n",
+                 (dmaErrStatus & HOST_REG_ADMA_STATE_MASK) == HOST_REG_ADMA_STATE_FDS ? "Bad" : "Current",
+                 READ_HOST_REG32(pHcInstance, HOST_REG_ADMA_ADDRESS)));   
+        DumpDMADescriptorsInfo(pHcInstance);
+    }   
+    return status;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  ClockStartStop - SD clock control
+  Input:  pHcInstance - device object
+          On - turn on or off (TRUE/FALSE)
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void ClockStartStop(PSDHCD_INSTANCE pHcInstance, BOOL On) 
+{
+    /* beware, an unprotected read-modify-write */
+    UINT16 state;
+
+    DBG_PRINT(STD_HOST_TRACE_CLOCK, ("SDIO STD HOST - ClockStartStop, %d\n", (UINT)On));
+    
+    state = READ_HOST_REG16(pHcInstance, HOST_REG_CLOCK_CONTROL);
+
+    if (On) {
+        state |= HOST_REG_CLOCK_CONTROL_SD_ENABLE;
+        WRITE_HOST_REG16(pHcInstance, HOST_REG_CLOCK_CONTROL, state);
+    } else {
+        state &= ~HOST_REG_CLOCK_CONTROL_SD_ENABLE;
+        WRITE_HOST_REG16(pHcInstance, HOST_REG_CLOCK_CONTROL, state);
+    }  
+}
+
+#define ADJUST_BUS_IDLE      TRUE
+#define ADJUST_BUS_NORMAL    FALSE
+
+/* special adjustments made when the bus is idle or switched on to normal  */
+static void IdleBusAdjustment(PSDHCD_INSTANCE pHcInstance, BOOL Idle)
+{
+    UINT16 clockControlValue;
+    UINT16 clockControlCompareVal;
+    UINT8  control;
+    
+    do {
+        
+        if (pHcInstance->Idle1BitIRQ) {
+                /* the host controller requires a switch to 1 bit mode to detect interrupts
+                 * when the bus is idle.  This is a work around for certain std hosts that
+                 * miss interrupts in 4-bit mode */
+                 
+            control = READ_HOST_REG8(pHcInstance, HOST_REG_CONTROL);
+            control &= ~HOST_REG_CONTROL_BUSWIDTH_BITS;     
+            
+            if (Idle) {       
+                    /* switch controller to 1 bit mode for interrupt detection */
+                control |= HOST_REG_CONTROL_1BIT_WIDTH;
+            } else {
+                    /* check currently configured bus mode to restore */
+                if (GET_CURRENT_BUS_WIDTH(&pHcInstance->Hcd) == SDCONFIG_BUS_WIDTH_4_BIT) {
+                    control |= HOST_REG_CONTROL_4BIT_WIDTH;    
+                } else {
+                    control |= HOST_REG_CONTROL_1BIT_WIDTH; 
+                }
+            }            
+            
+            WRITE_HOST_REG8(pHcInstance, HOST_REG_CONTROL, control);   
+        }
+        
+        if (0 == pHcInstance->IdleBusClockRate) {
+                /* no rate control in effect */
+            break; 
+        }
+        
+        if (Idle) {
+                /* idle mode value */
+            clockControlValue = pHcInstance->ClockConfigIdle;
+        } else {
+                /* normal mode value */
+            clockControlValue = pHcInstance->ClockConfigNormal; 
+        }
+        
+        clockControlValue |= (UINT16)HOST_REG_CLOCK_CONTROL_CLOCK_ENABLE;
+        
+            /* read current settings and compare */
+        clockControlCompareVal = READ_HOST_REG16(pHcInstance, HOST_REG_CLOCK_CONTROL);
+        clockControlCompareVal &= HOST_REG_CLOCK_CONTROL_FREQ_SELECT_MASK | 
+                                        HOST_REG_CLOCK_CONTROL_CLOCK_ENABLE;
+        
+        if (clockControlValue == clockControlCompareVal) {
+                /* no update required, we can skip the clock stabilization polling because the
+                 * clock rate is already set */
+            break;    
+        }
+        
+        WRITE_HOST_REG16(pHcInstance, HOST_REG_CLOCK_CONTROL, clockControlValue);
+        
+            /* wait for clock to stabilize */
+        while(!(READ_HOST_REG16(pHcInstance, HOST_REG_CLOCK_CONTROL) & 
+                    (UINT16)HOST_REG_CLOCK_CONTROL_CLOCK_STABLE)) {
+          ;
+        }
+        
+        if (Idle) {
+                /* when requested for IDLE mode, we leave the clock on after we adjust the rate */
+            WRITE_HOST_REG16(pHcInstance, 
+                             HOST_REG_CLOCK_CONTROL,
+                             clockControlValue | HOST_REG_CLOCK_CONTROL_SD_ENABLE);        
+        } 
+        
+    } while (FALSE);
+               
+}
+
+int GetClockTableIndex(PSDHCD_INSTANCE pHcInstance, UINT32 DesiredRate, UINT32 *pActualRate)
+{
+    int     clockIndex,ii;   
+    UINT32  rate;
+    
+    clockIndex = SD_CLOCK_MAX_ENTRIES - 1;
+    
+    *pActualRate = (pHcInstance->BaseClock) / SDClockDivisorTable[clockIndex].ClockRateDivisor;
+    for (ii = 0; ii < SD_CLOCK_MAX_ENTRIES; ii++) {
+        rate = pHcInstance->BaseClock / SDClockDivisorTable[ii].ClockRateDivisor;
+        if (DesiredRate >= rate) {
+            *pActualRate = rate;
+            clockIndex = ii;
+            break; 
+        }   
+    }
+    
+    return clockIndex;
+}
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SetBusMode - Set Bus mode
+  Input:  pHcInstance - device object
+          pMode - mode
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void SetBusMode(PSDHCD_INSTANCE pHcInstance, PSDCONFIG_BUS_MODE_DATA pMode) 
+{
+    int clockIndex;
+    UINT16 state;
+    UINT8  control;    
+    
+    DBG_PRINT(STD_HOST_TRACE_CONFIG , ("SDIO STD HOST - SetMode\n"));
+
+    clockIndex = GetClockTableIndex(pHcInstance, pMode->ClockRate, &pMode->ActualClockRate);
+
+    control = READ_HOST_REG8(pHcInstance, HOST_REG_CONTROL);
+    control &= ~HOST_REG_CONTROL_BUSWIDTH_BITS;
+    switch (SDCONFIG_GET_BUSWIDTH(pMode->BusModeFlags)) {
+        case SDCONFIG_BUS_WIDTH_1_BIT:
+            control |= HOST_REG_CONTROL_1BIT_WIDTH;
+            break;        
+        case SDCONFIG_BUS_WIDTH_4_BIT:
+            control |=  HOST_REG_CONTROL_4BIT_WIDTH;
+            break;
+        case SDCONFIG_BUS_WIDTH_MMC8_BIT:
+            control |=  HOST_REG_CONTROL_EXTENDED_DATA;
+            break;    
+        default:
+            DBG_PRINT(SDDBG_TRACE , ("SDIO STD HOST - SetMode, unknown bus width requested 0x%X\n", pMode->BusModeFlags));
+            break;
+    }
+    if (pMode->BusModeFlags & SDCONFIG_BUS_MODE_SD_HS) { 
+        control |= HOST_REG_CONTROL_HI_SPEED;
+    }
+    WRITE_HOST_REG8(pHcInstance, HOST_REG_CONTROL, control);
+   
+        /* set the clock divisor, unprotected read modify write */
+    state = SDClockDivisorTable[clockIndex].RegisterValue | 
+                      (UINT16)HOST_REG_CLOCK_CONTROL_CLOCK_ENABLE;
+    
+        /* save the normal operational value for dynamic clock control */
+    pHcInstance->ClockConfigNormal = SDClockDivisorTable[clockIndex].RegisterValue;
+                     
+    WRITE_HOST_REG16(pHcInstance, HOST_REG_CLOCK_CONTROL, state);
+    
+        /* wait for stable */
+    while(!(READ_HOST_REG16(pHcInstance, HOST_REG_CLOCK_CONTROL) & 
+                (UINT16)HOST_REG_CLOCK_CONTROL_CLOCK_STABLE)) {
+      ;
+    }
+    WRITE_HOST_REG16(pHcInstance, HOST_REG_CLOCK_CONTROL, state | 
+                    (UINT16)HOST_REG_CLOCK_CONTROL_SD_ENABLE);
+    
+    state = READ_HOST_REG16(pHcInstance, HOST_REG_CLOCK_CONTROL);
+    DBG_PRINT(STD_HOST_TRACE_CONFIG , ("SDIO STD HOST - Clock: %d Hz, ClockRate %d (%d) state:0x%X control:0x%X\n", 
+                                   pMode->ActualClockRate, pMode->ClockRate, clockIndex, (UINT)state, (UINT)control));
+
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  HcdTransferTxData - data transmit transfer
+  Input:  pHcInstance - device object
+          pReq    - transfer request
+  Output: 
+  Return: 
+  Notes: writes request data
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+BOOL HcdTransferTxData(PSDHCD_INSTANCE pHcInstance, PSDREQUEST pReq)
+{
+    INT     dataCopy;
+    PUINT8  pBuf;
+    
+    dataCopy = min(pReq->DataRemaining, (UINT)pReq->BlockLen);   
+    pBuf = (PUINT8)pReq->pHcdContext;
+   
+    /* update remaining count */
+    pReq->DataRemaining -= dataCopy;
+    /* set the block data */
+    while(dataCopy) { 
+        UINT32 outData = 0;
+        UINT   count = 0;
+        if (dataCopy > 4) {
+            outData = ((UINT32)(*(pBuf+0))) | 
+                      (((UINT32)(*(pBuf+1))) << 8) | 
+                      (((UINT32)(*(pBuf+2))) << 16) | 
+                      (((UINT32)(*(pBuf+3))) << 24);
+            WRITE_HOST_REG32(pHcInstance, HOST_REG_BUFFER_DATA_PORT, outData);
+            dataCopy -= 4; 
+            pBuf += 4;
+        } else {
+            for(count = 0; (dataCopy > 0) && (count < 4); count++) {
+               outData |= (*pBuf) << (count*8); 
+               pBuf++;
+               dataCopy--;
+            }
+            WRITE_HOST_REG32(pHcInstance, HOST_REG_BUFFER_DATA_PORT, outData);
+        }
+    }
+    
+        /* update pointer position */
+    pReq->pHcdContext = (PVOID)pBuf;
+    if (pReq->DataRemaining) {
+        return FALSE; 
+    }
+    return TRUE;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  HcdTransferRxData - data receive transfer
+  Input:  pHcInstance - device object
+          pReq    - transfer request
+  Output: 
+  Return: 
+  Notes: reads request data
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void HcdTransferRxData(PSDHCD_INSTANCE pHcInstance, PSDREQUEST pReq)
+{
+    INT     dataCopy;
+    PUINT8  pBuf;
+    
+    dataCopy = min(pReq->DataRemaining, (UINT)pReq->BlockLen);   
+    pBuf = (PUINT8)pReq->pHcdContext;
+   
+    /* update remaining count */
+    pReq->DataRemaining -= dataCopy;
+    /* set the block data */
+    while(dataCopy) { 
+        UINT32 inData;
+        UINT   count = 0;
+        inData = READ_HOST_REG32(pHcInstance, HOST_REG_BUFFER_DATA_PORT);
+        for(count = 0; (dataCopy > 0) && (count < 4); count++) {
+            *pBuf = (inData >> (count*8)) & 0xFF;
+            dataCopy--;
+            pBuf++;
+        }
+    }
+    
+        /* update pointer position */
+    pReq->pHcdContext = (PVOID)pBuf;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  HcdRequest - SD request handler
+  Input:  pHcd - HCD object
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS HcdRequest(PSDHCD pHcd) 
+{
+    SDIO_STATUS     status = SDIO_STATUS_SUCCESS;
+    PSDHCD_INSTANCE pHcInstance = (PSDHCD_INSTANCE)pHcd->pContext;
+    UINT16          temp;
+    PSDREQUEST      pReq;
+    
+    pReq = GET_CURRENT_REQUEST(pHcd);
+    DBG_ASSERT(pReq != NULL);
+    
+        /* make sure clock is off */
+    ClockStartStop(pHcInstance, CLOCK_OFF);
+           
+        /* make sure error ints are disabled */
+    WRITE_HOST_REG16(pHcInstance, HOST_REG_INT_ERR_SIGNAL_ENABLE,0);
+    
+        /* mask the remove while we are spinning on the CMD ready bits */
+    MaskIrq(pHcInstance, HOST_REG_INT_STATUS_ALLOW_INSERT_REMOVE_ONLY,FALSE);
+
+    do {
+        
+        if (pHcInstance->ShuttingDown) {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO STD HOST HcdRequest returning canceled\n"));
+            status = SDIO_STATUS_CANCELED;
+            break;
+        }
+                
+        switch (GET_SDREQ_RESP_TYPE(pReq->Flags)) { 
+            case SDREQ_FLAGS_NO_RESP:
+                temp = 0x00;
+                break;
+            case SDREQ_FLAGS_RESP_R2:
+                temp = 0x01 |
+                        HOST_REG_COMMAND_REGISTER_CRC_CHECK_ENABLE;
+                break;
+            case SDREQ_FLAGS_RESP_R3:
+            case SDREQ_FLAGS_RESP_SDIO_R4:
+                temp = 0x02;
+                break;
+            case SDREQ_FLAGS_RESP_R1:
+            case SDREQ_FLAGS_RESP_SDIO_R5:
+            case SDREQ_FLAGS_RESP_R6:
+                temp = 0x02 | HOST_REG_COMMAND_REGISTER_CRC_CHECK_ENABLE 
+                            | HOST_REG_COMMAND_REGISTER_CMD_INDEX_CHECK_ENABLE;
+                break;
+            case SDREQ_FLAGS_RESP_R1B:   
+                temp = 0x03 | HOST_REG_COMMAND_REGISTER_CRC_CHECK_ENABLE
+                            | HOST_REG_COMMAND_REGISTER_CMD_INDEX_CHECK_ENABLE;
+                break;
+            default:
+                temp = 0x00;
+                DBG_ASSERT(FALSE);
+                status = SDIO_STATUS_INVALID_PARAMETER;
+                break;
+        }   
+
+        if (!SDIO_SUCCESS(status)) {
+            break;
+        }
+        
+            /* check and see if the card is still there... on some
+             * host controller implementations card removal seems to prevent the
+             * controller from actually starting the request */      
+        WAIT_REGISTER32_CHANGE(pHcInstance, 
+                               &status, 
+                               HOST_REG_PRESENT_STATE,
+                               HOST_REG_PRESENT_STATE_CARD_STATE_STABLE,
+                               HOST_REG_PRESENT_STATE_CARD_STATE_STABLE,
+                               pHcInstance->PresentStateWaitLimit);
+                               
+        if (!SDIO_SUCCESS(status)) {
+                /* card detect could not stabilize, card might be ejecting */
+            status = SDIO_STATUS_CANCELED;
+            break;  
+        }   
+                             
+        if (!(READ_HOST_REG32(pHcInstance, HOST_REG_PRESENT_STATE) &  
+                HOST_REG_PRESENT_STATE_CARD_INSERTED)) {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO STD HOST Card Removed! \n"));
+            status = SDIO_STATUS_CANCELED;
+            break; 
+        }    
+            
+            /* make any clock adjustments or bus adjustments before we turn on the clock */
+        IdleBusAdjustment(pHcInstance, ADJUST_BUS_NORMAL);
+            /* start the clock */
+        ClockStartStop(pHcInstance, CLOCK_ON);
+        WAIT_FOR_DAT_CMD_DAT_READY(pHcInstance, &status);
+    
+        if (!SDIO_SUCCESS(status)) {
+            ResetCmdDatLine(pHcInstance); 
+            break; 
+        }
+        
+            /* clear any error statuses */
+        WRITE_HOST_REG16(pHcInstance, HOST_REG_ERROR_INT_STATUS, HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+        WRITE_HOST_REG16(pHcInstance, HOST_REG_NORMAL_INT_STATUS, HOST_REG_NORMAL_INT_STATUS_CLEAR_ALL);
+    
+            /* set the argument register */
+        WRITE_HOST_REG32(pHcInstance, HOST_REG_ARGUMENT, pReq->Argument);
+         
+        if (pReq->Flags & SDREQ_FLAGS_DATA_TRANS){
+            DBG_PRINT(STD_HOST_TRACE_DATA, ("SDIO STD HOST HcdRequest %s Data Transfer, Blocks:%d, BlockLen:%d \n",
+                      IS_SDREQ_WRITE_DATA(pReq->Flags) ? "TX":"RX",
+                      pReq->BlockCount, pReq->BlockLen));
+                /* set the block size register */
+            WRITE_HOST_REG16(pHcInstance, HOST_REG_BLOCK_SIZE, pReq->BlockLen);
+                /* set block count register */
+            WRITE_HOST_REG16(pHcInstance, HOST_REG_BLOCK_COUNT, pReq->BlockCount);
+                /* set flag in command register */
+            temp |= HOST_REG_COMMAND_REGISTER_DATA_PRESENT; 
+            	
+            pReq->DataRemaining = pReq->BlockLen * pReq->BlockCount;
+            
+            if (pReq->Flags & SDREQ_FLAGS_DATA_DMA) {
+                    /* setup DMA , note, for SDMA, this routine could modify HOST_REG_BLOCK_SIZE*/
+                status = SetUpHCDDMA(pHcInstance, pReq);                  
+                if (!SDIO_SUCCESS(status)) {
+                    break;  
+                }                 
+            } else {                    
+                    /* use the context to hold where we are in the buffer */
+                pReq->pHcdContext = pReq->pDataBuffer;   
+            }
+        }  
+        
+#if 1        
+        {
+            UINT32 test;
+            
+            test = READ_HOST_REG32(pHcInstance, HOST_REG_ARGUMENT);
+            if (test != pReq->Argument) {
+                DBG_ASSERT(FALSE);   
+                DBG_PRINT(SDDBG_ERROR, ("*********Argument:0x%X, Shouldbe:0x%X \n",
+                            test,pReq->Argument));
+                WRITE_HOST_REG32(pHcInstance, HOST_REG_ARGUMENT, pReq->Argument);
+            }
+            
+            if (pReq->Flags & SDREQ_FLAGS_DATA_TRANS){
+                test = READ_HOST_REG16(pHcInstance, HOST_REG_BLOCK_SIZE) & HOST_REG_BLOCK_SIZE_LEN_MASK;
+                if (test != pReq->BlockLen) {
+                    DBG_PRINT(SDDBG_ERROR, ("******BlockLength!!!! :0x%X, Should be:0x%X \n",
+                            test,pReq->BlockLen)); 
+                    if ( IS_HCD_SDMA(pHcInstance)) {        
+                        WRITE_HOST_REG16(pHcInstance, 
+                                         HOST_REG_BLOCK_SIZE, 
+                                         pReq->BlockLen | (UINT16)HOST_REG_BLOCK_SIZE_DMA_512K_BOUNDARY);
+                    }
+                }
+                test = READ_HOST_REG16(pHcInstance, HOST_REG_BLOCK_COUNT);
+                if (test != pReq->BlockCount) { 
+                    DBG_PRINT(SDDBG_ERROR, ("******BlockCount!!!! :0x%X, Should be:0x%X \n",
+                            test,pReq->BlockCount)); 
+                    WRITE_HOST_REG16(pHcInstance, HOST_REG_BLOCK_COUNT, pReq->BlockCount);
+                }
+            }
+        }
+#endif
+   
+            /* set transfer mode register */
+        WRITE_HOST_REG16(pHcInstance, HOST_REG_TRANSFER_MODE, 
+                ((pReq->BlockCount > 1) ? HOST_REG_TRANSFER_MODE_MULTI_BLOCK:0) |
+                ((pReq->BlockCount > 1) ? HOST_REG_TRANSFER_MODE_BLOCKCOUNT_ENABLE:0) |
+                ((pReq->Flags & SDREQ_FLAGS_AUTO_CMD12) ? HOST_REG_TRANSFER_MODE_AUTOCMD12 : 0) |
+                ((IS_SDREQ_WRITE_DATA(pReq->Flags))? 0 : HOST_REG_TRANSFER_MODE_READ) |
+                ((pReq->Flags & SDREQ_FLAGS_DATA_DMA)? HOST_REG_TRANSFER_MODE_DMA_ENABLE : 0));
+       
+        /* set command register, make sure it is clear to write */
+        temp |= (pReq->Command << HOST_REG_COMMAND_REGISTER_CMD_SHIFT);
+        DBG_PRINT(STD_HOST_TRACE_REQUESTS, ("SDIO STD HOST HcdRequest - CMDDAT:0x%X (RespType:%d, Command:0x%X , Arg:0x%X) \n",
+                  temp, GET_SDREQ_RESP_TYPE(pReq->Flags), pReq->Command, pReq->Argument));
+        
+            /* enable error status */
+        WRITE_HOST_REG16(pHcInstance, HOST_REG_ERR_STATUS_ENABLE, HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+                  
+        if (SDHCD_GET_OPER_CLOCK(pHcd) < pHcInstance->ClockSpinLimit) { 
+                /* clock rate is very low, need to use interrupts here */
+                
+                /* enable error interrupts */  
+            WRITE_HOST_REG16(pHcInstance, HOST_REG_INT_ERR_SIGNAL_ENABLE, 
+                    HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+            
+                /* enable command complete IRQ */           
+            UnmaskIrq(pHcInstance, HOST_REG_INT_STATUS_CMD_COMPLETE_ENABLE,FALSE); 
+            
+                /* enable error signal - hit it again */
+            WRITE_HOST_REG16(pHcInstance, 
+                             HOST_REG_INT_ERR_SIGNAL_ENABLE, 
+                             HOST_REG_ERROR_INT_STATUS_ALL_ERR); 
+                             
+                /* enable error status - hit it again */
+            WRITE_HOST_REG16(pHcInstance, 
+                             HOST_REG_ERR_STATUS_ENABLE, 
+                             HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+            
+            DBG_PRINT(STD_HOST_TRACE_REQUESTS, ("SDIO STD HOST HcdRequest using interrupt for command done (%s). (clock:%d, ref:%d)\n",
+                    (pReq->Flags & SDREQ_FLAGS_DATA_TRANS) ? "command only" : "with data",
+                    SDHCD_GET_OPER_CLOCK(pHcd),
+                    pHcInstance->ClockSpinLimit));    
+                                            
+                /* start the command */        
+            WRITE_HOST_REG16(pHcInstance, HOST_REG_COMMAND_REGISTER, temp); 
+            status = SDIO_STATUS_PENDING;
+            break;            
+        }
+        
+            /* if we get here we are doing this inline using polling */
+                                 
+            /* write command */
+        WRITE_HOST_REG16(pHcInstance, HOST_REG_COMMAND_REGISTER, temp);
+       
+            /* wait for command to finish */
+        if (pReq->Flags & SDREQ_FLAGS_DATA_TRANS) {
+            WAIT_REGISTER32_CHANGE(pHcInstance,            
+                                   &status,            
+                                   HOST_REG_PRESENT_STATE,
+                                   HOST_REG_PRESENT_STATE_BUFFER_COMMAND_INHIBIT_CMD,
+                                   0, pHcInstance->PresentStateWaitLimit);
+        } else  {
+            WAIT_FOR_DAT_CMD_DAT_READY(pHcInstance, &status);            
+        }
+ 
+        if (!SDIO_SUCCESS(status)) {
+            ResetCmdDatLine(pHcInstance); 
+            break;   
+        }
+                
+            /* get errors */
+        temp = READ_HOST_REG16(pHcInstance, HOST_REG_ERROR_INT_STATUS);
+        
+        if (temp != 0) {
+            status = TranslateSDError(pHcInstance, temp);
+                /* clear any existing errors - non-synchronized clear */
+            WRITE_HOST_REG16(pHcInstance, HOST_REG_ERROR_INT_STATUS, HOST_REG_ERROR_INT_STATUS_ALL_ERR);        
+                /* reset command dat , just in case */
+            ResetCmdDatLine(pHcInstance);    
+            break;           
+        } 
+                
+            /* process the command */    
+        status = ProcessCommandDone(pHcInstance, pReq, FALSE);
+        
+    } while (FALSE);
+   
+    if (status != SDIO_STATUS_PENDING) {  
+        if (!pHcInstance->KeepClockOn) {   
+            ClockStartStop(pHcInstance, CLOCK_OFF);
+        } else {
+                /* clock has to be left on for interrupts, adjust clock rate and any additional settings 
+                 * for an idle bus  */
+            IdleBusAdjustment(pHcInstance, ADJUST_BUS_IDLE);
+        }
+        
+        pReq->Status = status;  
+            /* cleanup DMA */
+        if (pReq->Flags & SDREQ_FLAGS_DATA_DMA) {
+                /* cleanup DMA if it was setup */
+            HcdTransferDataDMAEnd(pHcInstance,pReq);
+        }                  
+        if (IS_SDREQ_FORCE_DEFERRED_COMPLETE(pReq->Flags)) {
+            DBG_PRINT(STD_HOST_TRACE_REQUESTS, ("SDIO STD HOST deferring completion to work item \n"));
+                /* the HCD must do the indication in a separate context and return status pending */
+            QueueEventResponse(pHcInstance, WORK_ITEM_IO_COMPLETE); 
+                /* return pending */
+            status = SDIO_STATUS_PENDING;
+        } else {        
+                /* complete the request */
+            DBG_PRINT(STD_HOST_TRACE_REQUESTS, ("SDIO STD HOST Command Done, status:%d \n", status));
+        }
+        pHcInstance->Cancel = FALSE;  
+    } else {
+        DBG_PRINT(STD_HOST_TRACE_REQUESTS, ("SDIO STD HOST Bus Request Pending.... \n"));
+    }    
+
+        /* now allow removal again */
+    UnmaskIrq(pHcInstance, HOST_REG_INT_STATUS_ALLOW_INSERT_REMOVE_ONLY,FALSE); 
+    return status;
+} 
+
+
+SDIO_STATUS ProcessCommandDone(PSDHCD_INSTANCE pHcInstance, PSDREQUEST pReq, BOOL FromIsr)
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    BOOL        shortTransfer = FALSE;
+    UINT16      errors = 0;
+    
+    do {       
+           
+        if (pHcInstance->Cancel) {
+            status = SDIO_STATUS_CANCELED;   
+            break;
+        }
+                
+            /* get the response data for the command */
+        GetResponseData(pHcInstance, pReq);
+        
+            /* check for data */
+        if (!(pReq->Flags & SDREQ_FLAGS_DATA_TRANS)) {
+            /* no data phase, we're done */
+            status = SDIO_STATUS_SUCCESS;
+            break;
+        }                   
+            /* check with the bus driver if it is okay to continue with data */
+        status = SDIO_CheckResponse(&pHcInstance->Hcd, pReq, SDHCD_CHECK_DATA_TRANS_OK);
+        
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST : Response for Data transfer error :%d n",status));
+            break;   
+        }
+
+            /* check for short transfer */
+        if ((pReq->Flags & SDREQ_FLAGS_DATA_SHORT_TRANSFER) &&
+            (pReq->DataRemaining <= STD_HOST_SHORT_TRANSFER_THRESHOLD) &&
+            (SDHCD_GET_OPER_CLOCK(&pHcInstance->Hcd) >= pHcInstance->ClockSpinLimit)) {
+                /* we will do a short transfer */
+            shortTransfer = TRUE;              
+            break;
+        }
+            
+            /* normal data transfers involve interrupts */  
+        status = SDIO_STATUS_PENDING; 
+            /* re-enable all errors for data transfers  */
+        WRITE_HOST_REG16(pHcInstance, HOST_REG_INT_ERR_SIGNAL_ENABLE, 
+                HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+        if (pReq->Flags & SDREQ_FLAGS_DATA_DMA) {
+                /* handle DMA case */
+                /* expecting interrupt */  
+            UnmaskIrq(pHcInstance, HOST_REG_INT_STATUS_TRANSFER_COMPLETE_ENABLE,FromIsr); 
+            DBG_PRINT(STD_HOST_TRACE_DATA, ("SDIO STD HOST Pending DMA %s transfer \n",
+                                   IS_SDREQ_WRITE_DATA(pReq->Flags) ? "TX":"RX"));
+            break;
+        } 
+
+        if (IS_SDREQ_WRITE_DATA(pReq->Flags)) {
+            UINT16 ints;
+                /* write data, see if the buffer is ready, it should be */
+            ints = READ_HOST_REG16(pHcInstance, HOST_REG_NORMAL_INT_STATUS);            
+            if (ints & HOST_REG_NORMAL_INT_STATUS_BUFFER_WRITE_RDY) {
+                    /* acknowledge it */
+                WRITE_HOST_REG16(pHcInstance, 
+                                HOST_REG_NORMAL_INT_STATUS, 
+                                HOST_REG_NORMAL_INT_STATUS_BUFFER_WRITE_RDY);                
+                /* send the initial buffer */
+                /* transfer data */
+                if (HcdTransferTxData(pHcInstance, pReq)) {
+                        /* data fits in buffer */
+                        /* wait for transfer complete */
+                    UnmaskIrqFromIsr(pHcInstance, 
+                                 HOST_REG_INT_STATUS_TRANSFER_COMPLETE_ENABLE);          
+                    break;
+                }
+                
+                /* fall through and enable write buffer interrupts */
+            }
+            
+                /* expecting write buffer ready interrupt */  
+            UnmaskIrq(pHcInstance, 
+                     HOST_REG_INT_STATUS_BUFFER_WRITE_RDY_ENABLE,
+                     FromIsr);    
+            
+        } else {
+                /* expecting read buffer ready data */
+            UnmaskIrq(pHcInstance, 
+                     HOST_REG_INT_STATUS_BUFFER_READ_RDY_ENABLE,
+                     FromIsr);    
+        }        
+           
+        DBG_PRINT(STD_HOST_TRACE_DATA, ("SDIO STD HOST Pending %s transfer \n",
+                                   IS_SDREQ_WRITE_DATA(pReq->Flags) ? "TX":"RX"));
+        
+    } while (FALSE); 
+   
+        /* check short transfer */
+    while (shortTransfer) {
+        DBG_PRINT(STD_HOST_TRACE_DATA, ("SDIO STD Using Short Transfer (%d bytes) %s \n",
+            pReq->DataRemaining, IS_SDREQ_WRITE_DATA(pReq->Flags) ? "TX":"RX"));
+        
+        if (IS_SDREQ_WRITE_DATA(pReq->Flags)) {
+	           /* wait for buffer ready */
+            WAIT_REGISTER32_CHANGE(pHcInstance,            
+                                   &status,            
+                                   HOST_REG_NORMAL_INT_STATUS,
+                                   HOST_REG_NORMAL_INT_STATUS_BUFFER_WRITE_RDY,
+                                   HOST_REG_NORMAL_INT_STATUS_BUFFER_WRITE_RDY, 
+                                   pHcInstance->BufferReadyWaitLimit);
+            
+            if (!SDIO_SUCCESS(status)) {
+                break;    
+            }                       
+                /* acknowledge it */
+            WRITE_HOST_REG16(pHcInstance, 
+                             HOST_REG_NORMAL_INT_STATUS, 
+                             HOST_REG_NORMAL_INT_STATUS_BUFFER_WRITE_RDY);  
+                                           
+                /* transfer data */
+            HcdTransferTxData(pHcInstance, pReq);
+            DBG_ASSERT(pReq->DataRemaining == 0);          
+                
+                /* fall through for completion */              
+        } else { 
+            
+                /* wait for read buffer ready */
+            WAIT_REGISTER32_CHANGE_OR(pHcInstance,            
+                                      &status,            
+                                      HOST_REG_NORMAL_INT_STATUS,
+                                      HOST_REG_NORMAL_INT_STATUS_BUFFER_READ_RDY |
+                                          HOST_REG_NORMAL_INT_STATUS_ERROR,
+                                      HOST_REG_NORMAL_INT_STATUS_BUFFER_READ_RDY |
+                                          HOST_REG_NORMAL_INT_STATUS_ERROR,
+                                      pHcInstance->BufferReadyWaitLimit);
+            
+            if (!SDIO_SUCCESS(status)) {
+                break;    
+            }
+            
+            errors = READ_HOST_REG16(pHcInstance, HOST_REG_ERROR_INT_STATUS);
+            
+            if (errors != 0) {
+                break;    
+            }                     
+                /* acknowledge it */
+            WRITE_HOST_REG16(pHcInstance, 
+                             HOST_REG_NORMAL_INT_STATUS, 
+                             HOST_REG_NORMAL_INT_STATUS_BUFFER_READ_RDY);   
+                                      
+                /* unload buffer */
+            HcdTransferRxData(pHcInstance, pReq);
+            DBG_ASSERT(pReq->DataRemaining == 0);
+              
+            /* fall through for completion */ 
+        }  
+        
+            /* wait for transfer complete */
+        WAIT_REGISTER32_CHANGE_OR(pHcInstance,            
+                                  &status,            
+                                  HOST_REG_NORMAL_INT_STATUS,
+                                  HOST_REG_NORMAL_INT_STATUS_TRANSFER_COMPLETE |
+                                      HOST_REG_NORMAL_INT_STATUS_ERROR,
+                                  HOST_REG_NORMAL_INT_STATUS_TRANSFER_COMPLETE |
+                                      HOST_REG_NORMAL_INT_STATUS_ERROR, 
+                                  pHcInstance->TransferCompleteWaitLimit);
+                               
+        if (!SDIO_SUCCESS(status)) {
+            break;    
+        }
+        
+            /* get final error status */    
+        errors = READ_HOST_REG16(pHcInstance, HOST_REG_ERROR_INT_STATUS);
+               
+        break;
+    }
+    
+    if (errors != 0) {
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD Using Short Transfer Errors! :0x%X \n",errors));
+        status = TranslateSDError(pHcInstance, errors);
+        WRITE_HOST_REG16(pHcInstance, HOST_REG_ERROR_INT_STATUS, HOST_REG_ERROR_INT_STATUS_ALL_ERR);        
+    } 
+    
+    if (!SDIO_SUCCESS(status)) {
+        ResetCmdDatLine(pHcInstance);      
+    }
+    
+    return status;    
+}
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  HcdConfig - HCD configuration handler
+  Input:  pHcd - HCD object
+          pConfig - configuration setting
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS HcdConfig(PSDHCD pHcd, PSDCONFIG pConfig) 
+{
+    PSDHCD_INSTANCE pHcInstance = (PSDHCD_INSTANCE)pHcd->pContext; 
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    UINT16      command;
+    UINT32 temp;
+    
+    if(pHcInstance->ShuttingDown) {
+        DBG_PRINT(STD_HOST_TRACE_REQUESTS, ("SDIO STD HOST HcdConfig returning canceled\n"));
+        return SDIO_STATUS_CANCELED;
+    }
+
+    command = GET_SDCONFIG_CMD(pConfig);
+        
+    switch (command){
+        case SDCONFIG_GET_WP:
+            /* get write protect */
+            temp = READ_HOST_REG32(pHcInstance, HOST_REG_PRESENT_STATE);
+            /* if write enabled, set WP value to zero */
+            *((SDCONFIG_WP_VALUE *)pConfig->pData) = 
+                    (temp & HOST_REG_PRESENT_STATE_WRITE_ENABLED )? 0 : 1;
+            break;
+        case SDCONFIG_SEND_INIT_CLOCKS:
+            ClockStartStop(pHcInstance,CLOCK_ON);
+                /* should be at least 80 clocks at our lowest clock setting */
+            status = OSSleep(100);
+            ClockStartStop(pHcInstance,CLOCK_OFF);          
+            break;
+        case SDCONFIG_SDIO_INT_CTRL:
+            if (GET_SDCONFIG_CMD_DATA(PSDCONFIG_SDIO_INT_CTRL_DATA,pConfig)->SlotIRQEnable) {
+                {
+                    SDIO_IRQ_MODE_FLAGS irqModeFlags;
+                    UINT8               blockGapControl;
+                    
+                    irqModeFlags = GET_SDCONFIG_CMD_DATA(PSDCONFIG_SDIO_INT_CTRL_DATA,pConfig)->IRQDetectMode;
+                    if (irqModeFlags & IRQ_DETECT_4_BIT) {
+                        DBG_PRINT(SDDBG_TRACE, ("SDIO STD HOST: 4 Bit IRQ mode \r\n")); 
+                            /* in 4 bit mode, the clock needs to be left on */
+                        pHcInstance->KeepClockOn = TRUE;
+                        blockGapControl = READ_HOST_REG8(pHcInstance,HOST_REG_BLOCK_GAP);
+                        if (irqModeFlags & IRQ_DETECT_MULTI_BLK) {
+                            blockGapControl |= HOST_REG_INT_DETECT_AT_BLOCK_GAP;
+                            DBG_PRINT(SDDBG_TRACE, ("SDIO STD HOST: 4 Bit Multi-block IRQ detection enabled \r\n")); 
+                        } else {
+                                // no interrupts between blocks
+                            blockGapControl &= ~HOST_REG_INT_DETECT_AT_BLOCK_GAP;   
+                        }  
+                        WRITE_HOST_REG8(pHcInstance,HOST_REG_BLOCK_GAP,blockGapControl);                         
+                    } else {
+                            /* in 1 bit mode, the clock can be left off */
+                        pHcInstance->KeepClockOn = FALSE;   
+                    }                   
+                }
+                    /* enable detection */
+                EnableDisableSDIOIRQ(pHcInstance,TRUE,FALSE); 
+            } else {
+                pHcInstance->KeepClockOn = FALSE; 
+                EnableDisableSDIOIRQ(pHcInstance,FALSE,FALSE);
+            }
+            break;
+        case SDCONFIG_SDIO_REARM_INT:
+                /* re-enable IRQ detection */
+            EnableDisableSDIOIRQ(pHcInstance,TRUE,FALSE);
+            break;
+        case SDCONFIG_BUS_MODE_CTRL:
+            SetBusMode(pHcInstance, (PSDCONFIG_BUS_MODE_DATA)(pConfig->pData));
+            break;
+        case SDCONFIG_POWER_CTRL:
+            DBG_PRINT(STD_HOST_TRACE_CONFIG, ("SDIO STD HOST PwrControl: En:%d, VCC:0x%X \n",
+                      GET_SDCONFIG_CMD_DATA(PSDCONFIG_POWER_CTRL_DATA,pConfig)->SlotPowerEnable,
+                      GET_SDCONFIG_CMD_DATA(PSDCONFIG_POWER_CTRL_DATA,pConfig)->SlotPowerVoltageMask));
+            status = SetPowerLevel(pHcInstance, 
+                     GET_SDCONFIG_CMD_DATA(PSDCONFIG_POWER_CTRL_DATA,pConfig)->SlotPowerEnable,
+                     GET_SDCONFIG_CMD_DATA(PSDCONFIG_POWER_CTRL_DATA,pConfig)->SlotPowerVoltageMask);
+            break;
+        case SDCONFIG_GET_HCD_DEBUG:
+            *((CT_DEBUG_LEVEL *)pConfig->pData) = DBG_GET_DEBUG_LEVEL();
+            break;
+        case SDCONFIG_SET_HCD_DEBUG:
+            DBG_SET_DEBUG_LEVEL(*((CT_DEBUG_LEVEL *)pConfig->pData));
+            break;
+        default:
+            /* invalid request */
+            DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST Local HCD: HcdConfig - bad command: 0x%X\n",
+                                    command));
+            status = SDIO_STATUS_INVALID_PARAMETER;
+    }
+    
+    return status;
+} 
+
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SetPowerLevel - Set power level of board
+  Input:  pHcInstance - device context
+          On - if true turns power on, else off
+          Level - SLOT_VOLTAGE_MASK level
+  Output: 
+  Return: 
+  Notes: 
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS SetPowerLevel(PSDHCD_INSTANCE pHcInstance, BOOL On, SLOT_VOLTAGE_MASK Level) 
+{
+    UINT8 out;
+    UINT32 capCurrent;
+    
+    capCurrent = READ_HOST_REG32(pHcInstance, HOST_REG_MAX_CURRENT_CAPABILITIES);
+       
+    switch (Level) {
+      case SLOT_POWER_3_3V:
+        out = HOST_REG_POWER_CONTROL_VOLT_3_3;
+            /* extract */
+        capCurrent = (capCurrent & HOST_REG_MAX_CURRENT_CAPABILITIES_3_3_MASK) >>
+                        HOST_REG_MAX_CURRENT_CAPABILITIES_3_3_SHIFT;
+        break;
+      case SLOT_POWER_3_0V:
+        out = HOST_REG_POWER_CONTROL_VOLT_3_0;            
+            /* extract */
+        capCurrent = (capCurrent & HOST_REG_MAX_CURRENT_CAPABILITIES_3_0_MASK) >>
+                        HOST_REG_MAX_CURRENT_CAPABILITIES_3_0_SHIFT;
+        break;
+      case SLOT_POWER_1_8V:
+        out = HOST_REG_POWER_CONTROL_VOLT_1_8;            
+            /* extract */
+        capCurrent = (capCurrent & HOST_REG_MAX_CURRENT_CAPABILITIES_1_8_MASK) >>
+                        HOST_REG_MAX_CURRENT_CAPABILITIES_1_8_SHIFT;       
+        break;
+      default:
+        DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST SetPowerLevel - illegal power level %d\n",
+                                (UINT)Level));
+        return SDIO_STATUS_INVALID_PARAMETER;                        
+    }
+    
+    if (capCurrent != 0) {
+            /* convert to mA and set max current */
+        pHcInstance->Hcd.MaxSlotCurrent = capCurrent * HOST_REG_MAX_CURRENT_CAPABILITIES_SCALER;
+    } else {
+        DBG_PRINT(SDDBG_WARN, ("SDIO STD HOST No Current Caps value for VMask:0x%X, using 200mA \n",
+                  Level));  
+            /* set a value */          
+        pHcInstance->Hcd.MaxSlotCurrent = 200;  
+    }
+        
+    if (On) {
+        out |= HOST_REG_POWER_CONTROL_ON;
+    }
+        
+    WRITE_HOST_REG8(pHcInstance, HOST_REG_POWER_CONTROL, out);
+    return SDIO_STATUS_SUCCESS;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  SetPowerOn - Set power on or off for card
+  Input:  pHcInstance - device context
+          On - if true turns power on, else off
+  Output: 
+  Return: 
+  Notes: leavse the level alone
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void SetPowerOn(PSDHCD_INSTANCE pHcInstance, BOOL On) 
+{
+    /* non-synchronized read modify write */
+    UINT8 out = READ_HOST_REG8(pHcInstance, HOST_REG_POWER_CONTROL);
+    if (On) {
+        out |= HOST_REG_POWER_CONTROL_ON;
+    } else {
+        out &= ~HOST_REG_POWER_CONTROL_ON;
+    }
+    WRITE_HOST_REG8(pHcInstance, HOST_REG_POWER_CONTROL, out);
+    return;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  HcdInitialize - Initialize MMC controller
+  Input:  pHcInstance - device context
+  Output: 
+  Return: 
+  Notes: I/O resources must be mapped before calling this function
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS HcdInitialize(PSDHCD_INSTANCE pHcInstance) 
+{
+    UINT32 caps;
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    UINT32 clockValue;
+    PTEXT  pSpecVer;
+    
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO STD HOST HcdInitialize\n"));
+    
+    if (0 == pHcInstance->BufferReadyWaitLimit) {
+            /* initialize all these to defaults */
+	    pHcInstance->BufferReadyWaitLimit = 50000;
+	    pHcInstance->TransferCompleteWaitLimit = 100000;
+	    pHcInstance->PresentStateWaitLimit = 30000;
+	    pHcInstance->ResetWaitLimit = 30000;
+    }
+
+        /* reset the device */
+    DBG_PRINT(SDDBG_TRACE, ("SDIO STD HOST HcdInitialize, resetting\n"));
+    WRITE_HOST_REG8(pHcInstance, HOST_REG_SW_RESET, HOST_REG_SW_RESET_ALL);
+        /* wait for done */
+    while(READ_HOST_REG8(pHcInstance, HOST_REG_SW_RESET) &  HOST_REG_SW_RESET_ALL)
+        ;
+    DBG_PRINT(SDDBG_TRACE, ("SDIO STD HOST HcdInitialize, reset\n"));
+            
+        /* turn off clock */
+    ClockStartStop(pHcInstance, CLOCK_OFF);
+        /* display version info */
+    switch(((READ_HOST_REG16(pHcInstance, HOST_REG_VERSION) >> HOST_REG_VERSION_VENDOR_VERSION_SHIFT) &
+        (UINT16)HOST_REG_VERSION_VENDOR_VERSION_MASK)) {
+      case 0:
+        pSpecVer = "SD Host Spec. 1.0";
+        break;
+      case 1:
+        pSpecVer = "SD Host Spec. 2.0";
+        break;
+      default:
+        pSpecVer = "SD Host Spec. **UNKNOWN**";
+    }    
+    DBG_PRINT(SDDBG_TRACE, ("SDIO STD HOST HcdInitialize: Spec version: %s, Vendor version: %d\n",
+              pSpecVer,
+        (READ_HOST_REG16(pHcInstance, HOST_REG_VERSION) >> HOST_REG_VERSION_VENDOR_VERSION_SHIFT) &
+        HOST_REG_VERSION_VENDOR_VERSION_MASK));
+        
+        /* get capabilities */
+    caps = READ_HOST_REG32(pHcInstance, HOST_REG_CAPABILITIES);
+        /* save these */
+    pHcInstance->Caps = caps;
+       
+    switch((caps & HOST_REG_CAPABILITIES_MAX_BLOCK_LEN_MASK) >> HOST_REG_CAPABILITIES_MAX_BLOCK_LEN_SHIFT) {
+        case 0x00:
+            pHcInstance->Hcd.MaxBytesPerBlock = 512;
+            break;
+        case 0x01:
+            pHcInstance->Hcd.MaxBytesPerBlock = 1024;
+            break;
+        case 0x02:
+            pHcInstance->Hcd.MaxBytesPerBlock = 2048;
+            break;
+        case 0x03:
+            pHcInstance->Hcd.MaxBytesPerBlock = 512;
+            DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST invalid buffer length\n"));
+            status = SDIO_STATUS_DEVICE_ERROR;
+            break;
+    }
+    
+    clockValue = (caps & HOST_REG_CAPABILITIES_CLOCK_MASK) >> HOST_REG_CAPABILITIES_CLOCK_SHIFT;
+    if (clockValue != 0) {
+            /* convert to Hz */
+        pHcInstance->BaseClock = clockValue*1000*1000;   
+    } else {
+        DBG_PRINT(SDDBG_WARN, ("SDIO STD HOST base clock is zero! (caps:0x%X) \n",caps));
+            /* fall through and see if a default was setup */   
+    }                                               
+    if (pHcInstance->BaseClock == 0) {
+         DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST invalid base clock setting\n"));
+         status = SDIO_STATUS_DEVICE_ERROR;
+         return status;
+    }
+            
+    pHcInstance->Hcd.MaxClockRate =  pHcInstance->BaseClock;
+    DBG_PRINT(SDDBG_TRACE, ("SDIO STD HOST Using clock %dHz, max. block %d, high speed %s, %s, %s, %s\n",
+                            pHcInstance->BaseClock, pHcInstance->Hcd.MaxBytesPerBlock, 
+                            (caps & HOST_REG_CAPABILITIES_HIGH_SPEED)? "supported" : "not supported",
+                            (caps & HOST_REG_CAPABILITIES_DMA)? "Std. DMA" : "",
+                            (caps & HOST_REG_CAPABILITIES_ADMA)? "Adv. DMA" : "",
+                            (caps & HOST_REG_CAPABILITIES_MMC8)? "MMC8bit" : ""));
+                            
+    /* setup the supported voltages and max current */
+    pHcInstance->Hcd.SlotVoltageCaps = 0;
+    /* max current is dynamically set based on the desired voltage, see SetPowerLevel() */
+    pHcInstance->Hcd.MaxSlotCurrent = 0;
+
+    if (caps & HOST_REG_CAPABILITIES_VOLT_1_8) {
+        pHcInstance->Hcd.SlotVoltageCaps |= SLOT_POWER_1_8V;
+        pHcInstance->Hcd.SlotVoltagePreferred = SLOT_POWER_1_8V;
+    } 
+    if(caps & HOST_REG_CAPABILITIES_VOLT_3_0) {
+        pHcInstance->Hcd.SlotVoltageCaps |= SLOT_POWER_3_0V;
+        pHcInstance->Hcd.SlotVoltagePreferred = SLOT_POWER_3_0V;
+    }
+    if(caps & HOST_REG_CAPABILITIES_VOLT_3_3) {
+        pHcInstance->Hcd.SlotVoltageCaps |= SLOT_POWER_3_3V;
+        pHcInstance->Hcd.SlotVoltagePreferred = SLOT_POWER_3_3V;
+    }
+    
+         /* check host capabilities and back off some features */
+    if (!(caps & HOST_REG_CAPABILITIES_HIGH_SPEED)) {
+        pHcInstance->Hcd.Attributes &= ~SDHCD_ATTRIB_SD_HIGH_SPEED;    
+    }
+    
+    if (!(caps & HOST_REG_CAPABILITIES_MMC8)) {
+        pHcInstance->Hcd.Attributes &= ~SDHCD_ATTRIB_BUS_MMC8BIT;
+        pHcInstance->Hcd.Attributes &= ~SDHCD_ATTRIB_MMC_HIGH_SPEED;
+    }
+        
+    DBG_PRINT(SDDBG_TRACE, ("SDIO STD HOST HcdInitialize: caps: 0x%X, SlotVoltageCaps: 0x%X\n",
+                        (UINT)caps, (UINT)pHcInstance->Hcd.SlotVoltageCaps));
+              
+        /* set the default timeout */
+    WRITE_HOST_REG8(pHcInstance, HOST_REG_TIMEOUT_CONTROL, pHcInstance->TimeOut);
+
+    /* clear any existing errors and status */
+    WRITE_HOST_REG16(pHcInstance, HOST_REG_NORMAL_INT_STATUS, HOST_REG_NORMAL_INT_STATUS_CLEAR_ALL);
+    WRITE_HOST_REG16(pHcInstance, HOST_REG_ERROR_INT_STATUS, HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+    /* enable error interrupts */
+    WRITE_HOST_REG16(pHcInstance, HOST_REG_ERR_STATUS_ENABLE, HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+    DBG_PRINT(SDDBG_TRACE, ("SDIO STD HOST HcdInitialize - error enable 16bit: 0x%X\n", READ_HOST_REG16(pHcInstance, HOST_REG_ERR_STATUS_ENABLE)));
+  
+    WRITE_HOST_REG32(pHcInstance, HOST_REG_ERR_STATUS_ENABLE, HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+    DBG_PRINT(SDDBG_TRACE, ("SDIO STD HOST HcdInitialize - error enable 32 bit: 0x%X\n", READ_HOST_REG32(pHcInstance, HOST_REG_ERR_STATUS_ENABLE)));
+  
+    /* leave disabled for now */
+    WRITE_HOST_REG16(pHcInstance, HOST_REG_INT_ERR_SIGNAL_ENABLE, (UINT16)0);
+                
+    /* enable statuses */
+    WRITE_HOST_REG16(pHcInstance, HOST_REG_INT_STATUS_ENABLE, HOST_REG_INT_STATUS_ALL);
+        
+    if (pHcInstance->IdleBusClockRate != 0) {
+        int    clockIndex;
+       
+        /* user wants idle bus clock control,
+         * get the idle bus clock control value for reducing the clock rate when the bus
+         * is idle in 4-bit mode */
+         
+        clockIndex = GetClockTableIndex(pHcInstance, pHcInstance->IdleBusClockRate, &clockValue);
+        pHcInstance->ClockConfigIdle = SDClockDivisorTable[clockIndex].RegisterValue;
+    
+        DBG_PRINT(SDDBG_TRACE, ("SDIO STD HOST Idle Bus Clock Rate: %d Actual Rate: %d Control:0x%2.2X\n",
+            pHcInstance->IdleBusClockRate, clockValue, pHcInstance->ClockConfigIdle));
+    }
+    
+    
+    
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO STD HOST HcdInitialize\n"));
+    return status;
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  HcdDeinitialize - deactivate controller
+  Input:  pHcInstance - context
+  Output: 
+  Return: 
+  Notes:
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void HcdDeinitialize(PSDHCD_INSTANCE pHcInstance)
+{
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO STD HOST HcdDeinitialize\n"));
+    pHcInstance->KeepClockOn = FALSE;
+    MaskIrq(pHcInstance, HOST_REG_INT_STATUS_ALL,FALSE);
+    pHcInstance->ShuttingDown = TRUE;
+    /* disable error interrupts */
+    /* clear any existing errors */
+    WRITE_HOST_REG16(pHcInstance, HOST_REG_ERROR_INT_STATUS, HOST_REG_ERROR_INT_STATUS_ALL_ERR);
+    /* disable error interrupts */
+    WRITE_HOST_REG16(pHcInstance, HOST_REG_INT_ERR_SIGNAL_ENABLE, 0);
+    WRITE_HOST_REG16(pHcInstance, HOST_REG_ERR_STATUS_ENABLE, 0);
+    ClockStartStop(pHcInstance, CLOCK_OFF);
+    SetPowerOn(pHcInstance, FALSE);
+    DBG_PRINT(SDDBG_TRACE, ("-SDIO STD HOST HcdDeinitialize\n"));
+}
+
+/*++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  HcdSDInterrupt - process controller interrupt
+  Input:  pHcInstance - context
+  Output: 
+  Return: TRUE if interrupt was handled
+  Notes:
+               
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+BOOL HcdSDInterrupt(PSDHCD_INSTANCE pHcInstance) 
+{
+    UINT16      ints;
+    UINT16      errors;
+    UINT16 		enables;
+    UINT16 		statenables;
+    UINT16 		errorenables;
+    PSDREQUEST  pReq;
+    SDIO_STATUS status = SDIO_STATUS_PENDING;
+    
+    DBG_PRINT(STD_HOST_TRACE_INT, ("+SDIO STD HOST HcdSDInterrupt Int handler \n"));
+    
+    pReq = GET_CURRENT_REQUEST(&pHcInstance->Hcd);
+     
+    while (1) { 
+        
+        ints = READ_HOST_REG16(pHcInstance, HOST_REG_NORMAL_INT_STATUS);
+        errors = READ_HOST_REG16(pHcInstance, HOST_REG_ERROR_INT_STATUS);
+    	
+    	enables = READ_HOST_REG16(pHcInstance, HOST_REG_INT_SIGNAL_ENABLE);
+        statenables = READ_HOST_REG16(pHcInstance, HOST_REG_INT_STATUS_ENABLE);
+        errorenables = READ_HOST_REG16(pHcInstance, HOST_REG_INT_ERR_SIGNAL_ENABLE);
+        DBG_PRINT(STD_HOST_TRACE_INT, 
+        	("SDIO STD HOST HcdSDInterrupt, ints: 0x%X errors: 0x%x, sigenables: 0x%X, statenable: 0x%X errorenables:0x%X\n", 
+                (UINT)ints, (UINT)errors, (UINT)enables, (UINT)statenables, (UINT)errorenables));
+        
+        	/* only look at ints and error ints that are enabled */
+        ints &= enables;
+        errors &= errorenables;
+        
+        if ((ints == 0) && (errors == 0)) {
+            break;  
+        }
+            /* clear any error statuses */
+        WRITE_HOST_REG16(pHcInstance, HOST_REG_ERROR_INT_STATUS, errors);
+              
+        if (ints & HOST_REG_NORMAL_INT_STATUS_TRANSFER_COMPLETE) {
+            DBG_PRINT(STD_HOST_TRACE_INT, ("SDIO STD HOST HcdSDInterrupt clearing possible data timeout errors: 0x%X \n",
+                                          errors));
+            errors &= ~HOST_REG_ERROR_INT_STATUS_DATATIMEOUTERR;
+        }         
+        
+        if (errors != 0) {
+            status = TranslateSDError(pHcInstance, errors);  
+            break;            
+        }
+        
+            /* handle insert/removal */
+        if (ints & 
+            (HOST_REG_INT_STATUS_CARD_INSERT_ENABLE | HOST_REG_INT_STATUS_CARD_REMOVAL_ENABLE)){
+                /* card was inserted or removed, clear interrupt */
+            WRITE_HOST_REG16(pHcInstance, 
+                             HOST_REG_NORMAL_INT_STATUS, 
+                             HOST_REG_INT_STATUS_CARD_INSERT_ENABLE | 
+                             HOST_REG_INT_STATUS_CARD_REMOVAL_ENABLE);   
+                /* mask card insert */                        
+            MaskIrqFromIsr(pHcInstance, HOST_REG_INT_STATUS_ALLOW_INSERT_REMOVE_ONLY);
+            QueueEventResponse(pHcInstance, WORK_ITEM_CARD_DETECT);
+                /* we don't need to cancel any requests, every SD transaction is protected
+                   by a timeout, we just let the timeout occur */
+            /* continue and process interrupts */
+        } 
+    
+            /* deal with card interrupts */
+        if ((pHcInstance->CardInserted) && 
+            (ints & HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE)) {     
+            DBG_PRINT(STD_HOST_TRACE_SDIO_INT, ("SDIO STD HOST: SDIO Card Interrupt Detected \n"));           
+              /* SD card interrupt*/
+              /* disable the interrupt, the user must clear the interrupt */
+            EnableDisableSDIOIRQ(pHcInstance,FALSE,TRUE);          
+            QueueEventResponse(pHcInstance, WORK_ITEM_SDIO_IRQ);
+            /* continue looking for other interrupt causes */
+        } else if (ints & HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE) {
+              /* disable bogus interrupt */
+            EnableDisableSDIOIRQ(pHcInstance,FALSE,TRUE);
+        }
+        
+        if (NULL == pReq) {
+            break;
+        }
+                
+        if (ints & HOST_REG_NORMAL_INT_STATUS_CMD_COMPLETE) {
+                /* clear interrupt */
+            WRITE_HOST_REG16(pHcInstance, 
+                            HOST_REG_NORMAL_INT_STATUS, 
+                            HOST_REG_NORMAL_INT_STATUS_CMD_COMPLETE);
+                /* disable this interrupt */
+            MaskIrqFromIsr(pHcInstance, HOST_REG_INT_STATUS_CMD_COMPLETE_ENABLE);
+            status = ProcessCommandDone(pHcInstance,pReq,TRUE);           
+            if (status != SDIO_STATUS_PENDING) {
+                break;    
+            }            
+            continue;
+        }
+
+        if (ints & HOST_REG_NORMAL_INT_STATUS_DMA_INT) {
+                /* we should NOT get these, the descriptors should not have the INTERRUPT bit set */
+            DBG_ASSERT(FALSE);
+            break;
+        }
+                
+            /* check TX buffer ready */
+        if (ints & HOST_REG_NORMAL_INT_STATUS_BUFFER_WRITE_RDY) {
+            DBG_ASSERT(IS_SDREQ_WRITE_DATA(pReq->Flags));
+                /* clear interrupt */
+            WRITE_HOST_REG16(pHcInstance, 
+                            HOST_REG_NORMAL_INT_STATUS, 
+                            HOST_REG_NORMAL_INT_STATUS_BUFFER_WRITE_RDY);
+            if (pReq->DataRemaining > 0) {
+                    /* transfer data */
+                if (!HcdTransferTxData(pHcInstance, pReq)) {
+                        /* still more data to go... we'll get more write RDY interrupts */
+                    continue;
+                }                
+                
+                /* fall through if this is the last block */
+            } 
+                /* transfer is done */            
+                /* disable write rdy */
+            MaskIrqFromIsr(pHcInstance, 
+                           HOST_REG_INT_STATUS_BUFFER_WRITE_RDY_ENABLE);
+                /* all data transfered, wait for transfer complete */
+            UnmaskIrqFromIsr(pHcInstance, 
+                             HOST_REG_INT_STATUS_TRANSFER_COMPLETE_ENABLE); 
+            continue;
+        }
+        
+            /* check RX buffer ready */
+        if (ints & (HOST_REG_NORMAL_INT_STATUS_BUFFER_READ_RDY)) {
+            DBG_ASSERT(!IS_SDREQ_WRITE_DATA(pReq->Flags));
+                /* clear interrupt */
+            WRITE_HOST_REG16(pHcInstance, 
+                            HOST_REG_NORMAL_INT_STATUS, 
+                            HOST_REG_NORMAL_INT_STATUS_BUFFER_READ_RDY );
+                /* unload fifo */
+            HcdTransferRxData(pHcInstance, pReq);
+            if (pReq->DataRemaining > 0) {
+                    /* more to do.. */
+            } else {
+                    /* turn off read ready interrupts */
+                MaskIrqFromIsr(pHcInstance, 
+                               HOST_REG_INT_STATUS_BUFFER_READ_RDY_ENABLE);
+                    /* all data transfered, wait for transfer complete */
+                UnmaskIrqFromIsr(pHcInstance, 
+                                 HOST_REG_INT_STATUS_TRANSFER_COMPLETE_ENABLE);  
+            }
+            continue;
+        }
+                
+        if (ints & HOST_REG_NORMAL_INT_STATUS_TRANSFER_COMPLETE) {            
+            DBG_ASSERT(IS_SDREQ_DATA_TRANS(pReq->Flags));            
+            DBG_PRINT(STD_HOST_TRACE_INT, ("SDIO STD HOST HcdSDInterrupt Transfer done \n"));
+           
+                /* clear interrupt */
+            WRITE_HOST_REG16(pHcInstance, 
+                             HOST_REG_NORMAL_INT_STATUS, 
+                             HOST_REG_NORMAL_INT_STATUS_TRANSFER_COMPLETE);
+                /* if we get here without an error, we are done with the data
+                 * data operation */
+            status = SDIO_STATUS_SUCCESS; 
+            break;             
+        }
+        
+    }
+       
+    if (status != SDIO_STATUS_PENDING) {
+            /* turn off interrupts and clock */
+        MaskIrqFromIsr(pHcInstance, 
+                    ~(HOST_REG_INT_STATUS_ALLOW_INSERT_REMOVE_ONLY | 
+                      HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE) );
+                      
+        if (errors) {
+                /* reset statemachine */
+            ResetCmdDatLine(pHcInstance);          
+        }
+        
+        if (!pHcInstance->KeepClockOn) {
+            ClockStartStop(pHcInstance, CLOCK_OFF);
+        } else {
+                /* adjust for IDLE control */
+            IdleBusAdjustment(pHcInstance, ADJUST_BUS_IDLE);    
+        }
+                
+        if (pReq != NULL) {                        
+            if (IS_SDREQ_DATA_TRANS(pReq->Flags)) {
+                if (IS_SDREQ_WRITE_DATA(pReq->Flags)) {
+                    TRACE_SIGNAL_DATA_WRITE(pHcInstance, FALSE);
+                } else {
+                    TRACE_SIGNAL_DATA_READ(pHcInstance, FALSE);
+                } 
+            }         
+                /* set the status */
+            pReq->Status = status;
+            
+                /* cleanup DMA if used */
+            if (pReq->Flags & SDREQ_FLAGS_DATA_DMA) {
+                HcdTransferDataDMAEnd(pHcInstance,pReq);
+            }
+            
+            if (IS_SDREQ_DATA_TRANS(pReq->Flags)) {
+                DBG_PRINT(STD_HOST_TRACE_DATA, ("SDIO STD HOST - %s Data Transfer Complete with status:%d\n",
+                                     IS_SDREQ_WRITE_DATA(pReq->Flags) ? "TX":"RX",
+                                     pReq->Status));
+            }
+            
+            if ((DBG_GET_DEBUG_LEVEL() >= STD_HOST_TRACE_DATA_DUMP) && SDIO_SUCCESS(status) &&
+                IS_SDREQ_DATA_TRANS(pReq->Flags) && !IS_SDREQ_WRITE_DATA(pReq->Flags) &&
+                !(pReq->Flags & SDREQ_FLAGS_DATA_DMA)) {     
+                SDLIB_PrintBuffer(pReq->pDataBuffer,(pReq->BlockLen*pReq->BlockCount),"SDIO STD HOST - RX DataDump");    
+            }      
+                /* queue work item to notify bus driver of I/O completion */
+            QueueEventResponse(pHcInstance, WORK_ITEM_IO_COMPLETE);
+        }
+    }
+    
+    DBG_PRINT(STD_HOST_TRACE_INT, ("-SDIO STD HOST HcdSDInterrupt Int handler \n"));
+    return TRUE;
+}
+
+
+/* card detect callback from a deferred (non-ISR) context */
+void ProcessDeferredCardDetect(PSDHCD_INSTANCE pHcInstance)
+{
+
+    HCD_EVENT event;
+    volatile UINT32 temp;
+    
+    event = EVENT_HCD_NOP;
+    
+    DBG_PRINT(SDDBG_TRACE, ("+SDIO STD HOST Card Detect Processing \n"));
+    if (pHcInstance->ShuttingDown) {
+        return;
+    }
+
+    DBG_PRINT(SDDBG_TRACE, ("SDIO STD Host Card Detect Delaying to debounce card (%d Milliseconds)... \n",
+            pHcInstance->CardDetectDebounceMS));
+        
+    OSSleep(pHcInstance->CardDetectDebounceMS);
+    
+    /* wait for stable */
+    while(!(temp = READ_HOST_REG32(pHcInstance, HOST_REG_PRESENT_STATE))& 
+            HOST_REG_PRESENT_STATE_CARD_STATE_STABLE) {
+        ;
+    }
+
+        /* look for removal */
+    if (!(temp & HOST_REG_PRESENT_STATE_CARD_INSERTED)) {        
+        pHcInstance->CardInserted = FALSE; 
+        pHcInstance->KeepClockOn = FALSE;   
+            /* turn the power off */
+        SetPowerOn(pHcInstance, FALSE); 
+        if (pHcInstance->StartUpCardCheckDone) {
+            DBG_PRINT(STD_HOST_TRACE_CARD_INSERT, ("SDIO STD HOST Card Detect REMOVE\n"));
+            /* card not present */
+            event = EVENT_HCD_DETACH;
+        }
+    } else {
+        /* card present */
+        event = EVENT_HCD_ATTACH;
+        pHcInstance->CardInserted = TRUE; 
+        DBG_PRINT(STD_HOST_TRACE_CARD_INSERT, ("SDIO STD HOST Card Detect INSERT\n"));
+    }
+    
+    if (!pHcInstance->StartUpCardCheckDone) {
+            /* startup check is now done */
+        pHcInstance->StartUpCardCheckDone = TRUE;    
+    }
+         /* clear interrupt */
+    WRITE_HOST_REG16(pHcInstance, 
+                     HOST_REG_NORMAL_INT_STATUS,
+                     HOST_REG_INT_STATUS_CARD_INSERT_ENABLE | 
+                     HOST_REG_INT_STATUS_CARD_REMOVAL_ENABLE);
+        /* re-enable insertion/removal */                 
+    UnmaskIrq(pHcInstance, HOST_REG_INT_STATUS_ALLOW_INSERT_REMOVE_ONLY,FALSE);
+
+    if (event != EVENT_HCD_NOP) { 
+        SDIO_HandleHcdEvent(&pHcInstance->Hcd, event);
+    }
+    
+    if (!pHcInstance->CardInserted && !pHcInstance->RequestCompleteQueued) {
+            /* check for a stuck request */
+        PSDREQUEST  pReq = GET_CURRENT_REQUEST(&pHcInstance->Hcd);
+        if (pReq != NULL) {    
+            DBG_PRINT(SDDBG_ERROR, ("SDIO STD HOST , Stuck Request! 0x%X\n",(UINT)pReq));   
+            DumpStdHcdRegisters(pHcInstance);     
+            DumpCurrentRequestInfo(pHcInstance);
+        }
+    }
+    
+    DBG_PRINT(STD_HOST_TRACE_CARD_INSERT, ("- SDIO STD HOST Card Detect Processing \n"));
+}
+
+
+void DumpStdHcdRegisters(PSDHCD_INSTANCE pHcInstance)
+{
+    DBG_PRINT(SDDBG_TRACE, ("---------------- SDIO STD HOST, Register Dump ----------------- \n"));
+    
+    DBG_PRINT(SDDBG_TRACE,("    NORMAL INT STATUS    : 0x%X \n",
+                READ_HOST_REG16(pHcInstance, HOST_REG_NORMAL_INT_STATUS)));
+    DBG_PRINT(SDDBG_TRACE,("    ERROR INT STATUS     : 0x%X \n",
+                READ_HOST_REG16(pHcInstance, HOST_REG_ERROR_INT_STATUS)));
+    DBG_PRINT(SDDBG_TRACE,("    INT SIGNAL ENABLE    : 0x%X \n",
+                READ_HOST_REG16(pHcInstance, HOST_REG_INT_SIGNAL_ENABLE)));
+    DBG_PRINT(SDDBG_TRACE,("    ERROR SIGNAL ENABLES : 0x%X \n",
+                READ_HOST_REG16(pHcInstance, HOST_REG_INT_ERR_SIGNAL_ENABLE)));    
+    DBG_PRINT(SDDBG_TRACE,("    STATUS ENABLES       : 0x%X \n",
+                READ_HOST_REG16(pHcInstance, HOST_REG_INT_STATUS_ENABLE)));
+    DBG_PRINT(SDDBG_TRACE,("    ERROR STATUS ENABLES : 0x%X \n",
+                READ_HOST_REG16(pHcInstance, HOST_REG_ERR_STATUS_ENABLE)));        
+         
+    DBG_PRINT(SDDBG_TRACE,("    HOST PRESENT_STATE   : 0x%X \n",
+                READ_HOST_REG32(pHcInstance, HOST_REG_PRESENT_STATE)));         
+         
+                
+    DBG_PRINT(SDDBG_TRACE, ("------------------------------------------------------------------"));
+}
+
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/sdio_std_hcd.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/sdio_std_hcd.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/sdio_std_hcd.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,359 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_std_hcd.h
+
+ at abstract: OS Independent standard host header file
+ 
+ at notice: Copyright (c), 2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifndef __SDIO_STD_HCD_H___
+#define __SDIO_STD_HCD_H___
+
+#include <ctsystem.h>
+#include <sdio_busdriver.h>
+#include <sdio_lib.h>
+
+#ifdef VXWORKS
+/* Wind River VxWorks support */
+#include "vxworks/sdio_hcd_vxworks.h"
+#endif /* VXWORKS */
+
+/* QNX Neutrino suppot */
+#ifdef QNX
+#include "nto/sdio_hcd_nto.h"
+#endif /* QNX */
+
+#ifdef LINUX
+#include "linux/sdio_std_hcd_linux.h"
+#endif /* LINUX */
+
+#ifdef UNDER_CE
+#include "wince/sdio_std_hcd_wince.h"
+#endif /* LINUX */
+
+enum STD_HOST_TRACE_ENUM {
+    STD_HOST_TRACE_CARD_INSERT = (SDDBG_TRACE + 1),
+    STD_HOST_TRACE_DATA = (SDDBG_TRACE + 2),       
+    STD_HOST_TRACE_REQUESTS,  
+    STD_HOST_TRACE_DATA_DUMP,  
+    STD_HOST_TRACE_CONFIG,     
+    STD_HOST_TRACE_INT,    
+    STD_HOST_TRACE_CLOCK,
+    STD_HOST_TRACE_SDIO_INT,
+    STD_HOST_TRACE_LAST
+};
+
+        /* Host Controller register definitions */
+#define HOST_REG_SYSTEM_ADDRESS                     0x00
+
+#define HOST_REG_BLOCK_SIZE                         0x04
+#define HOST_REG_BLOCK_SIZE_LEN_MASK                0x0FFF
+#define HOST_REG_BLOCK_SIZE_DMA_MASK                0x7000
+#define HOST_REG_BLOCK_SIZE_DMA_SHIFT               12
+#define HOST_REG_BLOCK_SIZE_DMA_512K_BOUNDARY       (7 << HOST_REG_BLOCK_SIZE_DMA_SHIFT)
+
+#define HOST_REG_BLOCK_COUNT                        0x06
+
+#define HOST_REG_ARGUMENT                           0x08
+
+#define HOST_REG_TRANSFER_MODE                      0x0C
+#define HOST_REG_TRANSFER_MODE_MULTI_BLOCK          (1 << 5)
+#define HOST_REG_TRANSFER_MODE_READ                 (1 << 4)
+#define HOST_REG_TRANSFER_MODE_AUTOCMD12            (1 << 2)
+#define HOST_REG_TRANSFER_MODE_BLOCKCOUNT_ENABLE    (1 << 1)
+#define HOST_REG_TRANSFER_MODE_DMA_ENABLE           (1 << 0)
+
+#define HOST_REG_COMMAND_REGISTER                   0x0E
+#define HOST_REG_COMMAND_REGISTER_CMD_SHIFT         8
+#define HOST_REG_COMMAND_REGISTER_DATA_PRESENT      (1 << 5)
+#define HOST_REG_COMMAND_REGISTER_CMD_INDEX_CHECK_ENABLE (1 << 4)
+#define HOST_REG_COMMAND_REGISTER_CRC_CHECK_ENABLE  (1 << 3)
+
+
+#define HOST_REG_RESPONSE                           0x10  /* 32-bit reguisters 0x10 through 0x1C */
+
+#define HOST_REG_BUFFER_DATA_PORT                   0x20
+
+#define HOST_REG_PRESENT_STATE                      0x24
+#define HOST_REG_PRESENT_STATE_WRITE_ENABLED        (1 << 19)
+#define HOST_REG_PRESENT_STATE_CARD_DETECT          (1 << 18)
+#define HOST_REG_PRESENT_STATE_CARD_STATE_STABLE    (1 << 17)
+#define HOST_REG_PRESENT_STATE_CARD_INSERTED        (1 << 16)
+#define HOST_REG_PRESENT_STATE_BUFFER_READ_ENABLE   (1 << 11)
+#define HOST_REG_PRESENT_STATE_BUFFER_WRITE_ENABLE  (1 << 10)
+#define HOST_REG_PRESENT_STATE_BUFFER_READ_TRANSFER_ACTIVE (1 << 9)
+#define HOST_REG_PRESENT_STATE_BUFFER_WRITE_TRANSFER_ACTIVE (1 << 8)
+#define HOST_REG_PRESENT_STATE_BUFFER_DAT_LINE_ACTIVE (1 << 2)
+#define HOST_REG_PRESENT_STATE_BUFFER_COMMAND_INHIBIT_DAT (1 << 1)
+#define HOST_REG_PRESENT_STATE_BUFFER_COMMAND_INHIBIT_CMD (1 << 0)
+
+
+#define HOST_REG_CONTROL                            0x28
+#define HOST_REG_CONTROL_LED_ON                     (1 << 0)
+#define HOST_REG_CONTROL_1BIT_WIDTH                 0x00
+#define HOST_REG_CONTROL_4BIT_WIDTH                 (1 << 1)
+#define HOST_REG_CONTROL_HI_SPEED                   (1 << 2)
+#define HOST_REG_CONTROL_DMA_NONE                   (0 << 3)
+#define HOST_REG_CONTROL_DMA_32BIT                  (1 << 3)
+#define HOST_REG_CONTROL_DMA_64BIT                  (2 << 3)
+#define HOST_REG_CONTROL_DMA_MASK                   (3 << 3)
+#define HOST_REG_CONTROL_EXTENDED_DATA              (1 << 5)
+#define HOST_REG_CONTROL_CARD_DETECT_TEST           (1 << 6)
+#define HOST_REG_CONTROL_CARD_DETECT_SELECT         (1 << 7)
+#define HOST_REG_CONTROL_BUSWIDTH_BITS \
+    (HOST_REG_CONTROL_1BIT_WIDTH | HOST_REG_CONTROL_4BIT_WIDTH | HOST_REG_CONTROL_EXTENDED_DATA)
+
+
+#define HOST_REG_POWER_CONTROL                      0x29
+#define HOST_REG_POWER_CONTROL_ON                   (1 << 0)
+#define HOST_REG_POWER_CONTROL_VOLT_3_3             (7 << 1)
+#define HOST_REG_POWER_CONTROL_VOLT_3_0             (6 << 1)
+#define HOST_REG_POWER_CONTROL_VOLT_1_8             (5 << 1)
+
+#define HOST_REG_BLOCK_GAP                          0x2A
+#define HOST_REG_INT_DETECT_AT_BLOCK_GAP             (1 << 3)
+
+#define HOST_REG_CLOCK_CONTROL                      0x2C
+#define HOST_REG_CLOCK_CONTROL_CLOCK_ENABLE         (1 << 0)
+#define HOST_REG_CLOCK_CONTROL_CLOCK_STABLE         (1 << 1)
+#define HOST_REG_CLOCK_CONTROL_SD_ENABLE            (1 << 2)
+#define HOST_REG_CLOCK_CONTROL_FREQ_SELECT_MASK     (0xFF00)             
+ 
+#define HOST_REG_TIMEOUT_CONTROL                    0x2E
+#define HOST_REG_TIMEOUT_CONTROL_DEFAULT            0x0C
+
+#define HOST_REG_SW_RESET                           0x2F
+#define HOST_REG_SW_RESET_ALL                       (1 << 0)
+#define HOST_REG_SW_RST_CMD_LINE                    (1 << 1)
+#define HOST_REG_SW_RST_DAT_LINE                    (1 << 2)
+
+#define HOST_REG_NORMAL_INT_STATUS                  0x30
+#define HOST_REG_NORMAL_INT_STATUS_ERROR            (1 << 15)
+#define HOST_REG_NORMAL_INT_STATUS_CARD_INTERRUPT   (1 << 8)
+#define HOST_REG_NORMAL_INT_STATUS_CARD_REMOVAL     (1 << 7)
+#define HOST_REG_NORMAL_INT_STATUS_CARD_INSERT      (1 << 6)
+#define HOST_REG_NORMAL_INT_STATUS_BUFFER_READ_RDY  (1 << 5)
+#define HOST_REG_NORMAL_INT_STATUS_BUFFER_WRITE_RDY (1 << 4)
+#define HOST_REG_NORMAL_INT_STATUS_DMA_INT          (1 << 3)
+#define HOST_REG_NORMAL_INT_STATUS_BLOCK_GAP        (1 << 2)
+#define HOST_REG_NORMAL_INT_STATUS_TRANSFER_COMPLETE (1 << 1)
+#define HOST_REG_NORMAL_INT_STATUS_CMD_COMPLETE     (1 << 0)
+#define HOST_REG_NORMAL_INT_STATUS_CLEAR_ALL        0xFFFF
+
+#define HOST_REG_ERROR_INT_STATUS                   0x32
+#define HOST_REG_ERROR_INT_STATUS_VENDOR_MASK       0xE000
+#define HOST_REG_ERROR_INT_STATUS_VENDOR_SHIFT      13
+#define HOST_REG_ERROR_INT_STATUS_SDMAERR           (1 << 12)
+#define HOST_REG_ERROR_INT_STATUS_ADMAERR           (1 << 9)
+#define HOST_REG_ERROR_INT_STATUS_AUTOCMD12ERR      (1 << 8)
+#define HOST_REG_ERROR_INT_STATUS_CURRENTLIMITERR   (1 << 7)
+#define HOST_REG_ERROR_INT_STATUS_DATAENDBITERR     (1 << 6)
+#define HOST_REG_ERROR_INT_STATUS_DATACRCERR        (1 << 5)
+#define HOST_REG_ERROR_INT_STATUS_DATATIMEOUTERR    (1 << 4)
+#define HOST_REG_ERROR_INT_STATUS_CMDINDEXERR       (1 << 3)
+#define HOST_REG_ERROR_INT_STATUS_CMDENDBITERR      (1 << 2)
+#define HOST_REG_ERROR_INT_STATUS_CRCERR            (1 << 1)
+#define HOST_REG_ERROR_INT_STATUS_CMDTIMEOUTERR     (1 << 0)
+#define HOST_REG_ERROR_INT_STATUS_ALL_ERR           0x7FF
+
+#define HOST_REG_INT_STATUS_ENABLE                  0x34
+#define HOST_REG_INT_STATUS_CARD_INT_STAT_ENABLE    (1 << 8)
+#define HOST_REG_INT_STATUS_CARD_REMOVAL_ENABLE     (1 << 7)
+#define HOST_REG_INT_STATUS_CARD_INSERT_ENABLE      (1 << 6)
+#define HOST_REG_INT_STATUS_BUFFER_READ_RDY_ENABLE  (1 << 5)
+#define HOST_REG_INT_STATUS_BUFFER_WRITE_RDY_ENABLE (1 << 4)
+#define HOST_REG_INT_STATUS_DMA_ENABLE              (1 << 3)
+#define HOST_REG_INT_STATUS_BLOCK_GAP_ENABLE        (1 << 2)
+#define HOST_REG_INT_STATUS_TRANSFER_COMPLETE_ENABLE (1 << 1)
+#define HOST_REG_INT_STATUS_CMD_COMPLETE_ENABLE     (1 << 0)
+#define HOST_REG_INT_STATUS_ALL                      0x00FB
+#define HOST_REG_INT_STATUS_ALLOW_INSERT_REMOVE_ONLY 0x00C0
+
+#define HOST_REG_ERR_STATUS_ENABLE                  0x36
+/* same bits as HOST_REG_ERROR_INT_STATUS */
+
+#define HOST_REG_INT_SIGNAL_ENABLE                  0x38
+/* same bits as HOST_REG_INT_STATUS_ENABLE */
+
+#define HOST_REG_INT_ERR_SIGNAL_ENABLE              0x3A
+/* same bits as HOST_REG_ERR_STATUS_ENABLE */
+
+#define HOST_REG_CAPABILITIES                       0x40
+#define HOST_REG_CAPABILITIES_VOLT_1_8              (1 << 26)
+#define HOST_REG_CAPABILITIES_VOLT_3_0              (1 << 25)
+#define HOST_REG_CAPABILITIES_VOLT_3_3              (1 << 24)
+#define HOST_REG_CAPABILITIES_SUSPEND_RESUME        (1 << 23)
+#define HOST_REG_CAPABILITIES_DMA                   (1 << 22)
+#define HOST_REG_CAPABILITIES_HIGH_SPEED            (1 << 21)
+#define HOST_REG_CAPABILITIES_ADMA                  (1 << 20) 
+#define HOST_REG_CAPABILITIES_64                    (1 << 19) 
+#define HOST_REG_CAPABILITIES_MMC8                  (1 << 18) 
+
+#define HOST_REG_CAPABILITIES_MAX_BLOCK_LEN_MASK    0x30000
+#define HOST_REG_CAPABILITIES_MAX_BLOCK_LEN_SHIFT   16
+#define HOST_REG_CAPABILITIES_CLOCK_MASK            0x3F00
+#define HOST_REG_CAPABILITIES_CLOCK_SHIFT           8
+#define HOST_REG_CAPABILITIES_TIMEOUT_CLOCK_UNITS   (1 << 7)
+#define HOST_REG_CAPABILITIES_TIMEOUT_FREQ_MASK     0x3F
+#define HOST_REG_CAPABILITIES_TIMEOUT_FREQ_SHIFT    0
+
+#define HOST_REG_MAX_CURRENT_CAPABILITIES           0x48
+#define HOST_REG_MAX_CURRENT_CAPABILITIES_1_8_MASK  0xFF0000
+#define HOST_REG_MAX_CURRENT_CAPABILITIES_1_8_SHIFT 16
+#define HOST_REG_MAX_CURRENT_CAPABILITIES_3_0_MASK  0x00FF00
+#define HOST_REG_MAX_CURRENT_CAPABILITIES_3_0_SHIFT 8
+#define HOST_REG_MAX_CURRENT_CAPABILITIES_3_3_MASK  0x0000FF
+#define HOST_REG_MAX_CURRENT_CAPABILITIES_3_3_SHIFT 0
+#define HOST_REG_MAX_CURRENT_CAPABILITIES_SCALER    4
+
+#define HOST_REG_ADMA_ERR_STATUS                    0x54
+#define HOST_REG_ADMA_ERR_LEN_MISMATCH              (1 << 2)
+#define HOST_REG_ADMA_STATE_MASK                    0x03
+#define HOST_REG_ADMA_STATE_SHIFT                   0
+#define HOST_REG_ADMA_STATE_STOP                    0x0
+#define HOST_REG_ADMA_STATE_FDS                     0x1
+#define HOST_REG_ADMA_STATE_CADR                    0x2
+#define HOST_REG_ADMA_STATE_TFR                     0x3
+
+#define HOST_REG_ADMA_ADDRESS                       0x58
+
+#define HOST_REG_SLOT_INT_STATUS                    0xFC
+#define HOST_REG_SLOT_INT_MASK                      0xFF
+#define HOST_REG_MAX_INT_SLOTS                      8  
+
+#define HOST_REG_VERSION                            0xFE
+#define HOST_REG_VERSION_SPEC_VERSION_MASK          0xFF
+#define HOST_REG_VERSION_VENDOR_VERSION_MASK        0xFF00
+#define HOST_REG_VERSION_VENDOR_VERSION_SHIFT       8
+
+#define SDIO_BD_MAX_SLOTS                           24
+#define SDIO_SD_MAX_BLOCKS                      ((UINT)0xFFFF)
+
+#define SD_DEFAULT_RESPONSE_BYTES 6
+#define SD_R2_RESPONSE_BYTES      16
+#define STD_HOST_SHORT_TRANSFER_THRESHOLD 32
+#define SD_CLOCK_MAX_ENTRIES 9
+
+typedef struct _SD_CLOCK_TBL_ENTRY {
+    INT       ClockRateDivisor;  /* divisor */
+    UINT16    RegisterValue;     /* register value for clock divisor */  
+}SD_CLOCK_TBL_ENTRY;
+
+    /* standard host controller instance */
+typedef struct _SDHCD_INSTANCE {
+    SDLIST  List;                      /* list */
+    SDHCD   Hcd;                       /* HCD structure for registration */
+    SDDMA_DESCRIPTION DmaDescription;  /* dma description for this HCD if used*/
+    UINT32  Caps;                      /* host controller capabilities */
+#define SDHC_HW_INIT    0x01
+#define SDHC_REGISTERED 0x02
+    UINT8        InitStateMask;   /* init state for hardware independent layer */
+    BOOL         CardInserted;    /* card inserted flag */
+    BOOL         Cancel;          /* cancel flag */
+    BOOL         ShuttingDown;    /* indicates shut down of HCD */
+    BOOL         StartUpCardCheckDone;
+    UINT32       BaseClock;       /* base clock in hz */ 
+    UINT32       TimeOut;         /* timeout setting */ 
+    UINT32       ClockSpinLimit;  /* clock limit for command spin loops */
+    BOOL         KeepClockOn;
+    UINT32       BufferReadyWaitLimit;
+    UINT32       TransferCompleteWaitLimit;
+    UINT32       PresentStateWaitLimit;
+    UINT32       ResetWaitLimit;
+    BOOL         RequestCompleteQueued;
+    PVOID        pRegs;           /* a more direct pointer to the registers */
+    UINT16       ClockConfigIdle;      /* clock configuration for idle in 4-bit mode*/
+    UINT16       ClockConfigNormal;    /* clock configuration for normal operation */
+    UINT32       IdleBusClockRate;     /* clock rate when SDIO bus is idle and in 4-bit mode */
+    BOOL         Idle1BitIRQ;          /* when the bus is idle, switch to 1 bit mode for IRQ detection */
+    UINT32       CardDetectDebounceMS; /* debounce interval for the slot in milliseconds */
+    SDHCD_OS_SPECIFIC OsSpecific;      
+}SDHCD_INSTANCE, *PSDHCD_INSTANCE;
+
+#include "ctstartpack.h" 
+
+/* scatter-gather tables, as we use it in 32-bit mode */
+struct _SDHCD_SGDMA_DESCRIPTOR {
+    UINT32      Length;
+    UINT32      Address;
+}CT_PACK_STRUCT; 
+
+#include "ctendpack.h" 
+
+typedef struct _SDHCD_SGDMA_DESCRIPTOR SDHCD_SGDMA_DESCRIPTOR;
+typedef struct _SDHCD_SGDMA_DESCRIPTOR *PSDHCD_SGDMA_DESCRIPTOR; 
+
+#define SDDMA_VALID         0x1
+#define SDDMA_END           0x2
+#define SDDMA_INT           0x4
+#define SDDMA_LENGTH        0x10
+#define SDDMA_TRANSFER      0x20
+#define SDDMA_DESCRIP_LINK  0x30
+
+#define SET_DMA_LENGTH(d, l)\
+    ((d)->Length = ((l) << 12) | SDDMA_LENGTH | SDDMA_VALID)
+#define SET_DMA_ADDRESS(d, l)\
+    ((d)->Address = ((l) & 0xFFFFF000) | SDDMA_TRANSFER | SDDMA_VALID)
+#define SET_DMA_END_OF_TRANSFER(d)\
+    ((d)->Address |= SDDMA_END);
+    
+/* prototypes */
+SDIO_STATUS HcdRequest(PSDHCD pHcd);
+SDIO_STATUS HcdConfig(PSDHCD pHcd, PSDCONFIG pReq);
+SDIO_STATUS HcdInitialize(PSDHCD_INSTANCE pHcInstance);
+void HcdDeinitialize(PSDHCD_INSTANCE pHcInstance);
+BOOL HcdSDInterrupt(PSDHCD_INSTANCE pHcInstance);
+void ProcessDeferredCardDetect(PSDHCD_INSTANCE pHcInstance);
+SDIO_STATUS QueueEventResponse(PSDHCD_INSTANCE pHcInstance, INT WorkItemID);
+BOOL HcdTransferTxData(PSDHCD_INSTANCE pHcInstance, PSDREQUEST pReq);
+void HcdTransferRxData(PSDHCD_INSTANCE pHcInstance, PSDREQUEST pReq);
+void SetPowerOn(PSDHCD_INSTANCE pHcInstance, BOOL On);
+UINT16 MaskIrq(PSDHCD_INSTANCE pHcInstance, UINT32 Mask, BOOL FromIsr);
+UINT16 UnmaskIrq(PSDHCD_INSTANCE pHcInstance, UINT32 Mask, BOOL FromIsr);
+#define MaskIrqFromIsr(p,m) MaskIrq((p),(m),TRUE)
+#define UnmaskIrqFromIsr(p,m) UnmaskIrq((p),(m),TRUE)
+
+void EnableDisableSDIOIRQ(PSDHCD_INSTANCE pHcInstance, BOOL Enable, BOOL FromIsr);
+SDIO_STATUS SetUpHCDDMA(PSDHCD_INSTANCE pHcInstance, PSDREQUEST pReq);
+void HcdTransferDataDMAEnd(PSDHCD_INSTANCE pHcInstance, PSDREQUEST pReq);
+void DumpStdHcdRegisters(PSDHCD_INSTANCE pHcInstance);
+void DumpDMADescriptorsInfo(PSDHCD_INSTANCE pHcInstance);
+void DumpCurrentRequestInfo(PSDHCD_INSTANCE pHcInstance);
+
+#endif

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/stdhost_readme.txt
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/stdhost_readme.txt	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/hcd/stdhost/stdhost_readme.txt	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,23 @@
+Codetelligence Embedded SDIO Stack Host Controller Driver Read Me.
+Copyright 2006, Atheros Communications, Inc.
+
+Standard Host Controller Driver Core
+
+This sample driver source (stdhost) provides reference code for a
+SDIO Standard Host 2.0 compliant controller.  The source code is designed to be compiled 
+within a bus-specific implementation (i.e PCI).  The bus implementation is responsible for
+allocating I/O, interrupt and DMA resources.  The reference code may contain OS-specific helper
+functions that may handle common resource allocations (i.e. DMA, I/O Work items).
+Refer to the pci_std sample to view how the reference code is used on some OS implementations. 
+
+The core provides the following features:
+
+   1. Host Controller Driver interface to the SDIO stack (request and configuration processing).
+   2. Abstraction of interrupt handling, deferred work and card insertion/removal.
+   3. OS-specific implementation of Direct Memory Access (DMA) (see pci_std reference).
+   4. OS-specific management of multiple slot instances (see pci_std reference).
+
+
+
+          
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/_sdio_defs.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/_sdio_defs.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/_sdio_defs.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,642 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: _sdio_defs.h
+
+ at abstract: SD/SDIO definitions 
+ 
+ at notice: Copyright (c), 2004-2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifndef ___SDIO_DEFS_H___
+#define ___SDIO_DEFS_H___
+
+#define SD_INIT_BUS_CLOCK   100000    /* initialization clock in hz */
+#define SPI_INIT_BUS_CLOCK  100000    /* initialization clock in hz */
+#define SD_MAX_BUS_CLOCK    25000000  /* max clock speed in hz */
+#define SD_HS_MAX_BUS_CLOCK 50000000  /* SD high speed max clock speed in hz */
+#define SDIO_LOW_SPEED_MAX_BUS_CLOCK 400000 /* max low speed clock in hz */
+#define SDMMC_MIN_INIT_CLOCKS   80    /* minimun number of initialization clocks */  
+#define SDIO_EMPC_CURRENT_THRESHOLD  300  /* SDIO 1.10 , EMPC (mA) threshold, we add some overhead */
+                             
+/* commands */
+#define CMD0    0
+#define CMD1    1
+#define CMD2    2
+#define CMD3    3
+#define CMD4    4
+#define CMD5    5
+#define CMD6    6
+#define CMD7    7
+#define CMD9    9
+#define CMD10   10
+#define CMD12   12
+#define CMD13   13
+#define CMD15   15
+#define CMD16   16
+#define CMD17   17
+#define CMD18   18
+#define CMD24   24
+#define CMD25   25
+#define CMD27   27
+#define CMD28   28
+#define CMD29   29
+#define CMD30   30
+#define CMD32   32
+#define CMD33   33
+#define CMD38   38
+#define CMD42   42
+#define CMD52   52
+#define CMD53   53
+#define CMD55   55
+#define CMD56   56
+#define CMD58   58
+#define CMD59   59
+#define ACMD6   6
+#define ACMD13  13
+#define ACMD22  22
+#define ACMD23  23
+#define ACMD41  41
+#define ACMD42  42
+#define ACMD51  51
+
+#define SD_ACMD6_BUS_WIDTH_1_BIT         0x00
+#define SD_ACMD6_BUS_WIDTH_4_BIT         0x02
+
+#define SD_CMD59_CRC_OFF            0x00000000
+#define SD_CMD59_CRC_ON             0x00000001
+
+/* SD/SPI max response size */
+#define SD_MAX_CMD_RESPONSE_BYTES SD_R2_RESPONSE_BYTES
+
+#define SD_R1_RESPONSE_BYTES  6
+#define SD_R1B_RESPONSE_BYTES SD_R1_RESPONSE_BYTES
+#define SD_R1_GET_CMD(pR) ((pR)[5] & 0xC0))
+#define SD_R1_SET_CMD(pR,cmd)  (pR)[5] = (cmd) & 0xC0
+#define SD_R1_GET_CARD_STATUS(pR) (((UINT32)((pR)[1]))        |  \
+                                  (((UINT32)((pR)[2])) << 8)  |  \
+                                  (((UINT32)((pR)[3])) << 16) |  \
+                                  (((UINT32)((pR)[4])) << 24) )
+#define SD_R1_SET_CMD_STATUS(pR,status) \
+{                                      \
+    (pR)[1] = (UINT8)(status);         \
+    (pR)[2] = (UINT8)((status) >> 8);  \
+    (pR)[3] = (UINT8)((status) >> 16); \
+    (pR)[4] = (UINT8)((status) >> 24); \
+}
+
+/* SD R1 card status bit masks */
+#define SD_CS_CMD_OUT_OF_RANGE  ((UINT32)(1 << 31))
+#define SD_CS_ADDRESS_ERR       (1 << 30)
+#define SD_CS_BLK_LEN_ERR       (1 << 29)
+#define SD_CS_ERASE_SEQ_ERR     (1 << 28)
+#define SD_CS_ERASE_PARAM_ERR   (1 << 27)
+#define SD_CS_WP_ERR            (1 << 26)
+#define SD_CS_CARD_LOCKED       (1 << 25)
+#define SD_CS_LK_UNLK_FAILED    (1 << 24)
+#define SD_CS_PREV_CMD_CRC_ERR  (1 << 23)
+#define SD_CS_ILLEGAL_CMD_ERR   (1 << 22)
+#define SD_CS_ECC_FAILED        (1 << 21)
+#define SD_CS_CARD_INTERNAL_ERR (1 << 20)
+#define SD_CS_GENERAL_ERR       (1 << 19)
+#define SD_CS_CSD_OVERWR_ERR    (1 << 16)
+#define SD_CS_WP_ERASE_SKIP     (1 << 15)
+#define SD_CS_ECC_DISABLED      (1 << 14)
+#define SD_CS_ERASE_RESET       (1 << 13)
+#define SD_CS_GET_STATE(status) (((status) >> 9) & 0x0f)
+#define SD_CS_SET_STATE(status, state) \
+{                               \
+    (status) &= ~(0x0F << 9);   \
+    (status) |= (state) << 9    \
+}
+
+#define SD_CS_TRANSFER_ERRORS \
+                ( SD_CS_ADDRESS_ERR       | \
+                  SD_CS_BLK_LEN_ERR       | \
+                  SD_CS_ERASE_SEQ_ERR     | \
+                  SD_CS_ERASE_PARAM_ERR   | \
+                  SD_CS_WP_ERR            | \
+                  SD_CS_ECC_FAILED        | \
+                  SD_CS_CARD_INTERNAL_ERR | \
+                  SD_CS_GENERAL_ERR )
+                  
+#define SD_CS_STATE_IDLE   0
+#define SD_CS_STATE_READY  1
+#define SD_CS_STATE_IDENT  2
+#define SD_CS_STATE_STBY   3
+#define SD_CS_STATE_TRANS  4
+#define SD_CS_STATE_DATA   5
+#define SD_CS_STATE_RCV    6
+#define SD_CS_STATE_PRG    7
+#define SD_CS_STATE_DIS    8
+#define SD_CS_READY_FOR_DATA    (1 << 8)
+#define SD_CS_APP_CMD           (1 << 5)
+#define SD_CS_AKE_SEQ_ERR       (1 << 3)
+
+/* SD R2 response */
+#define SD_R2_RESPONSE_BYTES  17
+#define MAX_CSD_CID_BYTES     16
+#define SD_R2_SET_STUFF_BITS(pR)   (pR)[16] = 0x3F
+#define GET_SD_CSD_TRANS_SPEED(pR) (pR)[12]
+#define GET_SD_CID_MANFID(pR)      (pR)[15]
+#define GET_SD_CID_PN_1(pR)        (pR)[12]
+#define GET_SD_CID_PN_2(pR)        (pR)[11]
+#define GET_SD_CID_PN_3(pR)        (pR)[10]
+#define GET_SD_CID_PN_4(pR)        (pR)[9]
+#define GET_SD_CID_PN_5(pR)        (pR)[8]
+#define GET_SD_CID_PN_6(pR)        (pR)[7]
+
+#define GET_SD_CID_OEMID(pR)      ((((UINT16)(pR)[14]) << 8 )| (UINT16)((pR)[13]))
+#define SDMMC_OCR_VOLTAGE_MASK 0x7FFFFFFF
+/* SD R3 response */
+#define SD_R3_RESPONSE_BYTES 6                                            
+#define SD_R3_GET_OCR(pR) ((((UINT32)((pR)[1])) |  \
+                           (((UINT32)((pR)[2])) << 8)  |  \
+                           (((UINT32)((pR)[3])) << 16) | \
+                           (((UINT32)((pR)[4])) << 24)) & SDMMC_OCR_VOLTAGE_MASK)
+#define SD_R3_IS_CARD_READY(pR)  (((pR)[4] & 0x80) == 0x80)
+
+/* OCR bit definitions */
+#define SD_OCR_CARD_PWR_UP_STATUS  ((UINT32)(1 << 31))
+#define SD_OCR_3_5_TO_3_6_VDD      (1 << 23)
+#define SD_OCR_3_4_TO_3_5_VDD      (1 << 22)
+#define SD_OCR_3_3_TO_3_4_VDD      (1 << 21)
+#define SD_OCR_3_2_TO_3_3_VDD      (1 << 20)
+#define SD_OCR_3_1_TO_3_2_VDD      (1 << 19)
+#define SD_OCR_3_0_TO_3_1_VDD      (1 << 18)
+#define SD_OCR_2_9_TO_3_0_VDD      (1 << 17)
+#define SD_OCR_2_8_TO_2_9_VDD      (1 << 16)
+#define SD_OCR_2_7_TO_2_8_VDD      (1 << 15)
+#define SD_OCR_2_6_TO_2_7_VDD      (1 << 14)
+#define SD_OCR_2_5_TO_2_6_VDD      (1 << 13)
+#define SD_OCR_2_4_TO_2_5_VDD      (1 << 12)
+#define SD_OCR_2_3_TO_2_4_VDD      (1 << 11)
+#define SD_OCR_2_2_TO_2_3_VDD      (1 << 10)
+#define SD_OCR_2_1_TO_2_2_VDD      (1 << 9)
+#define SD_OCR_2_0_TO_2_1_VDD      (1 << 8)
+#define SD_OCR_1_9_TO_2_0_VDD      (1 << 7)
+#define SD_OCR_1_8_TO_1_9_VDD      (1 << 6)
+#define SD_OCR_1_7_TO_1_8_VDD      (1 << 5)
+#define SD_OCR_1_6_TO_1_7_VDD      (1 << 4)
+
+/* SD Status data block */
+#define SD_STATUS_DATA_BYTES        64
+#define SDS_GET_DATA_WIDTH(buffer)  ((buffer)[0] & 0xC0)
+#define SDS_BUS_1_BIT               0x00
+#define SDS_BUS_4_BIT               0x80
+#define SDS_GET_SECURE_MODE(buffer) ((buffer)[0] & 0x20)
+#define SDS_CARD_SECURE_MODE        0x20
+#define SDS_GET_CARD_TYPE(buffer)   ((buffer)[60] & 0x0F)
+#define SDS_SD_CARD_RW              0x00
+#define SDS_SD_CARD_ROM             0x01
+
+/* SD R6 response */
+#define SD_R6_RESPONSE_BYTES 6 
+#define SD_R6_GET_RCA(pR) ((UINT16)((pR)[3]) | (((UINT16)((pR)[4])) << 8)) 
+#define SD_R6_GET_CS(pR)  ((UINT16)((pR)[1]) | (((UINT16)((pR)[2])) << 8)) 
+
+/* SD Configuration Register (SCR) */
+#define SD_SCR_BYTES            8
+#define SCR_REV_1_0             0x00
+#define SCR_SD_SPEC_1_00        0x00
+#define SCR_SD_SPEC_1_10        0x01
+#define SCR_BUS_SUPPORTS_1_BIT  0x01   
+#define SCR_BUS_SUPPORTS_4_BIT  0x04
+#define SCR_SD_SECURITY_MASK    0x70
+#define SCR_SD_NO_SECURITY      0x00
+#define SCR_SD_SECURITY_1_0     0x10
+#define SCR_SD_SECURITY_2_0     0x20
+#define SCR_DATA_STATUS_1_AFTER_ERASE  0x80
+
+#define GET_SD_SCR_STRUCT_VER(pB) ((pB)[7] >> 4) 
+#define GET_SD_SCR_SDSPEC_VER(pB) ((pB)[7] & 0x0F) 
+#define GET_SD_SCR_BUSWIDTHS(pB)  ((pB)[6] & 0x0F) 
+#define GET_SD_SCR_BUSWIDTHS_FLAGS(pB)  (pB)[6]
+#define GET_SD_SCR_SECURITY(pB)   (((pB)[6] >> 4) & 0x07) 
+#define GET_SD_SCR_DATA_STAT_AFTER_ERASE(pB) (((pB)[6] >> 7) & 0x01) 
+
+/* SDIO R4 Response */
+#define SD_SDIO_R4_RESPONSE_BYTES 6
+#define SD_SDIO_R4_GET_OCR(pR) ((UINT32)((pR)[1])        |  \
+                          (((UINT32)(pR)[2]) << 8)  |  \
+                          (((UINT32)(pR)[3]) << 16))
+#define SD_SDIO_R4_IS_MEMORY_PRESENT(pR)   (((pR)[4] & 0x08) == 0x08)
+#define SD_SDIO_R4_GET_IO_FUNC_COUNT(pR)   (((pR)[4] >> 4) & 0x07)
+#define SD_SDIO_R4_IS_CARD_READY(pR)       (((pR)[4] & 0x80) == 0x80)
+
+/* SDIO R5 response */
+#define SD_SDIO_R5_RESPONSE_BYTES      6
+#define SD_SDIO_R5_READ_DATA_OFFSET    1
+#define SD_R5_GET_READ_DATA(pR)  (pR)[SD_SDIO_R5_READ_DATA_OFFSET]
+#define SD_R5_RESP_FLAGS_OFFSET   2
+#define SD_R5_GET_RESP_FLAGS(pR) (pR)[SD_R5_RESP_FLAGS_OFFSET]
+#define SD_R5_SET_CMD(pR,cmd)  (pR)[5] = (cmd) & 0xC0
+#define SD_R5_RESP_CMD_ERR  (1 << 7) /* for previous cmd */
+#define SD_R5_ILLEGAL_CMD   (1 << 6)
+#define SD_R5_GENERAL_ERR   (1 << 3)
+#define SD_R5_INVALID_FUNC  (1 << 1)
+#define SD_R5_ARG_RANGE_ERR (1 << 0)
+#define SD_R5_CURRENT_CMD_ERRORS (SD_R5_ILLEGAL_CMD | SD_R5_GENERAL_ERR \
+                                 | SD_R5_INVALID_FUNC | SD_R5_ARG_RANGE_ERR)
+#define SD_R5_ERRORS (SD_R5_CURRENT_CMD_ERRORS)
+
+#define SD_R5_GET_IO_STATE(pR) (((pR)[2] >> 4) & 0x03) 
+#define SD_R5_STATE_DIS 0x00
+#define SD_R5_STATE_CMD 0x01
+#define SD_R5_STATE_TRN 0x02
+
+/* SDIO Modified R6 Response */
+#define SD_SDIO_R6_RESPONSE_BYTES 6
+#define SD_SDIO_R6_GET_RCA(pR)  ((UINT16)((pR)[3]) | ((UINT16)((pR)[4]) << 8)) 
+#define SD_SDIO_R6_GET_CSTAT(pR)((UINT16)((pR)[1]) | ((UINT16)((pR)[2]) << 8)) 
+
+/* SPI mode R1 response */
+#define SPI_R1_RESPONSE_BYTES   1    
+#define GET_SPI_R1_RESP_TOKEN(pR) (pR)[0]
+#define SPI_CS_STATE_IDLE       0x01
+#define SPI_CS_ERASE_RESET      (1 << 1)
+#define SPI_CS_ILLEGAL_CMD      (1 << 2)
+#define SPI_CS_CMD_CRC_ERR      (1 << 3)
+#define SPI_CS_ERASE_SEQ_ERR    (1 << 4)
+#define SPI_CS_ADDRESS_ERR      (1 << 5)
+#define SPI_CS_PARAM_ERR        (1 << 6)
+#define SPI_CS_ERR_MASK         0x7c
+
+/* SPI mode R2 response */
+#define SPI_R2_RESPONSE_BYTES  2
+#define GET_SPI_R2_RESP_TOKEN(pR)   (pR)[1]
+#define GET_SPI_R2_STATUS_TOKEN(pR) (pR)[0]
+/* the first response byte is defined above */
+/* the second response byte is defined below */
+#define SPI_CS_CARD_IS_LOCKED      (1 << 0)
+#define SPI_CS_LOCK_UNLOCK_FAILED  (1 << 1)
+#define SPI_CS_ERROR               (1 << 2)
+#define SPI_CS_INTERNAL_ERROR      (1 << 3)
+#define SPI_CS_ECC_FAILED          (1 << 4)
+#define SPI_CS_WP_VIOLATION        (1 << 5)
+#define SPI_CS_ERASE_PARAM_ERR     (1 << 6)
+#define SPI_CS_OUT_OF_RANGE        (1 << 7)
+
+/* SPI mode R3 response */
+#define SPI_R3_RESPONSE_BYTES 5                                            
+#define SPI_R3_GET_OCR(pR) ((((UINT32)((pR)[0])) |         \
+                            (((UINT32)((pR)[1])) << 8)  |  \
+                            (((UINT32)((pR)[2])) << 16) |  \
+                            (((UINT32)((pR)[3])) << 24)) & SDMMC_OCR_VOLTAGE_MASK)
+#define SPI_R3_IS_CARD_READY(pR)  (((pR)[3] & 0x80) == 0x80)
+#define GET_SPI_R3_RESP_TOKEN(pR) (pR)[4]  
+
+/* SPI mode SDIO R4 response */
+#define SPI_SDIO_R4_RESPONSE_BYTES 5
+#define SPI_SDIO_R4_GET_OCR(pR) ((UINT32)((pR)[0])        |  \
+                          (((UINT32)(pR)[1]) << 8)   |  \
+                          (((UINT32)(pR)[2]) << 16))
+#define SPI_SDIO_R4_IS_MEMORY_PRESENT(pR)   (((pR)[3] & 0x08) == 0x08)
+#define SPI_SDIO_R4_GET_IO_FUNC_COUNT(pR)   (((pR)[3] >> 4) & 0x07)
+#define SPI_SDIO_R4_IS_CARD_READY(pR)       (((pR)[3] & 0x80) == 0x80)
+#define GET_SPI_SDIO_R4_RESP_TOKEN(pR)  (pR)[4]  
+
+/* SPI Mode SDIO R5 response */
+#define SPI_SDIO_R5_RESPONSE_BYTES 2
+#define GET_SPI_SDIO_R5_RESP_TOKEN(pR)     (pR)[1]
+#define GET_SPI_SDIO_R5_RESPONSE_RDATA(pR) (pR)[0]
+#define SPI_R5_IDLE_STATE   0x01
+#define SPI_R5_ILLEGAL_CMD  (1 << 2)
+#define SPI_R5_CMD_CRC      (1 << 3)
+#define SPI_R5_FUNC_ERR     (1 << 4)
+#define SPI_R5_PARAM_ERR    (1 << 6)
+
+/* SDIO COMMAND 52 Definitions */
+#define CMD52_READ  0
+#define CMD52_WRITE 1
+#define CMD52_READ_AFTER_WRITE 1
+#define CMD52_NORMAL_WRITE     0   
+#define SDIO_SET_CMD52_ARG(arg,rw,func,raw,address,writedata) \
+    (arg) = (((rw) & 1) << 31)           | \
+            (((func) & 0x7) << 28)       | \
+            (((raw) & 1) << 27)          | \
+            (1 << 26)                    | \
+            (((address) & 0x1FFFF) << 9) | \
+            (1 << 8)                     | \
+            ((writedata) & 0xFF)
+#define SDIO_SET_CMD52_READ_ARG(arg,func,address) \
+    SDIO_SET_CMD52_ARG(arg,CMD52_READ,(func),0,address,0x00)
+#define SDIO_SET_CMD52_WRITE_ARG(arg,func,address,value) \
+    SDIO_SET_CMD52_ARG(arg,CMD52_WRITE,(func),CMD52_NORMAL_WRITE,address,value)
+        
+/* SDIO COMMAND 53 Definitions */
+#define CMD53_READ          0
+#define CMD53_WRITE         1
+#define CMD53_BLOCK_BASIS   1 
+#define CMD53_BYTE_BASIS    0
+#define CMD53_FIXED_ADDRESS 0
+#define CMD53_INCR_ADDRESS  1
+#define SDIO_SET_CMD53_ARG(arg,rw,func,mode,opcode,address,bytes_blocks) \
+    (arg) = (((rw) & 1) << 31)                  | \
+            (((func) & 0x7) << 28)              | \
+            (((mode) & 1) << 27)                | \
+            (((opcode) & 1) << 26)              | \
+            (((address) & 0x1FFFF) << 9)        | \
+            ((bytes_blocks) & 0x1FF)
+            
+#define SDIO_MAX_LENGTH_BYTE_BASIS  512
+#define SDIO_MAX_BLOCKS_BLOCK_BASIS 511
+#define SDIO_MAX_BYTES_PER_BLOCK    2048
+#define SDIO_COMMON_AREA_FUNCTION_NUMBER 0
+#define SDIO_FIRST_FUNCTION_NUMBER       1
+#define SDIO_LAST_FUNCTION_NUMBER        7
+
+#define CMD53_CONVERT_BYTE_BASIS_BLK_LENGTH_PARAM(b) (((b) < SDIO_MAX_LENGTH_BYTE_BASIS) ? (b) : 0)
+#define CMD53_CONVERT_BLOCK_BASIS_BLK_COUNT_PARAM(b) (((b) <= SDIO_MAX_BLOCKS_BLOCK_BASIS) ? (b) : 0)
+
+
+/* SDIO COMMON Registers */
+
+/* revision register */
+#define CCCR_SDIO_REVISION_REG  0x00
+#define CCCR_REV_MASK           0x0F
+#define CCCR_REV_1_0            0x00
+#define CCCR_REV_1_1            0x01
+#define SDIO_REV_MASK           0xF0
+#define SDIO_REV_1_00           0x00
+#define SDIO_REV_1_10           0x10
+#define SDIO_REV_1_20           0x20
+/* SD physical spec revision */
+#define SD_SPEC_REVISION_REG    0x01
+#define SD_REV_MASK             0x0F
+#define SD_REV_1_01             0x00
+#define SD_REV_1_10             0x01
+/* I/O Enable  */
+#define SDIO_ENABLE_REG         0x02
+/* I/O Ready */
+#define SDIO_READY_REG          0x03
+/* Interrupt Enable */
+#define SDIO_INT_ENABLE_REG     0x04
+#define SDIO_INT_MASTER_ENABLE  0x01
+#define SDIO_INT_ALL_ENABLE     0xFE
+/* Interrupt Pending */
+#define SDIO_INT_PENDING_REG    0x05 
+#define SDIO_INT_PEND_MASK      0xFE
+/* I/O Abort */
+#define SDIO_IO_ABORT_REG       0x06
+#define SDIO_IO_RESET           (1 << 3) 
+/* Bus Interface */
+#define SDIO_BUS_IF_REG         0x07
+#define CARD_DETECT_DISABLE     0x80
+#define SDIO_BUS_WIDTH_1_BIT    0x00
+#define SDIO_BUS_WIDTH_4_BIT    0x02
+/* Card Capabilities */
+#define SDIO_CARD_CAPS_REG          0x08
+#define SDIO_CAPS_CMD52_WHILE_DATA  0x01   /* card can issue CMD52 while data transfer */
+#define SDIO_CAPS_MULTI_BLOCK       0x02   /* card supports multi-block data transfers */
+#define SDIO_CAPS_READ_WAIT         0x04   /* card supports read-wait protocol */
+#define SDIO_CAPS_SUSPEND_RESUME    0x08   /* card supports I/O function suspend/resume */
+#define SDIO_CAPS_INT_MULTI_BLK     0x10   /* interrupts between multi-block data capable */
+#define SDIO_CAPS_ENB_INT_MULTI_BLK 0x20   /* enable ints between muli-block data */
+#define SDIO_CAPS_LOW_SPEED         0x40   /* low speed card */
+#define SDIO_CAPS_4BIT_LS           0x80   /* 4 bit low speed card */
+/* Common CIS pointer */
+#define SDIO_CMN_CIS_PTR_LOW_REG    0x09
+#define SDIO_CMN_CIS_PTR_MID_REG    0x0a
+#define SDIO_CMN_CIS_PTR_HI_REG     0x0b
+/* Bus suspend */
+#define SDIO_BUS_SUSPEND_REG            0x0c
+#define SDIO_FUNC_SUSPEND_STATUS_MASK   0x01 /* selected function is suspended */
+#define SDIO_SUSPEND_FUNCTION           0x02 /* suspend the current selected function */
+/* Function select (for bus suspension) */
+#define SDIO_FUNCTION_SELECT_REG        0x0d
+#define SDIO_SUSPEND_FUNCTION_0         0x00 
+#define SDIO_SUSPEND_MEMORY_FUNC_MASK    0x08
+/* Function Execution */
+#define SDIO_FUNCTION_EXEC_REG          0x0e
+#define SDIO_MEMORY_FUNC_EXEC_MASK      0x01
+/* Function Ready */
+#define SDIO_FUNCTION_READY_REG          0x0f
+#define SDIO_MEMORY_FUNC_BUSY_MASK       0x01
+
+/* power control 1.10 only  */
+#define SDIO_POWER_CONTROL_REG            0x12
+#define SDIO_POWER_CONTROL_SMPC           0x01
+#define SDIO_POWER_CONTROL_EMPC           0x02
+
+/* high speed control , 1.20 only */
+#define SDIO_HS_CONTROL_REG               0x13
+#define SDIO_HS_CONTROL_SHS               0x01
+#define SDIO_HS_CONTROL_EHS               0x02
+
+/* Function Base Registers */
+#define xFUNCTION_FBR_OFFSET(funcNo) (0x100*(funcNo))
+/* offset calculation that does not use multiplication */
+static INLINE UINT32 CalculateFBROffset(UCHAR FuncNo) {
+    UCHAR i = FuncNo;
+    UINT32 offset = 0;
+    while (i) {
+        offset += 0x100;
+        i--; 
+    }   
+    return offset; 
+}
+/* Function info */
+#define FBR_FUNC_INFO_REG_OFFSET(fbr)   ((fbr) + 0x00)
+#define FUNC_INFO_SUPPORTS_CSA_MASK     0x40
+#define FUNC_INFO_ENABLE_CSA            0x80
+#define FUNC_INFO_DEVICE_CODE_MASK      0x0F
+#define FUNC_INFO_DEVICE_CODE_LAST      0x0F
+#define FBR_FUNC_EXT_DEVICE_CODE_OFFSET(fbr) ((fbr) + 0x01)
+/* Function Power selection */
+#define FBR_FUNC_POWER_SELECT_OFFSET(fbr)    ((fbr) + 0x02)
+#define FUNC_POWER_SELECT_SPS           0x01
+#define FUNC_POWER_SELECT_EPS           0x02
+/* Function CIS ptr */
+#define FBR_FUNC_CIS_LOW_OFFSET(fbr)   ((fbr) + 0x09)
+#define FBR_FUNC_CIS_MID_OFFSET(fbr)   ((fbr) + 0x0a)
+#define FBR_FUNC_CIS_HI_OFFSET(fbr)    ((fbr) + 0x0b)
+/* Function CSA ptr */
+#define FBR_FUNC_CSA_LOW_OFFSET(fbr)   ((fbr) + 0x0c)
+#define FBR_FUNC_CSA_MID_OFFSET(fbr)   ((fbr) + 0x0d)
+#define FBR_FUNC_CSA_HI_OFFSET(fbr)    ((fbr) + 0x0e)
+/* Function CSA data window */
+#define FBR_FUNC_CSA_DATA_OFFSET(fbr)  ((fbr) + 0x0f)
+/* Function Block Size Control */
+#define FBR_FUNC_BLK_SIZE_LOW_OFFSET(fbr)  ((fbr) + 0x10)
+#define FBR_FUNC_BLK_SIZE_HI_OFFSET(fbr)   ((fbr) + 0x11)
+#define SDIO_CIS_AREA_BEGIN   0x00001000
+#define SDIO_CIS_AREA_END     0x00017fff
+/* Tuple definitions */
+#define CISTPL_NULL         0x00
+#define CISTPL_CHECKSUM     0x10
+#define CISTPL_VERS_1       0x15
+#define CISTPL_ALTSTR       0x16
+#define CISTPL_MANFID       0x20
+#define CISTPL_FUNCID       0x21
+#define CISTPL_FUNCE        0x22
+#define CISTPL_VENDOR       0x91
+#define CISTPL_END          0xff
+#define CISTPL_LINK_END     0xff
+
+
+/* these structures must be packed */
+
+#include "ctstartpack.h"  
+
+/* Manufacturer ID tuple */
+struct SDIO_MANFID_TPL {
+    UINT16  ManufacturerCode;   /* jedec code */
+    UINT16  ManufacturerInfo;   /* manufacturer specific code */
+}CT_PACK_STRUCT;
+
+/* Function ID Tuple */
+struct SDIO_FUNC_ID_TPL {
+    UINT8  DeviceCode;  /* device code */
+    UINT8  InitMask;    /* system initialization mask (not used) */
+}CT_PACK_STRUCT;
+
+    /* Extended Function Tuple (Common) */
+struct SDIO_FUNC_EXT_COMMON_TPL {
+    UINT8   Type;                               /* type */
+    UINT16  Func0_MaxBlockSize;                 /* max function 0 block transfer size */
+    UINT8   MaxTransSpeed;                      /* max transfer speed (encoded) */
+#define TRANSFER_UNIT_MULTIPIER_MASK  0x07
+#define TIME_VALUE_MASK               0x78
+#define TIME_VALUE_SHIFT              3
+}CT_PACK_STRUCT;
+
+/* Extended Function Tuple (Per Function) */
+struct SDIO_FUNC_EXT_FUNCTION_TPL {
+    UINT8   Type;                               /* type */
+#define SDIO_FUNC_INFO_WAKEUP_SUPPORT 0x01
+    UINT8   FunctionInfo;                       /* function info */
+    UINT8   SDIORev;                            /* revision */
+    UINT32  CardPSN;                            /* product serial number */
+    UINT32  CSASize;                            /* CSA size */
+    UINT8   CSAProperties;                      /* CSA properties */
+    UINT16  MaxBlockSize;                       /* max block size for block transfers */
+    UINT32  FunctionOCR;                        /* optimal function OCR */
+    UINT8   OpMinPwr;                           /* operational min power */
+    UINT8   OpAvgPwr;                           /* operational average power */
+    UINT8   OpMaxPwr;                           /* operation maximum power */
+    UINT8   SbMinPwr;                           /* standby minimum power */
+    UINT8   SbAvgPwr;                           /* standby average power */
+    UINT8   SbMaxPwr;                           /* standby maximum power */
+    UINT16  MinBandWidth;                       /* minimum bus bandwidth */    
+    UINT16  OptBandWidth;                       /* optimalbus bandwitdh */
+}CT_PACK_STRUCT;
+
+struct SDIO_FUNC_EXT_FUNCTION_TPL_1_1 {
+    struct SDIO_FUNC_EXT_FUNCTION_TPL CommonInfo;  /* from 1.0*/
+    UINT16  EnableTimeOut;                  /* timeout for enable */
+    UINT16  OperPwrMaxPwr;
+    UINT16  OperPwrAvgPwr;
+    UINT16  HiPwrMaxPwr;
+    UINT16  HiPwrAvgPwr;
+    UINT16  LowPwrMaxPwr;
+    UINT16  LowPwrAvgPwr;
+}CT_PACK_STRUCT;
+
+#include "ctendpack.h" 
+
+static INLINE SDIO_STATUS ConvertCMD52ResponseToSDIOStatus(UINT8 CMD52ResponseFlags) {
+    if (!(CMD52ResponseFlags & SD_R5_ERRORS)) {
+        return SDIO_STATUS_SUCCESS;
+    }
+    if (CMD52ResponseFlags & SD_R5_ILLEGAL_CMD) {
+        return SDIO_STATUS_DATA_STATE_INVALID;  
+    } else if (CMD52ResponseFlags & SD_R5_INVALID_FUNC) {
+        return SDIO_STATUS_INVALID_FUNC;
+    } else if (CMD52ResponseFlags & SD_R5_ARG_RANGE_ERR) {
+        return SDIO_STATUS_FUNC_ARG_ERROR; 
+    } else {
+        return SDIO_STATUS_DATA_ERROR_UNKNOWN;   
+    }    
+}
+         
+/* CMD6 mode switch definitions */         
+    
+#define SD_SWITCH_FUNC_CHECK    0
+#define SD_SWITCH_FUNC_SET      ((UINT32)(1 << 31))
+#define SD_FUNC_NO_SELECT_MASK  0x00FFFFFF
+#define SD_SWITCH_GRP_1         0
+#define SD_SWITCH_GRP_2         1
+#define SD_SWITCH_GRP_3         2
+#define SD_SWITCH_GRP_4         3
+#define SD_SWITCH_GRP_5         4
+#define SD_SWITCH_GRP_6         5
+
+#define SD_SWITCH_HIGH_SPEED_GROUP     SD_SWITCH_GRP_1
+#define SD_SWITCH_HIGH_SPEED_FUNC_NO   1
+
+#define SD_SWITCH_MAKE_SHIFT(grp) ((grp) * 4)
+
+#define SD_SWITCH_MAKE_GRP_PATTERN(FuncGrp,FuncNo) \
+     ((SD_FUNC_NO_SELECT_MASK & (~(0xF << SD_SWITCH_MAKE_SHIFT(FuncGrp)))) |  \
+        (((FuncNo) & 0xF) << SD_SWITCH_MAKE_SHIFT(FuncGrp)))                 \
+        
+#define SD_SWITCH_FUNC_ARG_GROUP_CHECK(FuncGrp,FuncNo) \
+    (SD_SWITCH_FUNC_CHECK | SD_SWITCH_MAKE_GRP_PATTERN(FuncGrp,FuncNo))
+
+#define SD_SWITCH_FUNC_ARG_GROUP_SET(FuncGrp,FuncNo)   \
+    (SD_SWITCH_FUNC_SET | SD_SWITCH_MAKE_GRP_PATTERN(FuncGrp,FuncNo))
+
+#define SD_SWITCH_FUNC_STATUS_BLOCK_BYTES 64 
+
+#define SD_SWITCH_FUNC_STATUS_GET_GRP_BIT_MASK(pBuffer,FuncGrp) \
+    (USHORT)((pBuffer)[50 + ((FuncGrp)*2)] | ((pBuffer)[51 + ((FuncGrp)*2)] << 8))
+
+#define SD_SWITCH_FUNC_STATUS_GET_MAX_CURRENT(pBuffer) \
+     (USHORT)((pBuffer)[62] | ((pBuffer)[63] << 8))
+     
+static INLINE UINT8 SDSwitchGetSwitchResult(PUINT8 pBuffer, UINT8 FuncGrp)
+{ 
+    switch (FuncGrp) {
+        case 0:
+            return (pBuffer[47] & 0xF);
+        case 1:
+            return (pBuffer[47] >> 4);
+        case 2:
+            return (pBuffer[48] & 0xF);
+        case 3:
+            return (pBuffer[48] >> 4);
+        case 4:
+            return (pBuffer[49] & 0xF);
+        case 5:
+            return (pBuffer[49] >> 4);
+        default:
+            return 0xF;
+    }    
+}
+
+#endif

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/ctendpack.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/ctendpack.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/ctendpack.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,64 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: ctendpack.h
+
+ at abstract: end compiler-specific structure packing
+ 
+ at notice: Copyright (c), 2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifdef VXWORKS
+#endif /* VXWORKS */
+
+#ifdef LINUX
+#endif /* LINUX */
+
+#ifdef QNX
+#endif /* QNX */
+
+#ifdef INTEGRITY
+#include "integrity/ctendpack_integrity.h"
+#endif /* INTEGRITY */
+
+#ifdef NUCLEUS
+#endif /* NUCLEUS */
+
+#ifdef UNDER_CE
+#include "wince/ctendpack_wince.h"
+#endif /* WINCE */
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/ctstartpack.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/ctstartpack.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/ctstartpack.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,65 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: ctstartpack.h
+
+ at abstract: start compiler-specific structure packing
+ 
+ at notice: Copyright (c), 2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+
+#ifdef VXWORKS
+#endif /* VXWORKS */
+
+#ifdef LINUX
+#endif /* LINUX */
+
+#ifdef QNX
+#endif /* QNX */
+
+#ifdef INTEGRITY
+#include "integrity/ctstartpack_integrity.h"
+#endif /* INTEGRITY */
+
+#ifdef NUCLEUS
+#endif /* NUCLEUS */
+
+#ifdef UNDER_CE
+#include "wince/ctstartpack_wince.h"
+#endif /* WINCE */
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/ctsystem.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/ctsystem.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/ctsystem.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,145 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: cpsystem.h
+
+ at abstract: common system include file.
+ 
+ at notice: Copyright (c), 2004-2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifndef __CPSYSTEM_H___
+#define __CPSYSTEM_H___
+
+/* SDIO stack status defines */
+/* < 0 error, >0 warning, 0 success */
+#define SDIO_IS_WARNING(status) ((status) > 0)
+#define SDIO_IS_ERROR(status) ((status) < 0)
+#define SDIO_SUCCESS(status) ((SDIO_STATUS)(status) >= 0)
+#define SDIO_STATUS_SUCCESS             0
+#define SDIO_STATUS_ERROR              -1
+#define SDIO_STATUS_INVALID_PARAMETER  -2
+#define SDIO_STATUS_PENDING             3
+#define SDIO_STATUS_DEVICE_NOT_FOUND   -4
+#define SDIO_STATUS_DEVICE_ERROR       -5
+#define SDIO_STATUS_INTERRUPTED        -6
+#define SDIO_STATUS_NO_RESOURCES       -7  
+#define SDIO_STATUS_CANCELED           -8  
+#define SDIO_STATUS_BUFFER_TOO_SMALL   -9
+#define SDIO_STATUS_NO_MORE_MESSAGES   -10
+#define SDIO_STATUS_BUS_RESP_TIMEOUT   -20    /* response timed-out */
+#define SDIO_STATUS_BUS_READ_TIMEOUT   -21    /* read data timed-out */
+#define SDIO_STATUS_BUS_READ_CRC_ERR   -22   /* data CRC failed */
+#define SDIO_STATUS_BUS_WRITE_ERROR    -23   /* write failed */
+#define SDIO_STATUS_BUS_RESP_CRC_ERR   -24   /* response received with a CRC error */
+#define SDIO_STATUS_INVALID_TUPLE_LENGTH -25 /* tuple length was invalid */
+#define SDIO_STATUS_TUPLE_NOT_FOUND      -26 /* tuple could not be found */
+#define SDIO_STATUS_CIS_OUT_OF_RANGE     -27 /* CIS is out of range in the tuple scan */
+#define SDIO_STATUS_FUNC_ENABLE_TIMEOUT  -28 /* card timed out enabling or disabling */
+#define SDIO_STATUS_DATA_STATE_INVALID   -29 /* card is in an invalid state for data */
+#define SDIO_STATUS_DATA_ERROR_UNKNOWN   -30 /* card cannot process data transfer */ 
+#define SDIO_STATUS_INVALID_FUNC         -31 /* sdio request is not valid for the function */ 
+#define SDIO_STATUS_FUNC_ARG_ERROR       -32 /* sdio request argument is invalid or out of range */ 
+#define SDIO_STATUS_INVALID_COMMAND      -33 /* SD COMMAND is invalid for the card state */ 
+#define SDIO_STATUS_SDREQ_QUEUE_FAILED   -34 /* request failed to insert into queue */ 
+#define SDIO_STATUS_BUS_RESP_TIMEOUT_SHIFTABLE -35  /* response timed-out, possibily shiftable to correct  */
+#define SDIO_STATUS_UNSUPPORTED          -36  /* not supported  */
+#define SDIO_STATUS_PROGRAM_TIMEOUT      -37  /* memory card programming timeout  */
+#define SDIO_STATUS_PROGRAM_STATUS_ERROR -38  /* memory card programming errors  */
+
+#ifdef VXWORKS
+/* Wind River VxWorks support */
+#include "vxworks/ctsystem_vxworks.h"
+#endif /* VXWORKS */
+
+#ifdef LINUX
+/* Linux support */
+#include "linux/ctsystem_linux.h"
+#endif /* LINUX */
+
+#ifdef QNX
+/* QNX Neutrino support */
+#include "nto/ctsystem_qnx.h"
+#endif /* QNX */
+
+#ifdef INTEGRITY
+/* Greenhils Integrity support */
+#include "integrity/ctsystem_integrity.h"
+#endif /* INTEGRITY */
+
+#ifdef NUCLEUS_PLUS
+/* Mentor Graphics Nucleus support */
+#include "nucleus/ctsystem_nucleus.h"
+#endif /* NUCLEUS_PLUS */
+
+#ifdef UNDER_CE
+#define CTSYSTEM_NO_FUNCTION_PROXIES
+/* Windows CE  support */
+#include "wince/ctsystem_wince.h"
+#endif /* WINCE */
+
+
+/* get structure from contained field */
+#define CONTAINING_STRUCT(address, struct_type, field_name)\
+            ((struct_type *)((ULONG_PTR)(address) - (ULONG_PTR)(&((struct_type *)0)->field_name)))
+
+#define ZERO_OBJECT(obj) memset(&(obj),0,sizeof(obj))    
+#define ZERO_POBJECT(pObj) memset((pObj),0,sizeof(*(pObj)))  
+    
+    
+/* bit field support functions */
+static INLINE void SetBit(PULONG pField, UINT position) {
+    *pField |= 1 << position;
+}
+static INLINE void ClearBit(PULONG pField, UINT position) {
+    *pField &= ~(1 << position);
+}
+static INLINE BOOL IsBitSet(PULONG pField, UINT position) {
+    return (*pField & (1 << position));
+}
+static INLINE INT FirstClearBit(PULONG pField) {
+    UINT ii;
+    for(ii = 0; ii < sizeof(ULONG)*8; ii++) {
+        if (!IsBitSet(pField, ii)) {
+            return ii;
+        }  
+    }
+    /* no clear bits found */
+    return -1;
+}
+
+#endif /* __CPSYSTEM_H___ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/linux/ctsystem_linux.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/linux/ctsystem_linux.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/linux/ctsystem_linux.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,1039 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: ctsystem_linux.h
+
+ at abstract: common system include file for Linux.
+ 
+ at notice: Copyright (c), 2004-2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifndef __CPSYSTEM_LINUX_H___
+#define __CPSYSTEM_LINUX_H___
+ 
+/* #define DBG_TIMESTAMP 1 */
+#define SD_TRACK_REQ 1
+
+/* LINUX support */
+#include <linux/version.h>
+
+#ifndef KERNEL_VERSION
+  #error KERNEL_VERSION macro not defined!
+#endif
+
+#ifndef  LINUX_VERSION_CODE
+  #error LINUX_VERSION_CODE macro not defined!
+#endif
+
+#include <linux/autoconf.h>
+#include <linux/kernel.h>
+#include <linux/init.h>
+#include <linux/types.h>
+#include <linux/spinlock.h>
+#include <linux/module.h>
+
+#if LINUX_VERSION_CODE <= KERNEL_VERSION(2,4,20)
+#include <linux/slab.h>
+#endif
+
+#include <linux/interrupt.h>
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,9)
+#include <linux/pnp.h>
+#include <asm/hardirq.h> 
+#endif
+#include <asm/semaphore.h>
+#include <asm/io.h>
+#include <asm/scatterlist.h> 
+#ifdef DBG_TIMESTAMP
+#include <asm/timex.h>  
+#endif /* DBG_TIMESTAMP */
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,9)
+#ifndef in_atomic 
+    /* released version of 2.6.9 */
+#include <linux/hardirq.h> 
+#endif
+#endif
+#include <linux/delay.h>
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)
+#include <linux/device.h>
+#endif 
+
+
+/* generic types */
+typedef    unsigned char    UCHAR;
+typedef    unsigned char *  PUCHAR;
+typedef    char             TEXT;
+typedef    char *           PTEXT;
+typedef    unsigned short   USHORT;
+typedef    unsigned short*  PUSHORT;
+typedef    unsigned int     UINT;
+typedef    unsigned int*    PUINT;
+typedef    int              INT;
+typedef    int*             PINT;
+typedef    unsigned long    ULONG;
+typedef    unsigned long*   PULONG;
+typedef    u8               UINT8;
+typedef    u16              UINT16;
+typedef    u32              UINT32;
+typedef    u8*              PUINT8;
+typedef    u16*             PUINT16;
+typedef    u32*             PUINT32;
+typedef    unsigned char *  ULONG_PTR;
+typedef    void*            PVOID;
+typedef    unsigned char    BOOL;
+typedef    BOOL*            PBOOL;
+typedef    int              SDIO_STATUS;
+typedef    int              SYSTEM_STATUS;
+typedef    unsigned int     EVENT_TYPE;
+typedef    unsigned int     EVENT_ARG;
+typedef    unsigned int*    PEVENT_TYPE;
+typedef    struct semaphore OS_SEMAPHORE;
+typedef    struct semaphore* POS_SEMAPHORE;
+typedef    struct semaphore  OS_SIGNAL;    /* OS signals are just semaphores */
+typedef    struct semaphore* POS_SIGNAL;  
+typedef    spinlock_t OS_CRITICALSECTION;
+typedef    spinlock_t *POS_CRITICALSECTION;  
+typedef    int              SDPOWER_STATE;
+typedef    unsigned long    ATOMIC_FLAGS;
+typedef    INT              THREAD_RETURN;
+typedef    dma_addr_t       DMA_ADDRESS;
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,9)
+typedef    struct task_struct* PKERNEL_TASK;
+typedef    struct device_driver OS_DRIVER;
+typedef    struct device_driver* POS_DRIVER;
+typedef    struct device    OS_DEVICE;
+typedef    struct device*   POS_DEVICE;
+typedef    struct pnp_driver OS_PNPDRIVER;
+typedef    struct pnp_driver* POS_PNPDRIVER;
+typedef    struct pnp_dev   OS_PNPDEVICE;
+typedef    struct pnp_dev*  POS_PNPDEVICE;
+typedef    struct module*   POS_MODULE;
+#else
+/* 2.4 */ 
+typedef    int              PKERNEL_TASK;
+typedef    PVOID            OS_DRIVER;
+typedef    PVOID*           POS_DRIVER;
+typedef    PVOID            OS_DEVICE;
+typedef    PVOID*           POS_DEVICE;
+typedef    PVOID            OS_PNPDRIVER;
+typedef    PVOID*           POS_PNPDRIVER;
+typedef    PVOID            OS_PNPDEVICE;
+typedef    PVOID*           POS_PNPDEVICE;
+typedef    struct module*   POS_MODULE;
+#define    module_param(a,b,c) MODULE_PARM(a, "i")
+#endif
+
+typedef    int              CT_DEBUG_LEVEL;
+
+
+#ifndef TRUE
+#define TRUE 1
+#endif
+#ifndef FALSE
+#define FALSE 0
+#endif
+#ifndef NULL
+#define NULL ((PVOID)0)
+#endif
+#define SDDMA_DESCRIPTION_FLAG_DMA   0x1  /* DMA enabled */
+#define SDDMA_DESCRIPTION_FLAG_SGDMA 0x2  /* Scatter-Gather DMA enabled */
+typedef struct _SDDMA_DESCRIPTION {
+    UINT16      Flags;      /* SDDMA_DESCRIPTION_FLAG_xxx */
+    UINT16      MaxDescriptors; /* number of supported scatter gather entries */
+    UINT32      MaxBytesPerDescriptor;  /* maximum bytes in a DMA descriptor entry */
+    u64         Mask;              /* dma address mask */
+    UINT32      AddressAlignment;  /* dma address alignment mask, least significant bits indicate illegal address bits */
+    UINT32      LengthAlignment;   /* dma buffer length alignment mask, least significant bits indicate illegal length bits  */
+}SDDMA_DESCRIPTION, *PSDDMA_DESCRIPTION;
+typedef struct scatterlist SDDMA_DESCRIPTOR, *PSDDMA_DESCRIPTOR;
+
+#define INLINE  inline
+#define CT_PACK_STRUCT __attribute__ ((packed))
+
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,9)
+#define CT_DECLARE_MODULE_PARAM_INTEGER(p)  module_param(p, int, 0644);
+#else
+#define CT_DECLARE_MODULE_PARAM_INTEGER(p)  MODULE_PARM(p, "i");
+#endif
+
+/* debug print macros */
+//#define SDDBG_KERNEL_PRINT_LEVEL KERN_DEBUG
+#define SDDBG_KERNEL_PRINT_LEVEL KERN_ALERT
+#ifdef DEBUG
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Evaluation the expression and throw an assertion if false.
+  
+  @function name: DBG_ASSERT
+  @prototype: void DBG_ASSERT(test)
+  @category: Support_Reference
+  @input:  test   - boolean expression
+ 
+  @output: none
+
+  @return: 
+ 
+  @notes: This function can be conditionally compiled using the c-define DEBUG.
+                
+  @see also: DBG_PRINT
+  @example: Assert test:
+        count--;
+        DBG_ASSERT(count >= 0);
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define DBG_ASSERT(test) \
+{                         \
+    if (!(test)) {          \
+        DBG_PRINT(SDDBG_ERROR, ("Debug Assert Caught, File %s, Line: %d, Test:%s \n",__FILE__, __LINE__,#test)); \
+    }                     \
+}
+#define DBG_ASSERT_WITH_MSG(test,s) \
+{                                   \
+    if (!(test)) {                  \
+        DBG_PRINT(SDDBG_ERROR, ("Assert:%s File %s, Line: %d \n",(s),__FILE__, __LINE__)); \
+    }                     \
+}
+
+#ifdef DBG_DECLARE
+CT_DEBUG_LEVEL debuglevel = DBG_DECLARE;
+#ifdef DBG_TIMESTAMP
+cycles_t g_lasttimestamp = 0;
+#endif /* DBG_TIMESTAMP */
+#else  /* DBG_DECLARE */
+extern CT_DEBUG_LEVEL debuglevel;
+#ifdef DBG_TIMESTAMP
+extern cycles_t g_lasttimestamp;
+#endif /* DBG_TIMESTAMP */
+#endif /* DBG_DECLARE */
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Print a string to the debugger or console
+  
+  @function name: DBG_PRINT
+  @prototype: void DBG_PRINT(INT Level, string)
+  @category: Support_Reference
+  @input:  Level - debug level for the print
+ 
+  @output: none
+
+  @return: 
+ 
+  @notes: If Level is less than the current debug level, the print will be
+          issued.  This function can be conditionally compiled using the c-define DEBUG.
+  @see also: REL_PRINT              
+  @example: DBG_PRINT(MY_DBG_LEVEL, ("Return Status: %d\r\n",status));
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifdef DBG_TIMESTAMP
+#define DBG_PRINT(lvl, args)\
+    {if (lvl <= DBG_GET_DEBUG_LEVEL()) {\
+          ulong _delta_timestamp;\
+          cycles_t _last_timestamp = g_lasttimestamp;\
+          g_lasttimestamp = get_cycles();\
+          /* avoid 64-bit divides, to microseconds*/\
+          _delta_timestamp =((ulong)(g_lasttimestamp - _last_timestamp)/(ulong)(cpu_khz/(ulong)1000));\
+          printk(SDDBG_KERNEL_PRINT_LEVEL "(%lld:%ldus) ", g_lasttimestamp, _delta_timestamp);\
+          printk(SDDBG_KERNEL_PRINT_LEVEL _DBG_PRINTX_ARG args);\
+        }\
+    }
+#else /* DBG_TIMESTAMP */
+#define DBG_PRINT(lvl, args)\
+    {if (lvl <= DBG_GET_DEBUG_LEVEL())\
+        printk(SDDBG_KERNEL_PRINT_LEVEL _DBG_PRINTX_ARG args);\
+    }
+#endif /* DBG_TIMESTAMP */
+#else /* DEBUG */
+
+#ifdef DBG_DECLARE
+CT_DEBUG_LEVEL debuglevel = DBG_DECLARE;
+#else  /* DBG_DECLARE */
+extern CT_DEBUG_LEVEL debuglevel;
+#endif /* DBG_DECLARE */
+
+#define DBG_PRINT(lvl, str)
+#define DBG_ASSERT(test)
+#define DBG_ASSERT_WITH_MSG(test,s)
+#endif /* DEBUG */
+
+#define _DBG_PRINTX_ARG(arg...) arg /* unroll the parens around the var args*/
+#define DBG_GET_DEBUG_LEVEL() debuglevel
+#define DBG_SET_DEBUG_LEVEL(v) debuglevel = (v)
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Print a string to the debugger or console
+  
+  @function name: REL_PRINT
+  @prototype: void REL_PRINT(INT Level, string)
+  @category: Support_Reference
+  @input:  Level - debug level for the print
+ 
+  @output: none
+
+  @return: 
+ 
+  @notes: If Level is less than the current debug level, the print will be
+          issued. This print cannot be conditionally compiled.
+  @see also: DBG_PRINT              
+ 
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define REL_PRINT(lvl, args)\
+    {if (lvl <= DBG_GET_DEBUG_LEVEL())\
+        printk(SDDBG_KERNEL_PRINT_LEVEL _DBG_PRINTX_ARG args);\
+    }
+/* debug output levels, this must be order low number to higher */
+#define SDDBG_ERROR 3  
+#define SDDBG_WARN  4  
+#define SDDBG_DEBUG 6  
+#define SDDBG_TRACE 7  
+
+#ifdef DBG_CRIT_SECTION_RECURSE
+   /* this macro thows an exception if the lock is recursively taken
+    * the kernel must be configured with: CONFIG_DEBUG_SPINLOCK=y */
+#define call_spin_lock(pCrit) \
+{                                     \
+  UINT32 unlocked = 1;                \
+  if ((pCrit)->lock) {unlocked = 0;}  \
+  spin_lock_bh(pCrit);                \
+  if (!unlocked) {                     \
+     unlocked = 0x01;                   \
+     unlocked = *((volatile UINT32 *)unlocked); \
+  }                                   \
+}
+
+#define call_spin_lock_irqsave(pCrit,isc) \
+{                                     \
+  UINT32 unlocked = 1;                \
+  if ((pCrit)->lock) {unlocked = 0;}  \
+  spin_lock_irqsave(pCrit,isc);                \
+  if (!unlocked) {                     \
+     unlocked = 0x01;                   \
+     unlocked = *((volatile UINT32 *)unlocked); \
+  }                                   \
+}
+
+#else
+#define call_spin_lock(s) spin_lock_bh(s)
+#define call_spin_lock_irqsave(s,isc) spin_lock_irqsave(s,isc)
+#endif
+ 
+#define call_spin_unlock(s) spin_unlock_bh((s))
+#define call_spin_unlock_irqrestore(s,isc) spin_unlock_irqrestore(s,isc)
+
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,9)
+#define NonSchedulable() (in_atomic() || irqs_disabled())
+#else
+#define NonSchedulable() (irqs_disabled())
+#endif
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Initialize a critical section object.
+  
+  @function name: CriticalSectionInit
+  @prototype: SDIO_STATUS CriticalSectionInit(POS_CRITICALSECTION pCrit)
+  @category: Support_Reference
+  @output: pCrit - pointer to critical section to initialize
+
+  @return: SDIO_STATUS_SUCCESS on success.
+ 
+  @notes:  CriticalSectionDelete() must be called to cleanup any resources
+           associated with the critical section.
+
+  @see also: CriticalSectionDelete, CriticalSectionAcquire, CriticalSectionRelease 
+  @example: To initialize a critical section:        
+        status = CriticalSectionInit(&pDevice->ListLock);
+        if (!SDIO_SUCCESS(status)) {
+                .. failed
+            return status;
+        }
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static inline SDIO_STATUS CriticalSectionInit(POS_CRITICALSECTION pCrit) {
+    spin_lock_init(pCrit);
+    return SDIO_STATUS_SUCCESS;     
+}
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Acquire a critical section lock. 
+  
+  @function name: CriticalSectionAcquire
+  @prototype: SDIO_STATUS CriticalSectionAcquire(POS_CRITICALSECTION pCrit)
+  @category: Support_Reference
+  
+  @input: pCrit - pointer to critical section that was initialized
+
+  @return: SDIO_STATUS_SUCCESS on success.
+ 
+  @notes:  The critical section lock is acquired when this function returns 
+           SDIO_STATUS_SUCCESS.  Use CriticalSectionRelease() to release
+           the critical section lock.
+
+  @see also: CriticalSectionRelease            
+
+  @example: To acquire a critical section lock:        
+        status = CriticalSectionAcquire(&pDevice->ListLock);
+        if (!SDIO_SUCCESS(status)) {
+                .. failed
+            return status;
+        }
+        ... access protected data
+            // unlock         
+        status = CriticalSectionRelease(&pDevice->ListLock);
+        if (!SDIO_SUCCESS(status)) {
+                .. failed
+            return status;
+        }
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static inline SDIO_STATUS CriticalSectionAcquire(POS_CRITICALSECTION pCrit) {
+    call_spin_lock(pCrit);
+    return SDIO_STATUS_SUCCESS; 
+}
+
+// macro-tized versions
+#define CriticalSectionAcquire_M(pCrit) \
+    SDIO_STATUS_SUCCESS; call_spin_lock(pCrit) 
+#define CriticalSectionRelease_M(pCrit) \
+    SDIO_STATUS_SUCCESS; call_spin_unlock(pCrit)
+    
+#define CT_DECLARE_IRQ_SYNC_CONTEXT() unsigned long _ctSyncFlags
+
+#define CriticalSectionAcquireSyncIrq(pCrit) \
+    SDIO_STATUS_SUCCESS; call_spin_lock_irqsave(pCrit,_ctSyncFlags)
+
+#define CriticalSectionReleaseSyncIrq(pCrit) \
+    SDIO_STATUS_SUCCESS; call_spin_unlock_irqrestore(pCrit,_ctSyncFlags)
+
+
+     
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Release a critical section lock. 
+  
+  @function name: CriticalSectionRelease
+  @prototype: SDIO_STATUS CriticalSectionRelease(POS_CRITICALSECTION pCrit)
+  @category: Support_Reference
+ 
+  @input: pCrit - pointer to critical section that was initialized
+
+  @return: SDIO_STATUS_SUCCESS on success.
+ 
+  @notes:  The critical section lock is released when this function returns 
+           SDIO_STATUS_SUCCESS. 
+
+  @see also: CriticalSectionAcquire       
+  
+  @example: see CriticalSectionAcquire
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static inline SDIO_STATUS CriticalSectionRelease(POS_CRITICALSECTION pCrit) {
+    call_spin_unlock(pCrit); 
+    return SDIO_STATUS_SUCCESS; 
+}
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Cleanup a critical section object
+  
+  @function name: CriticalSectionDelete
+  @prototype: void CriticalSectionDelete(POS_CRITICALSECTION pCrit)
+  @category: Support_Reference
+  
+  @input: pCrit - an initialized critical section object
+
+  @return: SDIO_STATUS_SUCCESS on success.
+ 
+  @notes: 
+
+  @see also: CriticalSectionInit, CriticalSectionAcquire, CriticalSectionRelease            
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static inline void CriticalSectionDelete(POS_CRITICALSECTION pCrit) {
+    return; 
+}
+
+/* internal use */
+static inline SDIO_STATUS SignalInitialize(POS_SIGNAL pSignal) {
+    sema_init(pSignal, 0);       
+    return SDIO_STATUS_SUCCESS;
+}
+/* internal use */
+static inline void SignalDelete(POS_SIGNAL pSignal) {
+    return;  
+}
+/* internal use */
+static inline SDIO_STATUS SignalWaitInterruptible(POS_SIGNAL pSignal) {
+    DBG_ASSERT_WITH_MSG(!NonSchedulable(),"SignalWaitInterruptible not allowed\n");
+    if (down_interruptible(pSignal) == 0) {
+        return SDIO_STATUS_SUCCESS;
+    } else {
+        return SDIO_STATUS_INTERRUPTED;
+    }
+}
+/* internal use */
+static inline SDIO_STATUS SignalWait(POS_SIGNAL pSignal) {
+    DBG_ASSERT_WITH_MSG(!NonSchedulable(),"SignalWait not allowed\n");
+    down(pSignal);
+    return SDIO_STATUS_SUCCESS;
+}
+
+/* internal use */
+static inline SDIO_STATUS SignalSet(POS_SIGNAL pSignal) {
+    up(pSignal);
+    return SDIO_STATUS_SUCCESS;
+}
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Initialize a semaphore object.
+  
+  @function name: SemaphoreInitialize
+  @prototype: SDIO_STATUS SemaphoreInitialize(POS_SEMAPHORE pSem, UINT value)
+  @category: Support_Reference
+  
+  @input:  value - initial value of the semaphore
+
+  @output: pSem - pointer to a semaphore object to initialize
+
+  @return: SDIO_STATUS_SUCCESS on success.
+ 
+  @notes:  SemaphoreDelete() must be called to cleanup any resources
+           associated with the semaphore
+
+  @see also: SemaphoreDelete, SemaphorePend, SemaphorePendInterruptable
+  
+  @example: To initialize a semaphore:        
+        status = SemaphoreInitialize(&pDevice->ResourceSem,1);
+        if (!SDIO_SUCCESS(status)) {
+                .. failed
+            return status;
+        }
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static inline SDIO_STATUS SemaphoreInitialize(POS_SEMAPHORE pSem, UINT value) {
+    sema_init(pSem, value);
+    return SDIO_STATUS_SUCCESS;
+}
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Cleanup a semaphore object.
+  
+  @function name: SemaphoreDelete
+  @prototype: void SemaphoreDelete(POS_SEMAPHORE pSem)
+  @category: Support_Reference
+  
+  @input: pSem - pointer to a semaphore object to cleanup
+
+  @return:
+ 
+  @notes:  
+
+  @see also: SemaphoreInitialize            
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static inline void SemaphoreDelete(POS_SEMAPHORE pSem) {
+    return;
+}
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Acquire the semaphore or pend if the resource is not available
+  
+  @function name: SemaphorePend
+  @prototype: SDIO_STATUS SemaphorePend(POS_SEMAPHORE pSem)
+  @category: Support_Reference
+  
+  @input: pSem - pointer to an initialized semaphore object
+
+  @return: SDIO_STATUS_SUCCESS on success.
+ 
+  @notes: If the semaphore count is zero this function blocks until the count
+          becomes non-zero, otherwise the count is decremented and execution 
+          continues. While waiting, the task/thread cannot be interrupted. 
+          If the task or thread should be interruptible, use SemaphorePendInterruptible.
+          On some OSes SemaphorePend and SemaphorePendInterruptible behave the same.
+
+  @see also: SemaphorePendInterruptable, SemaphorePost          
+  @example: To wait for a resource using a semaphore:        
+        status = SemaphorePend(&pDevice->ResourceSem);
+        if (!SDIO_SUCCESS(status)) {
+                .. failed
+            return status;
+        }     
+        ... resource acquired
+        SemaphorePost(&pDevice->ResourceSem);
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static inline SDIO_STATUS SemaphorePend(POS_SEMAPHORE pSem) {
+    DBG_ASSERT_WITH_MSG(!NonSchedulable(),"SemaphorePend not allowed\n");
+    down(pSem);
+    return SDIO_STATUS_SUCCESS;
+}
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Acquire the semaphore or pend if the resource is not available
+  
+  @function name: SemaphorePendInterruptable
+  @prototype: SDIO_STATUS SemaphorePendInterruptable(POS_SEMAPHORE pSem)
+  @category: Support_Reference
+  
+  @input: pSem - pointer to an initialized semaphore object
+
+  @return: SDIO_STATUS_SUCCESS on success.
+ 
+  @notes: If the semaphore count is zero this function blocks until the count
+          becomes non-zero, otherwise the count is decremented and execution 
+          continues. While waiting, the task/thread can be interrupted. 
+          If the task or thread should not be interruptible, use SemaphorePend.
+
+  @see also: SemaphorePend, SemaphorePost          
+  @example: To wait for a resource using a semaphore:        
+        status = SemaphorePendInterruptable(&pDevice->ResourceSem);
+        if (!SDIO_SUCCESS(status)) {
+                .. failed, could have been interrupted
+            return status;
+        }  
+        ... resource acquired
+        SemaphorePost(&pDevice->ResourceSem);
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static inline SDIO_STATUS SemaphorePendInterruptable(POS_SEMAPHORE pSem) {
+    DBG_ASSERT_WITH_MSG(!NonSchedulable(),"SemaphorePendInterruptable not allowed\n");
+    if (down_interruptible(pSem) == 0) {
+        return SDIO_STATUS_SUCCESS;
+    } else {
+        return SDIO_STATUS_INTERRUPTED;
+    }
+}
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Post a semaphore.
+  
+  @function name: SemaphorePost
+  @prototype: SDIO_STATUS SemaphorePost(POS_SEMAPHORE pSem)
+  @category: Support_Reference
+ 
+  @input: pSem - pointer to an initialized semaphore object
+
+  @return: SDIO_STATUS_SUCCESS on success.
+ 
+  @notes: This function increments the semaphore count.
+
+  @see also: SemaphorePend, SemaphorePendInterruptable.          
+  @example: Posting a semaphore:        
+        status = SemaphorePendInterruptable(&pDevice->ResourceSem);
+        if (!SDIO_SUCCESS(status)) {
+                .. failed, could have been interrupted
+            return status;
+        }  
+        ... resource acquired
+            // post the semaphore
+        SemaphorePost(&pDevice->ResourceSem);
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static inline SDIO_STATUS SemaphorePost(POS_SEMAPHORE pSem) {
+    DBG_ASSERT_WITH_MSG(!NonSchedulable(),"SemaphorePost not allowed\n");
+    up(pSem);
+    return SDIO_STATUS_SUCCESS;
+}
+
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Allocate a block of kernel accessible memory
+  
+  @function name: KernelAlloc
+  @prototype: PVOID KernelAlloc(UINT size)
+  @category: Support_Reference
+  
+  @input: size - size of memory block to allocate
+
+  @return: pointer to the allocated memory, NULL if allocation failed
+ 
+  @notes: For operating systems that use paging, the allocated memory is always
+          non-paged memory.  Caller should only use KernelFree() to release the
+          block of memory.  This call can potentially block and should only be called
+          from a schedulable context.  Use KernelAllocIrqSafe() if the allocation
+          must be made from a non-schedulable context.
+
+  @see also: KernelFree, KernelAllocIrqSafe         
+  @example: allocating memory:        
+        pBlock = KernelAlloc(1024);
+        if (pBlock == NULL) {
+                .. failed, no memory
+            return SDIO_STATUS_INSUFFICIENT_RESOURCES;
+        }   
+        
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static inline PVOID KernelAlloc(UINT size) {
+    PVOID pMem = kmalloc(size, GFP_KERNEL);
+    if (pMem != NULL) { memset(pMem,0,size); }
+    return pMem;
+}
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Free a block of kernel accessible memory.
+  
+  @function name: KernelFree
+  @prototype: void KernelFree(PVOID ptr)
+  @category: Support_Reference
+  
+  @input: ptr - pointer to memory allocated with KernelAlloc()
+
+  @return: 
+ 
+  @notes: Caller should only use KernelFree() to release memory that was allocated
+          with KernelAlloc().
+
+  @see also: KernelAlloc        
+  @example: KernelFree(pBlock);
+        
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static inline void KernelFree(PVOID ptr) {
+    kfree(ptr);
+}
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Allocate a block of kernel accessible memory in an IRQ-safe manner
+  
+  @function name: KernelAllocIrqSafe
+  @prototype: PVOID KernelAllocIrqSafe(UINT size)
+  @category: Support_Reference
+  
+  @input: size - size of memory block to allocate
+
+  @return: pointer to the allocated memory, NULL if allocation failed
+ 
+  @notes: This variant of KernelAlloc allows the allocation of small blocks of
+          memory from an ISR or from a context where scheduling has been disabled.
+          The allocations should be small as the memory is typically allocated
+          from a critical heap. The caller should only use KernelFreeIrqSafe() 
+          to release the block of memory.
+
+  @see also: KernelAlloc, KernelFreeIrqSafe     
+  @example: allocating memory:        
+        pBlock = KernelAllocIrqSafe(16);
+        if (pBlock == NULL) {
+                .. failed, no memory
+            return SDIO_STATUS_INSUFFICIENT_RESOURCES;
+        }   
+        
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static inline PVOID KernelAllocIrqSafe(UINT size) {
+    return kmalloc(size, GFP_ATOMIC);
+}
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Free a block of kernel accessible memory.
+  
+  @function name: KernelFreeIrqSafe
+  @prototype: void KernelFreeIrqSafe(PVOID ptr)
+  @category: Support_Reference
+  
+  @input: ptr - pointer to memory allocated with KernelAllocIrqSafe()
+
+  @return: 
+ 
+  @notes: Caller should only use KernelFreeIrqSafe() to release memory that was allocated
+          with KernelAllocIrqSafe().
+
+  @see also: KernelAllocIrqSafe         
+  @example: KernelFreeIrqSafe(pBlock);
+        
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static inline void KernelFreeIrqSafe(PVOID ptr) {
+    kfree(ptr);
+}
+
+/* error status conversions */
+static inline SYSTEM_STATUS SDIOErrorToOSError(SDIO_STATUS status) {
+    switch (status) {
+        case SDIO_STATUS_SUCCESS: 
+            return 0;
+        case SDIO_STATUS_INVALID_PARAMETER:
+            return -EINVAL;
+        case SDIO_STATUS_PENDING:
+            return -EAGAIN; /* try again */
+        case SDIO_STATUS_DEVICE_NOT_FOUND:
+            return -ENXIO;
+        case SDIO_STATUS_DEVICE_ERROR:
+            return -EIO;
+        case SDIO_STATUS_INTERRUPTED:
+            return -EINTR;
+        case SDIO_STATUS_NO_RESOURCES:
+            return -ENOMEM;
+        case SDIO_STATUS_ERROR:    
+        default:
+            return -EFAULT;
+    }
+}
+static inline SDIO_STATUS OSErrorToSDIOError(SYSTEM_STATUS status) {
+    if (status >=0) {
+        return SDIO_STATUS_SUCCESS;
+    }
+    switch (status) {
+        case -EINVAL: 
+            return SDIO_STATUS_INVALID_PARAMETER;
+        case -ENXIO:
+            return SDIO_STATUS_DEVICE_NOT_FOUND;
+        case -EIO:
+            return SDIO_STATUS_DEVICE_ERROR;
+        case -EINTR:
+            return SDIO_STATUS_INTERRUPTED;
+        case -ENOMEM:
+            return SDIO_STATUS_NO_RESOURCES;
+        case -EFAULT:
+            return SDIO_STATUS_ERROR;
+        default:
+            return SDIO_STATUS_ERROR;
+    }
+}
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Sleep or delay the execution context for a number of milliseconds.
+  
+  @function name: OSSleep
+  @prototype: SDIO_STATUS OSSleep(INT SleepInterval)
+  @category: Support_Reference
+  
+  @input: SleepInterval - time in milliseconds to put the execution context to sleep
+
+  @return: SDIO_STATUS_SUCCESS if sleep succeeded.
+ 
+  @notes: Caller should be in a context that allows it to sleep or block.  The 
+  minimum duration of sleep may be greater than 1 MS on some platforms and OSes.   
+
+  @see also: OSSleep         
+  @example: Using sleep to delay
+        EnableSlotPower(pSlot);
+            // wait for power to settle
+        status = OSSleep(100);
+        if (!SDIO_SUCCESS(status)){
+            // failed..
+        }
+
+        
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static inline SDIO_STATUS OSSleep(INT SleepInterval) {
+    UINT32 delta; 
+
+    DBG_ASSERT_WITH_MSG(!NonSchedulable(),"OSSleep not allowed\n");
+        /* convert timeout to ticks */
+    delta = (SleepInterval * HZ)/1000;
+    if (delta == 0) {
+        delta = 1;  
+    }
+    set_current_state(TASK_INTERRUPTIBLE);
+    if (schedule_timeout(delta) != 0) {
+        return SDIO_STATUS_INTERRUPTED;    
+    }
+    return SDIO_STATUS_SUCCESS;
+} 
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: get the OSs device object
+  
+  @function name: SD_GET_OS_DEVICE
+  @prototype: POS_DEVICE SD_GET_OS_DEVICE(PSDDEVICE pDevice)
+  @category: Support_Reference
+  
+  @input: pDevice - the device on the HCD
+
+  @return: pointer to the OSs device
+
+  @see also:         
+  @example: obtain low level device
+        pFunctionContext->GpsDevice.Port.dev = SD_GET_OS_DEVICE(pDevice); 
+
+        
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SD_GET_OS_DEVICE(pDevice) &((pDevice)->Device.dev)
+
+
+#ifdef __iomem 
+    /* new type checking in 2.6.9 */
+    /* I/O Access macros */
+#define _READ_DWORD_REG(reg)  \
+        readl((const volatile void __iomem *)(reg))
+#define _READ_WORD_REG(reg)  \
+        readw((const volatile void __iomem *)(reg)) 
+#define _READ_BYTE_REG(reg)  \
+        readb((const volatile void __iomem *)(reg))
+#define _WRITE_DWORD_REG(reg,value)  \
+        writel((value),(volatile void __iomem *)(reg))
+#define _WRITE_WORD_REG(reg,value)  \
+        writew((value),(volatile void __iomem *)(reg))
+#define _WRITE_BYTE_REG(reg,value)  \
+        writeb((value),(volatile void __iomem *)(reg))
+#else
+    /* I/O Access macros */
+#define _READ_DWORD_REG(reg)  \
+        readl((reg))
+#define _READ_WORD_REG(reg)  \
+        readw((reg))
+#define _READ_BYTE_REG(reg)  \
+        readb((reg))
+#define _WRITE_DWORD_REG(reg,value)  \
+        writel((value),(reg))
+#define _WRITE_WORD_REG(reg,value)  \
+        writew((value),(reg))
+#define _WRITE_BYTE_REG(reg,value)  \
+        writeb((value),(reg))
+#endif        
+    /* atomic operators */
+static inline ATOMIC_FLAGS AtomicTest_Set(volatile ATOMIC_FLAGS *pValue, INT BitNo) {
+    return test_and_set_bit(BitNo,(ATOMIC_FLAGS *)pValue);    
+}   
+static inline ATOMIC_FLAGS AtomicTest_Clear(volatile ATOMIC_FLAGS *pValue, INT BitNo) {
+    return test_and_clear_bit(BitNo,(ATOMIC_FLAGS *)pValue);    
+}  
+
+struct _OSKERNEL_HELPER;
+
+typedef THREAD_RETURN (*PHELPER_FUNCTION)(struct _OSKERNEL_HELPER *);
+
+typedef struct _OSKERNEL_HELPER {
+    PKERNEL_TASK            pTask;
+    BOOL                    ShutDown;
+    OS_SIGNAL               WakeSignal;
+    struct completion       Completion; 
+    PVOID                   pContext;
+    PHELPER_FUNCTION        pHelperFunc;
+}OSKERNEL_HELPER, *POSKERNEL_HELPER;
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Wake the helper thread
+  
+  @function name: SD_WAKE_OS_HELPER
+  @prototype: SD_WAKE_OS_HELPER(POSKERNEL_HELPER pOSHelper)
+  @category: Support_Reference
+  
+  @input: pOSHelper - the OS helper object
+
+  @return: SDIO_STATUS 
+
+  @see also: SDLIB_OSCreateHelper
+         
+  @example: Waking up a helper thread
+        status = SD_WAKE_OS_HELPER(&pInstance->OSHelper); 
+
+        
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SD_WAKE_OS_HELPER(p)        SignalSet(&(p)->WakeSignal)
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Obtains the context for the helper function
+  
+  @function name: SD_GET_OS_HELPER_CONTEXT
+  @prototype: SD_GET_OS_HELPER_CONTEXT(POSKERNEL_HELPER pOSHelper)
+  @category: Support_Reference
+  
+  @input: pOSHelper - the OS helper object
+
+  @return: helper specific context  
+  
+  @notes: This macro should only be called by the function associated with
+          the helper object.
+          
+  @see also: SDLIB_OSCreateHelper
+         
+  @example: Getting the helper specific context
+        PMYCONTEXT pContext = (PMYCONTEXT)SD_GET_OS_HELPER_CONTEXT(pHelper); 
+
+        
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SD_GET_OS_HELPER_CONTEXT(p)     (p)->pContext
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Check helper function shut down flag.
+  
+  @function name: SD_IS_HELPER_SHUTTING_DOWN
+  @prototype: SD_IS_HELPER_SHUTTING_DOWN(POSKERNEL_HELPER pOSHelper)
+  @category: Support_Reference
+  
+  @input: pOSHelper - the OS helper object
+
+  @return: TRUE if shutting down, else FALSE 
+  
+  @notes: This macro should only be called by the function associated with
+          the helper object.  The function should call this macro when it
+          unblocks from the call to SD_WAIT_FOR_WAKEUP().  If this function 
+          returns TRUE, the function should clean up and exit. 
+          
+  @see also: SDLIB_OSCreateHelper , SD_WAIT_FOR_WAKEUP
+         
+  @example: Checking for shutdown
+        while(1) {
+              status = SD_WAIT_FOR_WAKEUP(pHelper);
+              if (!SDIO_SUCCESS(status)) {
+                  break;
+              }
+              if (SD_IS_HELPER_SHUTTING_DOWN(pHelper)) {
+                  ... shutting down
+                  break;
+              }
+        }
+        
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SD_IS_HELPER_SHUTTING_DOWN(p)   (p)->ShutDown
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Suspend and wait for wakeup signal
+  
+  @function name: SD_WAIT_FOR_WAKEUP
+  @prototype: SD_WAIT_FOR_WAKEUP(POSKERNEL_HELPER pOSHelper)
+  @category: Support_Reference
+  
+  @input: pOSHelper - the OS helper object
+
+  @return: SDIO_STATUS
+  
+  @notes: This macro should only be called by the function associated with
+          the helper object.  The function should call this function to suspend (block)
+          itself and wait for a wake up signal. The function should always check 
+          whether the function should exit by calling SD_IS_HELPER_SHUTTING_DOWN.
+          
+  @see also: SDLIB_OSCreateHelper , SD_IS_HELPER_SHUTTING_DOWN
+         
+  @example: block on the wake signal
+        while(1) {
+              status = SD_WAIT_FOR_WAKEUP(pHelper);
+              if (!SDIO_SUCCESS(status)) {
+                  break;
+              }
+              if (SD_IS_HELPER_SHUTTING_DOWN(pHelper)) {
+                  ... shutting down
+                  break;
+              }
+        }
+        
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SD_WAIT_FOR_WAKEUP(p)   SignalWait(&(p)->WakeSignal); 
+ 
+#define CT_LE16_TO_CPU_ENDIAN(x) __le16_to_cpu(x)
+#define CT_LE32_TO_CPU_ENDIAN(x) __le32_to_cpu(x)
+#define CT_CPU_ENDIAN_TO_LE16(x) __cpu_to_le16(x)
+#define CT_CPU_ENDIAN_TO_LE32(x) __cpu_to_le32(x)
+
+#define CT_CPU_ENDIAN_TO_BE16(x) __cpu_to_be16(x)
+#define CT_CPU_ENDIAN_TO_BE32(x) __cpu_to_be32(x)
+#define CT_BE16_TO_CPU_ENDIAN(x) __be16_to_cpu(x)
+#define CT_BE32_TO_CPU_ENDIAN(x) __be32_to_cpu(x)
+#endif /* __CPSYSTEM_LINUX_H___ */
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/mmc_defs.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/mmc_defs.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/mmc_defs.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,103 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: mmc_defs.h
+
+ at abstract: MMC definitions not already defined in _sdio_defs.h
+ 
+ at notice: Copyright (c), 2004-2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifndef ___MMC_DEFS_H___
+#define ___MMC_DEFS_H___
+
+#define MMC_MAX_BUS_CLOCK    20000000 /* max clock speed in hz */
+#define MMC_HS_MAX_BUS_CLOCK 52000000 /* MMC PLUS (high speed) max clock rate in hz */
+
+/* R2 (CSD) macros */
+#define GET_MMC_CSD_TRANS_SPEED(pR) (pR)[12]
+#define GET_MMC_SPEC_VERSION(pR)    (((pR)[15] >> 2) & 0x0F)
+#define MMC_SPEC_1_0_TO_1_2         0x00
+#define MMC_SPEC_1_4                0x01
+#define MMC_SPEC_2_0_TO_2_2         0x02
+#define MMC_SPEC_3_1                0x03
+#define MMC_SPEC_4_0_TO_4_1         0x04
+
+#define MMC_CMD_SWITCH    6
+#define MMC_CMD8    8
+
+#define MMC_SWITCH_CMD_SET    0
+#define MMC_SWITCH_SET_BITS   1
+#define MMC_SWITCH_CLEAR_BITS 2
+#define MMC_SWITCH_WRITE_BYTE 3
+#define MMC_SWITCH_CMD_SET0   0
+#define MMC_SWITCH_BUILD_ARG(cmdset,access,index,value) \
+     (((cmdset) & 0x07) | (((access) & 0x03) << 24) | (((index) & 0xFF) << 16) | (((value) & 0xFF) << 8)) 
+
+#define MMC_EXT_CSD_SIZE                     512
+
+#define MMC_EXT_S_CMD_SET_OFFSET             504
+#define MMC_EXT_MIN_PERF_W_8_52_OFFSET       210  
+#define MMC_EXT_MIN_PERF_R_8_52_OFFSET       209
+#define MMC_EXT_MIN_PERF_W_8_26_4_52_OFFSET  208
+#define MMC_EXT_MIN_PERF_R_8_26_4_52_OFFSET  207
+#define MMC_EXT_MIN_PERF_W_4_26_OFFSET       206
+#define MMC_EXT_MIN_PERF_R_4_56_OFFSET       205  
+#define MMC_EXT_PWR_CL_26_360_OFFSET         203
+#define MMC_EXT_PWR_CL_52_360_OFFSET         202
+#define MMC_EXT_PWR_CL_26_195_OFFSET         201
+#define MMC_EXT_PWR_CL_52_195_OFFSET         200
+#define MMC_EXT_GET_PWR_CLASS(reg)    ((reg) & 0xF)
+#define MMC_EXT_MAX_PWR_CLASSES       16
+#define MMC_EXT_CARD_TYPE_OFFSET             196
+#define MMC_EXT_CARD_TYPE_HS_52  (1 << 1)
+#define MMC_EXT_CARD_TYPE_HS_26  (1 << 0)
+#define MMC_EXT_CSD_VER_OFFSET               194
+#define MMC_EXT_VER_OFFSET                   192
+#define MMC_EXT_VER_1_0          0
+#define MMC_EXT_VER_1_1          1
+#define MMC_EXT_CMD_SET_OFFSET               191
+#define MMC_EXT_CMD_SET_REV_OFFSET           189
+#define MMC_EXT_PWR_CLASS_OFFSET             187
+#define MMC_EXT_HS_TIMING_OFFSET             185
+#define MMC_EXT_HS_TIMING_ENABLE   0x01
+#define MMC_EXT_BUS_WIDTH_OFFSET             183
+#define MMC_EXT_BUS_WIDTH_1_BIT    0x00
+#define MMC_EXT_BUS_WIDTH_4_BIT    0x01
+#define MMC_EXT_BUS_WIDTH_8_BIT    0x02
+
+#endif

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdio_busdriver.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdio_busdriver.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdio_busdriver.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,1435 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_busdriver.h
+
+ at abstract: include file for registration of SDIO function drivers
+  and SDIO host controller bus drivers.
+ 
+ at notice: Copyright (c), 2004-2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifndef __SDIO_BUSDRIVER_H___
+#define __SDIO_BUSDRIVER_H___
+
+typedef UINT8      CT_VERSION_CODE;
+#define CT_SDIO_STACK_VERSION_CODE ((CT_VERSION_CODE)0x26)   /* version code that must be set in various structures */
+#define CT_SDIO_STACK_VERSION_MAJOR(v) (((v) & 0xF0) >> 4)
+#define CT_SDIO_STACK_VERSION_MINOR(v) (((v) & 0x0F))
+#define SET_SDIO_STACK_VERSION(p) (p)->Version = CT_SDIO_STACK_VERSION_CODE
+#define GET_SDIO_STACK_VERSION(p) (p)->Version
+#define GET_SDIO_STACK_VERSION_MAJOR(p) CT_SDIO_STACK_VERSION_MAJOR(GET_SDIO_STACK_VERSION(p))
+#define GET_SDIO_STACK_VERSION_MINOR(p) CT_SDIO_STACK_VERSION_MINOR(GET_SDIO_STACK_VERSION(p))
+#include "sdlist.h"
+
+/* card flags */
+typedef UINT16      CARD_INFO_FLAGS;
+#define CARD_MMC        0x0001    /* Multi-media card */
+#define CARD_SD         0x0002    /* SD-Memory present */
+#define CARD_SDIO       0x0004    /* SDIO present */
+#define CARD_RAW        0x0008    /* Raw card */
+#define CARD_COMBO      (CARD_SD | CARD_SDIO)  /* SDIO with SD */
+#define CARD_TYPE_MASK  0x000F    /* card type mask */
+#define CARD_SD_WP      0x0010    /* SD WP on */
+#define CARD_PSEUDO     0x0020    /* pseudo card (internal use) */
+#define CARD_HIPWR      0x0040    /* card can use more than 200mA (SDIO 1.1 or greater)*/
+#define GET_CARD_TYPE(flags) ((flags) & CARD_TYPE_MASK)
+
+/* bus mode and clock rate */
+typedef UINT32  SD_BUSCLOCK_RATE;       /* clock rate in hz */
+typedef UINT16  SD_BUSMODE_FLAGS;  
+#define SDCONFIG_BUS_WIDTH_RESERVED           0x00
+#define SDCONFIG_BUS_WIDTH_SPI                0x01
+#define SDCONFIG_BUS_WIDTH_1_BIT              0x02
+#define SDCONFIG_BUS_WIDTH_4_BIT              0x03
+#define SDCONFIG_BUS_WIDTH_MMC8_BIT           0x04
+#define SDCONFIG_BUS_WIDTH_MASK               0x0F
+#define SDCONFIG_SET_BUS_WIDTH(flags,width) \
+{                       \
+    (flags) &= ~SDCONFIG_BUS_WIDTH_MASK; \
+    (flags) |= (width);                  \
+} 
+#define SDCONFIG_GET_BUSWIDTH(flags) ((flags) & SDCONFIG_BUS_WIDTH_MASK)
+#define SDCONFIG_BUS_MODE_SPI_NO_CRC         0x40   /* SPI bus is operating with NO CRC */
+#define SDCONFIG_BUS_MODE_SD_HS              0x80   /* set interface to SD high speed mode  */
+#define SDCONFIG_BUS_MODE_MMC_HS             0x20   /* set interface to MMC high speed mode */
+ 
+typedef UINT16 SD_SLOT_CURRENT;      /* slot current in mA */
+
+typedef UINT8 SLOT_VOLTAGE_MASK;     /* slot voltage */
+#define SLOT_POWER_3_3V  0x01
+#define SLOT_POWER_3_0V  0x02
+#define SLOT_POWER_2_8V  0x04
+#define SLOT_POWER_2_0V  0x08
+#define SLOT_POWER_1_8V  0x10
+#define SLOT_POWER_1_6V  0x20
+
+#define MAX_CARD_RESPONSE_BYTES 17
+
+/* plug and play information for SD cards */
+typedef struct _SD_PNP_INFO {
+    UINT16 SDIO_ManufacturerCode;  /* JEDEC Code */
+    UINT16 SDIO_ManufacturerID;    /* manf-specific ID */
+    UINT8  SDIO_FunctionNo;        /* function number 1-7 */ 
+    UINT8  SDIO_FunctionClass;     /* function class */
+    UINT8  SDMMC_ManfacturerID;    /* card CID's MANF-ID */
+    UINT16 SDMMC_OEMApplicationID; /* card CID's OEMAPP-ID */
+    CARD_INFO_FLAGS CardFlags;     /* card flags */                                                              		
+}SD_PNP_INFO, *PSD_PNP_INFO;
+
+#define IS_LAST_SDPNPINFO_ENTRY(id)\
+    (((id)->SDIO_ManufacturerCode == 0) &&\
+     ((id)->SDIO_ManufacturerID == 0) &&\
+     ((id)->SDIO_FunctionNo == 0) &&\
+     ((id)->SDIO_FunctionClass == 0) &&\
+     ((id)->SDMMC_OEMApplicationID == 0) && \
+     ((id)->CardFlags == 0))
+     
+/* card properties */
+typedef struct _CARD_PROPERTIES {
+    UINT8              IOFnCount;      /* number of I/O functions */
+    UINT8              SDIORevision;   /* SDIO revision */
+#define SDIO_REVISION_1_00 0x00
+#define SDIO_REVISION_1_10 0x01
+#define SDIO_REVISION_1_20 0x02
+    UINT8              SD_MMC_Revision; /* SD or MMC revision */
+#define SD_REVISION_1_01  0x00
+#define SD_REVISION_1_10  0x01
+#define MMC_REVISION_1_0_2_2 0x00
+#define MMC_REVISION_3_1  0x01
+#define MMC_REVISION_4_0  0x02
+    UINT16 SDIO_ManufacturerCode;      /* JEDEC Code */
+    UINT16 SDIO_ManufacturerID;        /* manf-specific ID */
+    UINT32             CommonCISPtr;   /* common CIS ptr */
+    UINT16             RCA;            /* relative card address */
+    UINT8              SDIOCaps;       /* SDIO card capabilities (refer to SDIO spec for decoding) */
+    UINT8              CardCSD[MAX_CARD_RESPONSE_BYTES];    /* for SD/MMC cards */
+    CARD_INFO_FLAGS    Flags;          /* card flags */
+    SD_BUSCLOCK_RATE   OperBusClock;   /* operational bus clock (based on HCD limit)*/
+    SD_BUSMODE_FLAGS   BusMode;        /* current card bus mode */
+    UINT16             OperBlockLenLimit; /* operational bytes per block length limit*/
+    UINT16             OperBlockCountLimit; /* operational number of blocks per transfer limit */
+    UINT8              CardState;      /* card state flags */
+    SLOT_VOLTAGE_MASK  CardVoltage;    /* card operational voltage */
+#define CARD_STATE_REMOVED 0x01
+}CARD_PROPERTIES, *PCARD_PROPERTIES;
+
+/* SDREQUEST request flags */
+typedef UINT32 SDREQUEST_FLAGS;
+/* write operation */
+#define SDREQ_FLAGS_DATA_WRITE         0x8000
+/* has data (read or write) */
+#define SDREQ_FLAGS_DATA_TRANS         0x4000
+/* command is an atomic APP command, requiring CMD55 to be issued */
+#define SDREQ_FLAGS_APP_CMD            0x2000
+/* transfer should be handled asynchronously */
+#define SDREQ_FLAGS_TRANS_ASYNC        0x1000
+/* host should skip the SPI response filter for this command */
+#define SDREQ_FLAGS_RESP_SKIP_SPI_FILT 0x0800
+/* host should skip the response check for this data transfer */
+#define SDREQ_FLAGS_DATA_SKIP_RESP_CHK 0x0400
+/* flag requesting a CMD12 be automatically issued by host controller */
+#define SDREQ_FLAGS_AUTO_CMD12         0x0200 
+/* flag indicating that the data buffer meets HCD's DMA restrictions   */
+#define SDREQ_FLAGS_DATA_DMA           0x0010 
+/* indicate to host that this is a short and quick transfer, the HCD may optimize
+ * this request to reduce interrupt overhead */
+#define SDREQ_FLAGS_DATA_SHORT_TRANSFER   0x00010000
+/* indicate to the host that this is a raw request */
+#define SDREQ_FLAGS_RAW                   0x00020000
+/* auto data transfer status check for MMC and Memory cards */
+#define SDREQ_FLAGS_AUTO_TRANSFER_STATUS  0x00100000
+
+#define SDREQ_FLAGS_UNUSED1               0x00200000
+#define SDREQ_FLAGS_UNUSED2               0x00400000
+#define SDREQ_FLAGS_UNUSED3               0x00800000
+#define SDREQ_FLAGS_UNUSED4               0x01000000
+#define SDREQ_FLAGS_UNUSED5               0x02000000
+
+/* the following flags are internal use only */
+#define SDREQ_FLAGS_FORCE_DEFERRED_COMPLETE 0x0100
+/* flag indicating that response has been converted (internal use) */
+#define SDREQ_FLAGS_RESP_SPI_CONVERTED      0x0040
+/* request was cancelled - internal use only */
+#define SDREQ_FLAGS_CANCELED                0x0020
+/* a barrier operation */
+#define SDREQ_FLAGS_BARRIER                 0x00040000
+/* a pseudo bus request */
+#define SDREQ_FLAGS_PSEUDO                  0x00080000
+/* queue to the head */
+#define SDREQ_FLAGS_QUEUE_HEAD              0x04000000
+
+#define SDREQ_FLAGS_I_UNUSED1               0x08000000
+#define SDREQ_FLAGS_I_UNUSED2               0x10000000
+#define SDREQ_FLAGS_I_UNUSED3               0x20000000
+#define SDREQ_FLAGS_I_UNUSED4               0x40000000
+#define SDREQ_FLAGS_I_UNUSED5               0x80000000
+
+/* response type mask */
+#define SDREQ_FLAGS_RESP_MASK       0x000F
+#define GET_SDREQ_RESP_TYPE(flags)     ((flags) & SDREQ_FLAGS_RESP_MASK)
+#define IS_SDREQ_WRITE_DATA(flags)     ((flags) & SDREQ_FLAGS_DATA_WRITE)
+#define IS_SDREQ_DATA_TRANS(flags)     ((flags) & SDREQ_FLAGS_DATA_TRANS)
+#define IS_SDREQ_RAW(flags)            ((flags) & SDREQ_FLAGS_RAW) 
+#define IS_SDREQ_FORCE_DEFERRED_COMPLETE(flags) ((flags) & SDREQ_FLAGS_FORCE_DEFERRED_COMPLETE)
+#define SDREQ_FLAGS_NO_RESP         0x0000
+#define SDREQ_FLAGS_RESP_R1         0x0001
+#define SDREQ_FLAGS_RESP_R1B        0x0002
+#define SDREQ_FLAGS_RESP_R2         0x0003
+#define SDREQ_FLAGS_RESP_R3         0x0004
+#define SDREQ_FLAGS_RESP_MMC_R4     0x0005 /* not supported, for future use */
+#define SDREQ_FLAGS_RESP_MMC_R5     0x0006 /* not supported, for future use */
+#define SDREQ_FLAGS_RESP_R6         0x0007
+#define SDREQ_FLAGS_RESP_SDIO_R4    0x0008
+#define SDREQ_FLAGS_RESP_SDIO_R5    0x0009
+
+struct _SDREQUEST;
+struct _SDFUNCTION;
+
+typedef void (*PSDEQUEST_COMPLETION)(struct _SDREQUEST *);
+
+/* defines SD/MMC and SDIO requests for the RAW-mode API */
+typedef struct _SDREQUEST {
+    SDLIST  SDList;             /* internal use list*/
+    UINT32  Argument;           /* SD/SDIO/MMC 32 bit argument */
+    SDREQUEST_FLAGS Flags;      /* request flags */
+    ATOMIC_FLAGS InternalFlags; /* internal use flags */
+    UINT8   Command;            /* SD/SDIO/MMC 8 bit command */
+    UINT8   Response[MAX_CARD_RESPONSE_BYTES];       /* buffer for CMD response */
+    UINT16  BlockCount;         /* number of blocks to send/rcv */
+    UINT16  BlockLen;           /* length of each block */
+    UINT16  DescriptorCount;    /* number of DMA descriptor entries in pDataBuffer if DMA */
+    PVOID   pDataBuffer;        /* starting address of buffer (or ptr to PSDDMA_DESCRIPTOR*/
+    UINT32  DataRemaining;      /* number of bytes remaining in the transfer (internal use) */
+    PVOID   pHcdContext;        /* internal use context */
+    PSDEQUEST_COMPLETION pCompletion; /* function driver completion routine */
+    PVOID   pCompleteContext;   /* function driver completion context */
+    SDIO_STATUS Status;         /* completion status */
+    struct _SDFUNCTION* pFunction; /* function driver that generated request (internal use)*/
+    INT     RetryCount;          /* number of times to retry on error, non-data cmds only */
+    PVOID   pBdRsv1;        /* reserved */
+    PVOID   pBdRsv2;
+    PVOID   pBdRsv3;
+}SDREQUEST, *PSDREQUEST;
+
+    /* a request queue */
+typedef struct _SDREQUESTQUEUE {
+    SDLIST        Queue;           /* the queue of requests */
+    BOOL          Busy;            /* busy flag */
+}SDREQUESTQUEUE, *PSDREQUESTQUEUE;
+
+
+typedef UINT16 SDCONFIG_COMMAND;
+/* SDCONFIG request flags */
+/* get operation */
+#define SDCONFIG_FLAGS_DATA_GET       0x8000
+/* put operation */
+#define SDCONFIG_FLAGS_DATA_PUT       0x4000
+/* host controller */
+#define SDCONFIG_FLAGS_HC_CONFIG      0x2000
+/* both */
+#define SDCONFIG_FLAGS_DATA_BOTH      (SDCONFIG_FLAGS_DATA_GET | SDCONFIG_FLAGS_DATA_PUT)
+/* no data */
+#define SDCONFIG_FLAGS_DATA_NONE      0x0000
+
+/* SDCONFIG commands */
+#define SDCONFIG_GET_HCD_DEBUG   (SDCONFIG_FLAGS_HC_CONFIG | SDCONFIG_FLAGS_DATA_GET  | 275)
+#define SDCONFIG_SET_HCD_DEBUG   (SDCONFIG_FLAGS_HC_CONFIG | SDCONFIG_FLAGS_DATA_PUT  | 276)
+
+/* custom hcd commands */
+#define SDCONFIG_GET_HOST_CUSTOM   (SDCONFIG_FLAGS_HC_CONFIG | SDCONFIG_FLAGS_DATA_GET  | 300)
+#define SDCONFIG_PUT_HOST_CUSTOM   (SDCONFIG_FLAGS_HC_CONFIG | SDCONFIG_FLAGS_DATA_PUT  | 301)
+
+/* function commands */
+#define SDCONFIG_FUNC_ENABLE_DISABLE         (SDCONFIG_FLAGS_DATA_PUT  | 18)
+#define SDCONFIG_FUNC_UNMASK_IRQ             (SDCONFIG_FLAGS_DATA_NONE | 21)
+#define SDCONFIG_FUNC_MASK_IRQ               (SDCONFIG_FLAGS_DATA_NONE | 22)
+#define SDCONFIG_FUNC_ACK_IRQ                (SDCONFIG_FLAGS_DATA_NONE | 23)
+#define SDCONFIG_FUNC_SPI_MODE_DISABLE_CRC   (SDCONFIG_FLAGS_DATA_NONE | 24)
+#define SDCONFIG_FUNC_SPI_MODE_ENABLE_CRC    (SDCONFIG_FLAGS_DATA_NONE | 25)
+#define SDCONFIG_FUNC_ALLOC_SLOT_CURRENT     (SDCONFIG_FLAGS_DATA_PUT  | 26)   
+#define SDCONFIG_FUNC_FREE_SLOT_CURRENT      (SDCONFIG_FLAGS_DATA_NONE | 27) 
+#define SDCONFIG_FUNC_CHANGE_BUS_MODE        (SDCONFIG_FLAGS_DATA_BOTH | 28)
+#define SDCONFIG_FUNC_CHANGE_BUS_MODE_ASYNC  (SDCONFIG_FLAGS_DATA_BOTH | 29)  
+#define SDCONFIG_FUNC_NO_IRQ_PEND_CHECK      (SDCONFIG_FLAGS_DATA_NONE | 30) 
+
+typedef UINT8  FUNC_ENABLE_DISABLE_FLAGS;
+typedef UINT32 FUNC_ENABLE_TIMEOUT;
+
+    /* function enable */
+typedef struct _SDCONFIG_FUNC_ENABLE_DISABLE_DATA {
+#define SDCONFIG_DISABLE_FUNC   0x0000
+#define SDCONFIG_ENABLE_FUNC    0x0001
+    FUNC_ENABLE_DISABLE_FLAGS    EnableFlags;     /* enable flags*/
+    FUNC_ENABLE_TIMEOUT          TimeOut;         /* timeout in milliseconds */ 
+    void (*pOpComplete)(PVOID Context, SDIO_STATUS status); /* reserved */
+    PVOID                        pOpCompleteContext;        /* reserved */   
+}SDCONFIG_FUNC_ENABLE_DISABLE_DATA, *PSDCONFIG_FUNC_ENABLE_DISABLE_DATA;
+
+    /* slot current allocation data */
+typedef struct _SDCONFIG_FUNC_SLOT_CURRENT_DATA {
+    SD_SLOT_CURRENT     SlotCurrent;    /* slot current to request in mA*/   
+}SDCONFIG_FUNC_SLOT_CURRENT_DATA, *PSDCONFIG_FUNC_SLOT_CURRENT_DATA;
+
+/* slot bus mode configuration */
+typedef struct _SDCONFIG_BUS_MODE_DATA {
+    SD_BUSCLOCK_RATE   ClockRate;       /* clock rate in Hz */
+    SD_BUSMODE_FLAGS   BusModeFlags;    /* bus mode flags */
+    SD_BUSCLOCK_RATE   ActualClockRate; /* actual rate in KHz */
+}SDCONFIG_BUS_MODE_DATA, *PSDCONFIG_BUS_MODE_DATA;
+
+/* defines configuration requests for the HCD */
+typedef struct _SDCONFIG {
+    SDCONFIG_COMMAND  Cmd;          /* configuration command */
+    PVOID   pData;        /* configuration data */
+    INT     DataLength;   /* config data length */
+}SDCONFIG, *PSDCONFIG;
+
+#define SET_SDCONFIG_CMD_INFO(pHdr,cmd,pC,len) \
+{           \
+  (pHdr)->Cmd = (cmd);                     \
+  (pHdr)->pData = (PVOID)(pC);             \
+  (pHdr)->DataLength = (len);              \
+}
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get a pointer to the configuration command data.
+
+  @function name: GET_SDCONFIG_CMD
+  @prototype: UNIT16 GET_SDCONFIG_CMD (PSDCONFIG pCommand) 
+  @category: HD_Reference
+ 
+  @input:  pCommand - config command structure.
+           
+  @return: command code
+ 
+  @notes: Implemented as a macro. This macro returns the command code for this
+          configuration request.
+           
+  @example: getting the command code: 
+    cmd = GET_SDCONFIG_CMD(pConfig);
+    switch (cmd) {
+        case SDCONFIG_GET_WP:
+             .. get write protect switch position
+           break;
+        ...
+    }
+        
+  @see also: GET_SDCONFIG_CMD_LEN, GET_SDCONFIG_CMD_DATA
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define GET_SDCONFIG_CMD(pBuffer)     ((pBuffer)->Cmd)
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get a pointer to the configuration command data.
+
+  @function name: GET_SDCONFIG_CMD_LEN
+  @prototype: INT GET_SDCONFIG_CMD_LEN (PSDCONFIG pCommand) 
+  @category: HD_Reference
+ 
+  @input:  pCommand - config command structure.
+           
+  @return: length of config command data
+ 
+  @notes: Implemented as a macro. Host controller drivers can use this macro to extract 
+          the number of bytes of command specific data. This can be used to validate the
+          config data buffer size.
+           
+  @example: getting the data length: 
+    length = GET_SDCONFIG_CMD_LEN(pConfig);
+    if (length < CUSTOM_COMMAND_XXX_SIZE) {
+       ... invalid length
+    } 
+        
+  @see also: GET_SDCONFIG_CMD, GET_SDCONFIG_CMD_DATA
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define GET_SDCONFIG_CMD_LEN(pBuffer) ((pBuffer)->DataLength)
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get a pointer to the configuration command data.
+
+  @function name: GET_SDCONFIG_CMD_DATA
+  @prototype: (casted ptr) GET_SDCONFIG_CMD_DATA (type, PSDCONFIG pCommand) 
+  @category: HD_Reference
+ 
+  @input:  type - pointer type to cast the returned pointer to.
+           pCommand - config command structure.
+           
+  @return: type-casted pointer to the command's data
+ 
+  @notes: Implemented as a macro.  Host controller drivers can use this macro to extract 
+          a pointer to the command specific data in an HCD configuration request.
+           
+  @example: getting the pointer: 
+        // get interrupt control data
+    pIntControl = GET_SDCONFIG_CMD_DATA(PSDCONFIG_SDIO_INT_CTRL_DATA,pConfig);
+    if (pIntControl->SlotIRQEnable) {
+       ... enable slot IRQ detection
+    } 
+        
+  @see also: GET_SDCONFIG_CMD, GET_SDCONFIG_CMD_LEN
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define GET_SDCONFIG_CMD_DATA(type,pBuffer) ((type)((pBuffer)->pData))
+#define IS_SDCONFIG_CMD_GET(pBuffer)  ((pBuffer)->Cmd & SDCONFIG_FLAGS_DATA_GET)
+#define IS_SDCONFIG_CMD_PUT(pBuffer)  ((pBuffer)->Cmd & SDCONFIG_FLAGS_DATA_PUT)
+
+struct _SDDEVICE;
+struct _SDHCD;
+
+typedef UINT8   SD_FUNCTION_FLAGS;  
+#define SDFUNCTION_FLAG_REMOVING       0x01
+
+/* function driver registration structure */
+typedef struct _SDFUNCTION {
+    CT_VERSION_CODE Version;    /* version code of the SDIO stack */
+	SDLIST     SDList;          /* internal use list*/
+    PTEXT      pName;           /* name of registering driver */
+    UINT       MaxDevices;      /* maximum number of devices supported by this function */
+    UINT       NumDevices;      /* number of devices supported by this function */
+    PSD_PNP_INFO pIds;          /* null terminated table of supported devices*/
+    BOOL (*pProbe)(struct _SDFUNCTION *pFunction, struct _SDDEVICE *pDevice);/* New device inserted */
+                                /* Device removed (NULL if not a hot-plug capable driver) */
+    void (*pRemove)(struct _SDFUNCTION *pFunction, struct _SDDEVICE *pDevice);   
+    SDIO_STATUS (*pSuspend)(struct _SDFUNCTION *pFunction, SDPOWER_STATE state); /* Device suspended */
+    SDIO_STATUS (*pResume)(struct _SDFUNCTION *pFunction); /* Device woken up */
+                                /* Enable wake event */
+    SDIO_STATUS (*pWake) (struct _SDFUNCTION *pFunction, SDPOWER_STATE state, BOOL enable); 
+	PVOID      pContext;        /* function driver use data */
+	OS_PNPDRIVER Driver;	    /* driver registration with base system */
+	SDLIST     DeviceList;	    /* the list of devices this driver is using*/
+    OS_SIGNAL   CleanupReqSig;  /* wait for requests completion on cleanup (internal use) */
+    SD_FUNCTION_FLAGS Flags;    /* internal flags (internal use) */
+}SDFUNCTION, *PSDFUNCTION;
+
+typedef UINT8  HCD_EVENT;
+
+    /* device info for SDIO functions */
+typedef struct _SDIO_DEVICE_INFO {
+    UINT32  FunctionCISPtr;         /* function's CIS ptr */
+    UINT32  FunctionCSAPtr;         /* function's CSA ptr */ 
+    UINT16  FunctionMaxBlockSize;   /* function's reported max block size */
+}SDIO_DEVICE_INFO, *PSDIO_DEVICE_INFO;
+
+    /* device info for SD/MMC card functions */
+typedef struct _SDMMC_INFO{
+    UINT8  Unused;    /* reserved */
+}SDMMC_INFO, *PSDMMC_INFO;
+
+    /* union of SDIO function and device info */
+typedef union _SDDEVICE_INFO {
+    SDIO_DEVICE_INFO AsSDIOInfo; 
+    SDMMC_INFO       AsSDMMCInfo;
+}SDDEVICE_INFO, *PSDDEVICE_INFO;
+
+
+typedef UINT8   SD_DEVICE_FLAGS;  
+#define SDDEVICE_FLAG_REMOVING       0x01
+
+/* inserted device description, describes an inserted card */
+typedef struct _SDDEVICE {
+    SDLIST      SDList;             /* internal use list*/
+    SDLIST      FuncListLink;       /* internal use list */
+                                    /* read/write request function */
+    SDIO_STATUS (*pRequest)(struct _SDDEVICE *pDev, PSDREQUEST req); 
+                                    /* get/set configuration */
+    SDIO_STATUS (*pConfigure)(struct _SDDEVICE *pDev, PSDCONFIG config);
+    PSDREQUEST  (*AllocRequest)(struct _SDDEVICE *pDev);      /* allocate a request */
+    void        (*FreeRequest)(struct _SDDEVICE *pDev, PSDREQUEST pReq); /* free the request */
+    void        (*pIrqFunction)(PVOID pContext);       /* interrupt routine, synchronous calls allowed */
+    void        (*pIrqAsyncFunction)(PVOID pContext); /* async IRQ function , asynch only calls */
+    PVOID       IrqContext;         /* irq context */  
+    PVOID       IrqAsyncContext;    /* irq async context */ 
+    PSDFUNCTION pFunction;          /* function driver supporting this device */
+    struct _SDHCD  *pHcd;           /* host controller this device is on (internal use) */
+    SDDEVICE_INFO   DeviceInfo;     /* device info */
+    SD_PNP_INFO pId[1];             /* id of this device  */
+    OS_PNPDEVICE Device;            /* device registration with base system */
+    SD_SLOT_CURRENT  SlotCurrentAlloc; /* allocated slot current for this device/function (internal use) */
+    SD_DEVICE_FLAGS Flags;          /* internal use flags */
+    CT_VERSION_CODE Version;        /* version code of the bus driver */
+}SDDEVICE, *PSDDEVICE;
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get SDIO Bus Driver Version Major number
+  
+  @function name: SDDEVICE_GET_VERSION_MAJOR
+  @prototype: INT SDDEVICE_GET_VERSION_MAJOR(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: integer value for the major version
+ 
+  @notes: Implemented as a macro.
+                
+  @see also: SDDEVICE_GET_VERSION_MINOR
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_VERSION_MAJOR(pDev) (GET_SDIO_STACK_VERSION_MAJOR(pDev))
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get SDIO Bus Driver Version Minor number
+  
+  @function name: SDDEVICE_GET_VERSION_MINOR
+  @prototype: INT SDDEVICE_GET_VERSION_MINOR(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: integer value for the minor version
+ 
+  @notes: Implemented as a macro.
+                
+  @see also: SDDEVICE_GET_VERSION_MAJOR
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_VERSION_MINOR(pDev) (GET_SDIO_STACK_VERSION_MINOR(pDev))
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Test the SDIO revision for greater than or equal to 1.10
+  
+  @function name: SDDEVICE_IS_SDIO_REV_GTEQ_1_10
+  @prototype: BOOL SDDEVICE_IS_SDIO_REV_GTEQ_1_10(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: TRUE if the revision is greater than or equal to 1.10
+ 
+  @notes: Implemented as a macro.
+                
+  @see also: SDDEVICE_IS_SD_REV_GTEQ_1_10
+  @see also: SDDEVICE_IS_MMC_REV_GTEQ_4_0
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_IS_SDIO_REV_GTEQ_1_10(pDev) ((pDev)->pHcd->CardProperties.SDIORevision >= SDIO_REVISION_1_10)
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Test the SDIO revision for greater than or equal to 1.20
+  
+  @function name: SDDEVICE_IS_SDIO_REV_GTEQ_1_20
+  @prototype: BOOL SDDEVICE_IS_SDIO_REV_GTEQ_1_20(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: TRUE if the revision is greater than or equal to 1.20
+ 
+  @notes: Implemented as a macro.
+                
+  @see also: SDDEVICE_IS_SD_REV_GTEQ_1_10
+  @see also: SDDEVICE_IS_SDIO_REV_GTEQ_1_10
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_IS_SDIO_REV_GTEQ_1_20(pDev) ((pDev)->pHcd->CardProperties.SDIORevision >= SDIO_REVISION_1_20)
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Test the SD revision for greater than or equal to 1.10
+  
+  @function name: SDDEVICE_IS_SD_REV_GTEQ_1_10
+  @prototype: BOOL SDDEVICE_IS_SD_REV_GTEQ_1_10(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: TRUE if the revision is greater than or equal to 1.10
+ 
+  @notes: Implemented as a macro.
+                
+  @see also: SDDEVICE_IS_SDIO_REV_GTEQ_1_10
+  @see also: SDDEVICE_IS_MMC_REV_GTEQ_4_0
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_IS_SD_REV_GTEQ_1_10(pDev) ((pDev)->pHcd->CardProperties.SD_MMC_Revision >= SD_REVISION_1_10)
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Test the MMC revision for greater than or equal to 4.0
+  
+  @function name: SDDEVICE_IS_MMC_REV_GTEQ_4_0
+  @prototype: BOOL SDDEVICE_IS_MMC_REV_GTEQ_4_0(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: TRUE if the revision is greater than or equal to 4.0
+ 
+  @notes: Implemented as a macro.
+                
+  @see also: SDDEVICE_IS_SDIO_REV_GTEQ_1_10
+  @see also: SDDEVICE_IS_SD_REV_GTEQ_1_10
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_IS_MMC_REV_GTEQ_4_0(pDev) ((pDev)->pHcd->CardProperties.SD_MMC_Revision >= MMC_REVISION_4_0)
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Test for write protect enabled
+  
+  @function name: SDDEVICE_IS_CARD_WP_ON
+  @prototype: BOOL SDDEVICE_IS_CARD_WP_ON(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: TRUE if device is write protected.
+ 
+  @notes: Implemented as a macro.
+                
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_IS_CARD_WP_ON(pDev)       ((pDev)->pHcd->CardProperties.Flags & CARD_SD_WP)
+
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the device's manufacturer specific ID
+  
+  @function name: SDDEVICE_GET_SDIO_MANFID
+  @prototype: UINT16 SDDEVICE_GET_SDIO_MANFID(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: function number
+ 
+  @notes: Implemented as a macro.
+  
+  @see also: SDDEVICE_GET_SDIO_MANFCODE
+                
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_SDIO_MANFID(pDev)     (pDev)->pId[0].SDIO_ManufacturerID
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the device's manufacturer code
+  
+  @function name: SDDEVICE_GET_SDIO_MANFCODE
+  @prototype: UINT16 SDDEVICE_GET_SDIO_MANFCODE(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: function number
+ 
+  @notes: Implemented as a macro.
+  
+  @see also: SDDEVICE_GET_SDIO_MANFID
+                
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_SDIO_MANFCODE(pDev)     (pDev)->pId[0].SDIO_ManufacturerCode
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the device's function number
+  
+  @function name: SDDEVICE_GET_SDIO_FUNCNO
+  @prototype: UINT8 SDDEVICE_GET_SDIO_FUNCNO(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: function number
+ 
+  @notes: Implemented as a macro.
+  
+  @see also: SDDEVICE_GET_SDIO_FUNC_CLASS
+                
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_SDIO_FUNCNO(pDev)     (pDev)->pId[0].SDIO_FunctionNo
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the functions's class
+  
+  @function name: SDDEVICE_GET_SDIO_FUNC_CLASS
+  @prototype: UINT8 SDDEVICE_GET_SDIO_FUNC_CLASS(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: class number
+ 
+  @notes: Implemented as a macro.
+  
+  @see also: SDDEVICE_GET_SDIO_FUNCNO
+                
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_SDIO_FUNC_CLASS(pDev) (pDev)->pId[0].SDIO_FunctionClass
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the functions's Card Information Structure pointer
+  
+  @function name: SDDEVICE_GET_SDIO_FUNC_CISPTR
+  @prototype: UINT32 SDDEVICE_GET_SDIO_FUNC_CISPTR(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: CIS offset
+ 
+  @notes: Implemented as a macro.
+  
+  @see also: SDDEVICE_GET_SDIO_FUNC_CSAPTR
+  @see also: SDDEVICE_GET_SDIO_COMMON_CISPTR
+                
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_SDIO_FUNC_CISPTR(pDev)(pDev)->DeviceInfo.AsSDIOInfo.FunctionCISPtr
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the functions's Code Stoarge Area pointer
+  
+  @function name: SDDEVICE_GET_SDIO_FUNC_CSAPTR
+  @prototype: UINT32 SDDEVICE_GET_SDIO_FUNC_CSAPTR(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: CSA offset
+ 
+  @notes: Implemented as a macro.
+  
+  @see also: SDDEVICE_GET_SDIO_FUNC_CISPTR
+                
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_SDIO_FUNC_CSAPTR(pDev)(pDev)->DeviceInfo.AsSDIOInfo.FunctionCSAPtr
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the functions's maximum reported block size
+  
+  @function name: SDDEVICE_GET_SDIO_FUNC_MAXBLKSIZE
+  @prototype: UINT16 SDDEVICE_GET_SDIO_FUNC_MAXBLKSIZE(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: block size
+ 
+  @notes: Implemented as a macro.
+  
+  @see also: 
+                
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_SDIO_FUNC_MAXBLKSIZE(pDev) (pDev)->DeviceInfo.AsSDIOInfo.FunctionMaxBlockSize
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the common Card Information Structure pointer
+  
+  @function name: SDDEVICE_GET_SDIO_COMMON_CISPTR
+  @prototype: UINT32 SDDEVICE_GET_SDIO_COMMON_CISPTR(PSDDEVICE pDevice)
+  @category: PD_Reference
+   
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: Common CIS Address (in SDIO address space)
+ 
+  @notes: Implemented as a macro.
+  
+  @see also: SDDEVICE_GET_SDIO_FUNC_CSAPTR
+                
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_SDIO_COMMON_CISPTR(pDev) (pDev)->pHcd->CardProperties.CommonCISPtr
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the card capabilities
+  
+  @function name: SDDEVICE_GET_SDIO_CARD_CAPS
+  @prototype: UINT8 SDDEVICE_GET_SDIO_CARD_CAPS(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: 8-bit card capabilities register
+ 
+  @notes: Implemented as a macro. Refer to SDIO spec for decoding.
+  
+  @see also: SDDEVICE_GET_CARD_FLAGS
+  @see also: SDDEVICE_GET_SDIOCARD_CAPS
+                
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_SDIO_CARD_CAPS(pDev)     (pDev)->pHcd->CardProperties.SDIOCaps
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the card flags
+  
+  @function name: SDDEVICE_GET_CARD_FLAGS
+  @prototype: CARD_INFO_FLAGS SDDEVICE_GET_CARD_FLAGS(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: flags
+ 
+  @notes: Implemented as a macro. 
+
+  @example: Get card type:
+        CARD_INFO_FLAGS flags;
+        flags = SDDEVICE_GET_CARD_FLAGS(pDevice);
+        switch(GET_CARD_TYPE(flags)) {
+            case CARD_MMC: // Multi-media card
+                ... 
+            case CARD_SD:  // SD-Memory present
+                ...
+            case CARD_SDIO: // SDIO card present
+                ...
+            case CARD_COMBO: //SDIO card with SD
+                ...
+        }
+        if (flags & CARD_SD_WP) {
+            ...SD write protect on
+        }
+  
+  @see also: SDDEVICE_GET_SDIO_CARD_CAPS
+                
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_CARD_FLAGS(pDev)      (pDev)->pHcd->CardProperties.Flags
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the Relative Card Address register
+  
+  @function name: SDDEVICE_GET_CARD_RCA
+  @prototype: UINT16 SDDEVICE_GET_CARD_RCA(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: register address
+ 
+  @notes: Implemented as a macro. Refer to SDIO spec for decoding.
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_CARD_RCA(pDev)        (pDev)->pHcd->CardProperties.RCA
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get operational bus clock 
+  
+  @function name: SDDEVICE_GET_OPER_CLOCK
+  @prototype: SD_BUSCLOCK_RATE SDDEVICE_GET_OPER_CLOCK(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: clock rate
+ 
+  @notes: Implemented as a macro. Returns the current bus clock rate. 
+          This may be lower than reported by the card due to Host Controller,
+          Bus driver, or power management limitations.
+  
+  @see also: SDDEVICE_GET_MAX_CLOCK
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_OPER_CLOCK(pDev)      (pDev)->pHcd->CardProperties.OperBusClock
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get maximum bus clock 
+  
+  @function name: SDDEVICE_GET_MAX_CLOCK
+  @prototype: SD_BUSCLOCK_RATE SDDEVICE_GET_MAX_CLOCK(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: clock rate
+ 
+  @notes: To obtain the current maximum clock rate use SDDEVICE_GET_OPER_CLOCK().
+          This rate my be lower than the host controllers maximum obtained using
+          SDDEVICE_GET_MAX_CLOCK().
+  
+  @see also: SDDEVICE_GET_OPER_CLOCK
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_MAX_CLOCK(pDev)       (pDev)->pHcd->MaxClockRate
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get operational maximum block length.
+  
+  @function name: SDDEVICE_GET_OPER_BLOCK_LEN
+  @prototype: UINT16 SDDEVICE_GET_OPER_BLOCK_LEN(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: block size in bytes
+ 
+  @notes: Implemented as a macro. Returns the maximum current block length. 
+          This may be lower than reported by the card due to Host Controller,
+          Bus driver, or power management limitations.
+  
+  @see also: SDDEVICE_GET_MAX_BLOCK_LEN
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_OPER_BLOCK_LEN(pDev)  (pDev)->pHcd->CardProperties.OperBlockLenLimit
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get maximum block length.
+  
+  @function name: SDDEVICE_GET_MAX_BLOCK_LEN
+  @prototype: UINT16 SDDEVICE_GET_MAX_BLOCK_LEN(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: block size in bytes
+ 
+  @notes: Implemented as a macro. Use SDDEVICE_GET_OPER_BLOCK_LEN to obtain
+          the current block length.
+  
+  @see also: SDDEVICE_GET_OPER_BLOCK_LEN
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_MAX_BLOCK_LEN(pDev)   (pDev)->pHcd->MaxBytesPerBlock
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get operational maximum block count.
+  
+  @function name: SDDEVICE_GET_OPER_BLOCKS
+  @prototype: UINT16 SDDEVICE_GET_OPER_BLOCKS(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: maximum number of blocks per transaction.
+ 
+  @notes: Implemented as a macro. Returns the maximum current block count. 
+          This may be lower than reported by the card due to Host Controller,
+          Bus driver, or power management limitations.
+  
+  @see also: SDDEVICE_GET_MAX_BLOCK_LEN
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_OPER_BLOCKS(pDev)     (pDev)->pHcd->CardProperties.OperBlockCountLimit
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get maximum block count.
+  
+  @function name: SDDEVICE_GET_MAX_BLOCKS
+  @prototype: UINT16 SDDEVICE_GET_MAX_BLOCKS(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: maximum number of blocks per transaction.
+ 
+  @notes: Implemented as a macro. Use SDDEVICE_GET_OPER_BLOCKS to obtain
+          the current block count.
+  
+  @see also: SDDEVICE_GET_OPER_BLOCKS
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_MAX_BLOCKS(pDev)      (pDev)->pHcd->MaxBlocksPerTrans
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get applied slot voltage
+  
+  @function name: SDDEVICE_GET_SLOT_VOLTAGE_MASK
+  @prototype: SLOT_VOLTAGE_MASK SDDEVICE_GET_SLOT_VOLTAGE_MASK(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: slot voltage mask
+ 
+  @notes: This function returns the applied voltage on the slot. The voltage value is a 
+          mask having the following values:
+          SLOT_POWER_3_3V   
+          SLOT_POWER_3_0V  
+          SLOT_POWER_2_8V  
+          SLOT_POWER_2_0V  
+          SLOT_POWER_1_8V  
+          SLOT_POWER_1_6V              
+           
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_SLOT_VOLTAGE_MASK(pDev)   (pDev)->pHcd->CardProperties.CardVoltage
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the Card Specific Data Register.
+  
+  @function name: SDDEVICE_GET_CARDCSD
+  @prototype: PUINT8 SDDEVICE_GET_CARDCSD(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return:  UINT8 CardCSD[MAX_CARD_RESPONSE_BYTES] array of CSD data.
+ 
+  @notes: Implemented as a macro.
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_CARDCSD(pDev)         (pDev)->pHcd->CardProperties.CardCSD
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the bus mode flags
+  
+  @function name: SDDEVICE_GET_BUSMODE_FLAGS
+  @prototype: SD_BUSMODE_FLAGS SDDEVICE_GET_BUSMODE_FLAGS(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: 
+  
+  @notes: Implemented as a macro.  This function returns the raw bus mode flags.  This
+          is useful for function drivers that wish to override the bus clock without
+          modifying the current bus mode.
+  
+  @see also: SDDEVICE_GET_BUSWIDTH
+  @see also: SDCONFIG_BUS_MODE_CTRL
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_BUSMODE_FLAGS(pDev)  (pDev)->pHcd->CardProperties.BusMode
+
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the bus width.
+  
+  @function name: SDDEVICE_GET_BUSWIDTH
+  @prototype: UINT8 SDDEVICE_GET_BUSWIDTH(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return:  bus width: SDCONFIG_BUS_WIDTH_SPI, SDCONFIG_BUS_WIDTH_1_BIT, SDCONFIG_BUS_WIDTH_4_BIT
+   
+  @notes: Implemented as a macro.
+  
+  @see also: SDDEVICE_IS_BUSMODE_SPI
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_BUSWIDTH(pDev)        SDCONFIG_GET_BUSWIDTH((pDev)->pHcd->CardProperties.BusMode)
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Is bus in SPI mode.
+  
+  @function name: SDDEVICE_IS_BUSMODE_SPI
+  @prototype: BOOL SDDEVICE_IS_BUSMODE_SPI(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return:  TRUE, SPI mode.
+   
+  @notes: Implemented as a macro.
+  
+  @see also: SDDEVICE_GET_BUSWIDTH
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_IS_BUSMODE_SPI(pDev) (SDDEVICE_GET_BUSWIDTH(pDev) == SDCONFIG_BUS_WIDTH_SPI)
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Send a request to a device.
+  
+  @function name: SDDEVICE_CALL_REQUEST_FUNC
+  @prototype: SDIO_STATUS SDDEVICE_CALL_REQUEST_FUNC(PSDDEVICE pDevice, PSDREQUEST pRequest)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+  @input:  pRequest  - the request to be sent
+ 
+  @output: none
+
+  @return: SDIO_STATUS 
+ 
+  @notes: Sends a request to the specified device. If the request is successfully sent, then
+          the response flags can be checked to detemine the result of the request.
+  
+  @example: Example of sending a request to a device:
+    PSDREQUEST  pReq = NULL;
+    //allocate a request
+    pReq = SDDeviceAllocRequest(pDevice);
+    if (NULL == pReq) {
+        return SDIO_STATUS_NO_RESOURCES;    
+    }
+    //initialize the request
+    SDLIB_SetupCMD52Request(FuncNo, Address, Write, *pData, pReq);
+    //send the request to the target
+    status = SDDEVICE_CALL_REQUEST_FUNC(pDevice,pReq);
+    if (!SDIO_SUCCESS(status)) {
+        break;   
+    }
+    //check the request response (based on the request type)
+    if (SD_R5_GET_RESP_FLAGS(pReq->Response) & SD_R5_ERRORS) {
+        ...
+    }
+    if (!Write) {
+            // store the byte
+        *pData =  SD_R5_GET_READ_DATA(pReq->Response);
+    }
+    //free the request
+    SDDeviceFreeRequest(pDevice,pReq);
+    ...
+                
+  @see also: SDDeviceAllocRequest
+  @see also: SDDEVICE_CALL_CONFIG_FUNC
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_CALL_REQUEST_FUNC(pDev,pReq)  (pDev)->pRequest((pDev),(pReq))
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Send configuration to a device.
+  
+  @function name: SDDEVICE_CALL_CONFIG_FUNC
+  @prototype: SDIO_STATUS SDDEVICE_CALL_CONFIG_FUNC(PSDDEVICE pDevice, PSDCONFIG pConfigure)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+  @input:  pConfigure - configuration request
+ 
+  @output: none
+
+  @return: SDIO_STATUS 
+ 
+  @notes: Sends a configuration request to the specified device. 
+  
+  @example: Example of sending a request to a device:
+        SDCONFIG  configHdr; 
+        SDCONFIG_FUNC_ENABLE_DISABLE_DATA fData;
+        fData.EnableFlags = SDCONFIG_ENABLE_FUNC;
+        fData.TimeOut = 500;
+        SET_SDCONFIG_CMD_INFO(&configHdr, SDCONFIG_FUNC_ENABLE_DISABLE, fData, sizeof(fData));
+        return SDDEVICE_CALL_CONFIG_FUNC(pDevice, &configHdr);
+                
+  @see also: SDLIB_IssueConfig
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_CALL_CONFIG_FUNC(pDev,pCfg)   (pDev)->pConfigure((pDev),(pCfg))
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Allocate a request structure.
+  
+  @function name: SDDeviceAllocRequest
+  @prototype: PSDREQUEST SDDeviceAllocRequest(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: request pointer or NULL if not available.
+ 
+  @notes:  This function must not be called in a non-schedulable (interrupts off) context.  
+           Allocating memory on some OSes may block.
+                
+  @see also: SDDEVICE_CALL_REQUEST_FUNC
+  @see also: SDDeviceFreeRequest
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDeviceAllocRequest(pDev)        (pDev)->AllocRequest((pDev))
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Free a request structure.
+  
+  @function name: SDDeviceFreeRequest
+  @prototype: void SDDeviceFreeRequest(PSDDEVICE pDevice, PSDREQUEST pRequest)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+  @input:  pRequest  - request allocated by SDDeviceAllocRequest().
+ 
+  @output: none
+
+  @return: none
+ 
+  @notes: This function must not be called in a non-schedulable (interrupts off) context.  
+          Freeing memory on some OSes may block.
+                
+  @see also: SDDEVICE_CALL_REQUEST_FUNC
+  @see also: SDDeviceAllocRequest
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDeviceFreeRequest(pDev,pReq)    (pDev)->FreeRequest((pDev),pReq) 
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Register an interrupt handler for a device.
+  
+  @function name: SDDEVICE_SET_IRQ_HANDLER
+  @prototype: void SDDEVICE_SET_IRQ_HANDLER(PSDDEVICE pDevice, 
+                                            void (*pIrqFunction)(PVOID pContext),
+                                            PVOID pContext)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+  @input:  pIrqFunction  - the interrupt function to execute.
+  @input:  pContext  - context value passed into interrupt routine.
+ 
+  @output: none
+
+  @return: none
+ 
+  @notes: The registered routine will be called upon each card interrupt.
+          The interrupt function should acknowledge the interrupt when it is
+          ready to handle more interrupts using:
+          SDLIB_IssueConfig(pDevice, SDCONFIG_FUNC_ACK_IRQ, NULL, 0);
+          The interrupt handler can perform synchronous request calls.
+                
+  @see also: SDDEVICE_SET_ASYNC_IRQ_HANDLER
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_SET_IRQ_HANDLER(pDev,pFn,pContext)  \
+{                                                    \
+    (pDev)->pIrqFunction = (pFn);                    \
+    (pDev)->IrqContext = (PVOID)(pContext);          \
+}
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Register an asynchronous interrupt handler for a device.
+  
+  @function name: SDDEVICE_SET_ASYNC_IRQ_HANDLER
+  @prototype: void SDDEVICE_SET_ASYNC_IRQ_HANDLER(PSDDEVICE pDevice, 
+                                            void (*pIrqAsyncFunction)(PVOID pContext),
+                                            PVOID pContext)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+  @input:  pIrqAsyncFunction  - the interrupt function to execute.
+  @input:  pContext  - context value passed into interrupt routine.
+ 
+  @output: none
+
+  @return: none
+ 
+  @notes: The registered routine will be called upon each card interrupt.
+          The interrupt function should acknowledge the interrupt when it is
+          ready to handle more interrupts using:
+          SDLIB_IssueConfig(pDevice, SDCONFIG_FUNC_ACK_IRQ, NULL, 0);
+          The interrupt handler can not perform any synchronous request calls.
+          Using this call provides a faster interrupt dispatch, but limits all
+          requests to asynchronous mode.
+                
+  @see also: SDDEVICE_SET_IRQ_HANDLER
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_SET_ASYNC_IRQ_HANDLER(pDev,pFn,pContext)  \
+{                                                          \
+    (pDev)->pIrqAsyncFunction = (pFn);                     \
+    (pDev)->IrqAsyncContext = (PVOID)(pContext);           \
+}
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the SDIO capabilities rgeister.
+  
+  @function name: SDDEVICE_GET_SDIOCARD_CAPS
+  @prototype: UINT8 SDDEVICE_GET_SDIOCARD_CAPS(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return: SD capabilities
+ 
+  @notes: See SD specification for decoding of these capabilities.
+                
+  @see also: SDDEVICE_GET_SDIO_CARD_CAPS
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_SDIOCARD_CAPS(pDev) (pDev)->pHcd->CardProperties.SDIOCaps
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get HCD driver name
+  
+  @function name: SDDEVICE_GET_HCDNAME
+  @prototype: PTEXT SDDEVICE_GET_HCDNAME(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input:  pDevice   - the target device for this request
+ 
+  @output: none
+
+  @return:  pointer to a string containing the name of the underlying HCD
+   
+  @notes: Implemented as a macro.
+  
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_HCDNAME(pDev)  (pDev)->pHcd->pName
+
+
+#define SDDEVICE_CALL_IRQ_HANDLER(pDev)       (pDev)->pIrqFunction((pDev)->IrqContext)
+#define SDDEVICE_CALL_IRQ_ASYNC_HANDLER(pDev) (pDev)->pIrqAsyncFunction((pDev)->IrqAsyncContext)
+
+
+#define SDDEVICE_SET_SDIO_FUNCNO(pDev,Num) (pDev)->pId[0].SDIO_FunctionNo = (Num)
+#define SDDEVICE_IS_CARD_REMOVED(pDev)     ((pDev)->pHcd->CardProperties.CardState & \
+                                             CARD_STATE_REMOVED)
+
+
+typedef enum _SDHCD_IRQ_PROC_STATE { 
+    SDHCD_IDLE = 0,
+    SDHCD_IRQ_PENDING = 1,
+    SDHCD_IRQ_HELPER  = 2 
+}SDHCD_IRQ_PROC_STATE, *PSDHCD_IRQ_PROC_STATE;
+
+/* host controller bus driver registration structure */
+typedef struct _SDHCD {
+    CT_VERSION_CODE Version;    /* version code of the SDIO stack */
+    SDLIST  SDList;             /* internal use list*/
+    PTEXT   pName;              /* name of registering host/slot driver */
+    UINT32  Attributes;         /* attributes of host controller */
+    UINT16  MaxBytesPerBlock;   /* max bytes per block */
+    UINT16  MaxBlocksPerTrans;  /* max blocks per transaction */
+    SD_SLOT_CURRENT  MaxSlotCurrent;  /* max current per slot in milli-amps */
+    UINT8   SlotNumber;         /* sequential slot number for this HCD, set by bus driver */
+    SD_BUSCLOCK_RATE    MaxClockRate;         /* max clock rate in hz */
+    SLOT_VOLTAGE_MASK   SlotVoltageCaps;      /* slot voltage capabilities */
+    SLOT_VOLTAGE_MASK   SlotVoltagePreferred; /* preferred slot voltage */
+    PVOID   pContext;                         /* host controller driver use data   */
+    SDIO_STATUS (*pRequest)(struct _SDHCD *pHcd); 
+                                /* get/set configuration */
+    SDIO_STATUS (*pConfigure)(struct _SDHCD *pHcd, PSDCONFIG pConfig); 
+        /* everything below this line is for bus driver use */
+    OS_SEMAPHORE    ConfigureOpsSem;    /* semaphore to make specific configure ops atomic, internal use */
+    OS_CRITICALSECTION HcdCritSection;  /* critical section to protect hcd data structures (internal use) */
+    SDREQUESTQUEUE  RequestQueue;       /* request queue, internal use */
+    PSDREQUEST      pCurrentRequest;    /* current request we are working on */
+    CARD_PROPERTIES CardProperties;     /* properties for the currently inserted card*/
+    OSKERNEL_HELPER SDIOIrqHelper;      /* synch IRQ helper, internal use */
+    SDDEVICE        *pPseudoDev;        /* pseudo device used for initialization (internal use) */
+    UINT8           PendingHelperIrqs;  /* IRQ helper pending IRQs */
+    UINT8           PendingIrqAcks;     /* pending IRQ acks from function drivers */
+    UINT8           IrqsEnabled;        /* current irq enabled mask */
+    SDHCD_IRQ_PROC_STATE IrqProcState;  /* irq processing state */
+    POS_DEVICE      pDevice;            /* device registration with base system */
+    SD_SLOT_CURRENT SlotCurrentAllocated; /* slot current allocated (internal use ) */
+    ATOMIC_FLAGS    HcdFlags;             /* HCD Flags */
+#define HCD_REQUEST_CALL_BIT  0
+#define HCD_IRQ_NO_PEND_CHECK 1           /* HCD flag to bypass interrupt pending register
+                                             check, typically done on single function cards */
+    SDREQUESTQUEUE  CompletedRequestQueue; /* completed request queue, internal use */
+    PSDDMA_DESCRIPTION pDmaDescription; /* description of HCD's DMA capabilities */  
+    POS_MODULE         pModule;         /* OS-specific module information */
+    INT                Recursion;       /* recursion level */
+    PVOID              Reserved1;
+    PVOID              Reserved2;
+}SDHCD, *PSDHCD;
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get a pointer to the HCD's DMA description
+
+  @function name: SDGET_DMA_DESCRIPTION
+  @prototype: PSDDMA_DESCRIPTION SDGET_DMA_DESCRIPTION(PSDDEVICE pDevice) 
+  @category: PD_Reference
+ 
+  @input:  pDevice - device structure
+           
+  @return: PSDDMA_DESCRIPTION or NULL if no DMA support
+ 
+  @notes: Implemented as a macro. 
+           
+  @example: getting the current request: 
+          PSDDMA_DESCRIPTION pDmaDescrp = SDGET_DMA_DESCRIPTION(pDevice);
+        
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDGET_DMA_DESCRIPTION(pDevice)     (pDevice)->pHcd->pDmaDescription 
+
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get the logical slot number the device is assigned to.
+
+  @function name: SDDEVICE_GET_SLOT_NUMBER
+  @prototype: UINT8 SDDEVICE_GET_SLOT_NUMBER(PSDDEVICE pDevice) 
+  @category: PD_Reference
+ 
+  @input:  pDevice - device structure
+           
+  @return: unsigned number representing the slot number
+ 
+  @notes: Implemented as a macro. This value is unique for each physical slot in the system
+          and assigned by the bus driver. Devices on a multi-function card will share the same
+          slot number.
+           
+  @example: getting the slot number: 
+          UINT8 thisSlot = SDDEVICE_GET_SLOT_NUMBER(pDevice);
+        
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDDEVICE_GET_SLOT_NUMBER(pDevice) (pDevice)->pHcd->SlotNumber
+
+/* for function use */
+SDIO_STATUS SDIO_RegisterFunction(PSDFUNCTION pFunction);
+SDIO_STATUS SDIO_UnregisterFunction(PSDFUNCTION pFunction);
+
+#include "sdio_hcd_defs.h" 
+#endif /* __SDIO_BUSDRIVER_H___ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdio_hcd_defs.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdio_hcd_defs.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdio_hcd_defs.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,219 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_hcd_defs.h
+
+ at abstract: host controller driver definitions
+ 
+ at notice: Copyright (c), 2005-2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifndef __SDIO_HCD_DEFS_H___
+#define __SDIO_HCD_DEFS_H___
+
+    /* write protect switch position data */
+typedef UINT8 SDCONFIG_WP_VALUE;
+
+    /* HC commands */
+#define SDCONFIG_SEND_INIT_CLOCKS  (SDCONFIG_FLAGS_HC_CONFIG | SDCONFIG_FLAGS_DATA_PUT  | 1)
+#define SDCONFIG_SDIO_INT_CTRL     (SDCONFIG_FLAGS_HC_CONFIG | SDCONFIG_FLAGS_DATA_PUT  | 2)
+#define SDCONFIG_SDIO_REARM_INT    (SDCONFIG_FLAGS_HC_CONFIG | SDCONFIG_FLAGS_DATA_NONE | 3)
+#define SDCONFIG_BUS_MODE_CTRL     (SDCONFIG_FLAGS_HC_CONFIG | SDCONFIG_FLAGS_DATA_BOTH | 4)
+#define SDCONFIG_POWER_CTRL        (SDCONFIG_FLAGS_HC_CONFIG | SDCONFIG_FLAGS_DATA_PUT  | 5)
+#define SDCONFIG_GET_WP            (SDCONFIG_FLAGS_HC_CONFIG | SDCONFIG_FLAGS_DATA_GET  | 6)
+
+    /* slot init clocks control */
+typedef struct _SDCONFIG_INIT_CLOCKS_DATA  {
+    UINT16  NumberOfClocks;  /* number of clocks to issue in the current bus mode*/
+}SDCONFIG_INIT_CLOCKS_DATA, *PSDCONFIG_INIT_CLOCKS_DATA;
+
+/* slot power control */
+typedef struct _SDCONFIG_POWER_CTRL_DATA  {
+    BOOL                SlotPowerEnable;            /* turn on/off slot power */
+    SLOT_VOLTAGE_MASK   SlotPowerVoltageMask;       /* slot power voltage mask */
+}SDCONFIG_POWER_CTRL_DATA, *PSDCONFIG_POWER_CTRL_DATA;
+
+typedef UINT8 SDIO_IRQ_MODE_FLAGS;
+/* SDIO Interrupt control */
+typedef struct _SDCONFIG_SDIO_INT_CTRL_DATA  {
+    BOOL                  SlotIRQEnable;      /* turn on/off Slot IRQ detection */
+    SDIO_IRQ_MODE_FLAGS   IRQDetectMode;      /* slot IRQ detect mode , only valid if Enabled = TRUE */
+#define IRQ_DETECT_RAW       0x00
+#define IRQ_DETECT_MULTI_BLK 0x01
+#define IRQ_DETECT_4_BIT     0x02
+#define IRQ_DETECT_1_BIT     0x04
+#define IRQ_DETECT_SPI       0x08
+}SDCONFIG_SDIO_INT_CTRL_DATA, *PSDCONFIG_SDIO_INT_CTRL_DATA;
+
+/* card insert */
+#define EVENT_HCD_ATTACH               1
+/* card remove */
+#define EVENT_HCD_DETACH               2
+/* card slot interrupt */
+#define EVENT_HCD_SDIO_IRQ_PENDING     3
+/* transfer done */
+#define EVENT_HCD_TRANSFER_DONE        4
+/* (internal use only) */
+#define EVENT_HCD_CD_POLLING           5
+/* NOP */
+#define EVENT_HCD_NOP                  0
+
+/* attrib_flags */
+#define SDHCD_ATTRIB_SUPPORTS_POWER   0x0001  /* host controller driver supports power managment */
+#define SDHCD_ATTRIB_BUS_1BIT         0x0002  /* SD Native 1 - bit mode */
+#define SDHCD_ATTRIB_BUS_4BIT         0x0004  /* SD Native 4 - bit mode */
+#define SDHCD_ATTRIB_BUS_SPI          0x0008  /* SPI mode capable */
+#define SDHCD_ATTRIB_READ_WAIT        0x0010  /* read wait supported (SD-only) */
+#define SDHCD_ATTRIB_MULTI_BLK_IRQ    0x0020  /* interrupts between multi-block capable (SD-only) */
+#define SDHCD_ATTRIB_BUS_MMC8BIT      0x0040  /* MMC  8-bit */
+#define SDHCD_ATTRIB_SLOT_POLLING     0x0080  /* requires slot polling for Card Detect */
+#define SDHCD_ATTRIB_POWER_SWITCH     0x0100  /* host has power switch control, must be set if SPI
+                                                 mode can be switched to 1 or 4 bit mode */
+#define SDHCD_ATTRIB_NO_SPI_CRC       0x0200  /* when in SPI mode, 
+                                                 host wants to run without SPI CRC */
+#define SDHCD_ATTRIB_AUTO_CMD12       0x0400  /* host controller supports auto CMD12 */
+#define SDHCD_ATTRIB_NO_4BIT_IRQ      0x0800  /* host controller does not support 4 bit IRQ mode*/
+#define SDHCD_ATTRIB_RAW_MODE         0x1000  /* host controller is a raw mode hcd*/
+#define SDHCD_ATTRIB_SD_HIGH_SPEED    0x2000  /* host controller supports SD high speed interface */
+#define SDHCD_ATTRIB_MMC_HIGH_SPEED   0x4000  /* host controller supports MMC high speed interface */
+
+#define IS_CARD_PRESENT(pHcd)         ((pHcd)->CardProperties.Flags & CARD_TYPE_MASK)
+#define SET_CURRENT_REQUEST(pHcd,Req) (pHcd)->pCurrentRequest = (Req)
+#define IS_HCD_RAW(pHcd)              ((pHcd)->Attributes & SDHCD_ATTRIB_RAW_MODE)
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get a pointer to the current bus request for a host controller
+
+  @function name: GET_CURRENT_REQUEST
+  @prototype: PSDREQUEST GET_CURRENT_REQUEST (PSDHCD pHcd) 
+  @category: HD_Reference
+ 
+  @input:  pHcd - host structure
+           
+  @return: current SD/SDIO bus request being worked on
+ 
+  @notes: Implemented as a macro. This macro returns the current SD request that is
+          being worked on.
+           
+  @example: getting the current request: 
+          pReq = GET_CURRENT_REQUEST(&pHct->Hcd);
+        
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define GET_CURRENT_REQUEST(pHcd)     (pHcd)->pCurrentRequest 
+#define GET_CURRENT_BUS_WIDTH(pHcd) SDCONFIG_GET_BUSWIDTH((pHcd)->CardProperties.BusMode)
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get host controller's current operational bus clock 
+  
+  @function name: SDHCD_GET_OPER_CLOCK
+  @prototype: SD_BUSCLOCK_RATE SDHCD_GET_OPER_CLOCK(PSDHCD pHcd)
+  @category: HD_Reference
+  
+  @input:  pHcd   - the registered host structure
+ 
+  @output: none
+
+  @return: clock rate
+ 
+  @notes: Implemented as a macro. Returns the current bus clock rate. 
+         
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDHCD_GET_OPER_CLOCK(pHcd)      (pHcd)->CardProperties.OperBusClock
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Is host controller operating in SPI mode
+
+  @function name: IS_HCD_BUS_MODE_SPI
+  @prototype: BOOL IS_HCD_BUS_MODE_SPI (PSDHCD pHcd) 
+  @category: HD_Reference
+ 
+  @input:  pHcd - host structure
+           
+  @return: TRUE if in SPI mode
+ 
+  @notes: Implemented as a macro. Host controllers that operate in SPI mode
+          dynamically can use this macro to check for SPI operation.
+           
+  @example: testing for SPI mode: 
+          if (IS_HCD_BUS_MODE_SPI(&pHct->Hcd)) {
+             .. in spi mode
+          }
+        
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define IS_HCD_BUS_MODE_SPI(pHcd)   (GET_CURRENT_BUS_WIDTH(pHcd) == SDCONFIG_BUS_WIDTH_SPI)
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Is host controller using SPI in non-CRC mode
+
+  @function name: IS_HCD_BUS_MODE_SPI_NO_CRC
+  @prototype: BOOL IS_HCD_BUS_MODE_SPI_NO_CRC(PSDHCD pHcd) 
+  @category: HD_Reference
+ 
+  @input:  pHcd - host structure
+           
+  @return: TRUE if CRC mode is off
+ 
+  @notes: Implemented as a macro. SPI-capable cards and systems can operate in 
+          non-CRC protected mode.  In this mode the host controller should ignore
+          CRC fields and/or disable CRC generation when issuing command or data
+          packets.  This option is useful for software based SPI mode where CRC
+          should be turned off in order to reduce processing overhead.
+           
+  @example: test for non-CRC SPI mode: 
+          if (IS_HCD_BUS_MODE_SPI_NO_CRC(&pHct->Hcd)) {
+             .. disable CRC checking in hardware.
+          }
+        
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define IS_HCD_BUS_MODE_SPI_NO_CRC(pHcd)   ((pHcd)->CardProperties.BusMode & \
+                                                        SDCONFIG_BUS_MODE_SPI_NO_CRC)
+
+typedef UINT8 SDHCD_RESPONSE_CHECK_MODE;
+/* have SDIO core check the response token and see if it is okay to continue with
+   * the data portion */
+#define SDHCD_CHECK_DATA_TRANS_OK   0x01
+/* have SDIO core check the SPI token received */
+#define SDHCD_CHECK_SPI_TOKEN       0x02
+ 
+/* prototypes */
+/* for HCD use */
+SDIO_STATUS SDIO_RegisterHostController(PSDHCD pHcd);
+SDIO_STATUS SDIO_UnregisterHostController(PSDHCD pHcd);
+SDIO_STATUS SDIO_HandleHcdEvent(PSDHCD pHcd, HCD_EVENT Event);
+SDIO_STATUS SDIO_CheckResponse(PSDHCD pHcd, PSDREQUEST pReq, SDHCD_RESPONSE_CHECK_MODE CheckMode);
+SDIO_STATUS SDIO_BusAddOSDevice(PSDDMA_DESCRIPTION pDma, POS_PNPDRIVER pDriver, POS_PNPDEVICE pDevice);
+void SDIO_BusRemoveOSDevice(POS_PNPDRIVER pDriver, POS_PNPDEVICE pDevice);
+ 
+#endif /* __SDIO_BUSDRIVER_H___ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdio_hcd_defs_pdk.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdio_hcd_defs_pdk.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdio_hcd_defs_pdk.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,51 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_hcd_defs.h
+
+ at abstract: host controller driver definitions
+ 
+ at notice: Copyright (c), 2005 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifndef __SDIO_HCD_DEFS_H___
+#define __SDIO_HCD_DEFS_H___
+
+/* this is a place holder for PDKs, you must have the HDK in order to compile
+ * Host Controller Drivers  */
+ 
+#endif /* __SDIO_HCD_DEFS_H___ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdio_lib.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdio_lib.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdio_lib.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,270 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_lib.h
+
+ at abstract: SDIO Library include
+
+#notes: 
+ 
+ at notice: Copyright (c), 2004-2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifndef __SDIO_LIB_H___
+#define __SDIO_LIB_H___
+
+#ifdef UNDER_CE
+#include "wince\sdio_lib_wince.h"
+#endif /* WINCE */
+
+#define CMD52_DO_READ  FALSE
+#define CMD52_DO_WRITE TRUE
+
+    /* read/write macros to any function */
+#define Cmd52WriteByteFunc(pDev,Func,Address,pValue) \
+                SDLIB_IssueCMD52((pDev),(Func),(Address),(pValue),1,CMD52_DO_WRITE)
+#define Cmd52ReadByteFunc(pDev,Func,Address,pValue) \
+                SDLIB_IssueCMD52((pDev),(Func),(Address),pValue,1,CMD52_DO_READ)
+#define Cmd52ReadMultipleFunc(pDev,Func, Address, pBuf,length) \
+                SDLIB_IssueCMD52((pDev),(Func),(Address),(pBuf),(length),CMD52_DO_READ)
+                                  
+   /* macros to access common registers */              
+#define Cmd52WriteByteCommon(pDev, Address, pValue) \
+                Cmd52WriteByteFunc((pDev),0,(Address),(pValue))
+#define Cmd52ReadByteCommon(pDev, Address, pValue) \
+                Cmd52ReadByteFunc((pDev),0,(Address),(pValue))
+#define Cmd52ReadMultipleCommon(pDev, Address, pBuf,length) \
+                Cmd52ReadMultipleFunc((pDev),0,(Address),(pBuf),(length)) 
+
+#define SDLIB_SetupCMD52RequestAsync(f,a,w,wd,pR)   \
+{                                                   \
+    SDLIB_SetupCMD52Request((f),(a),(w),(wd),(pR)); \
+    (pR)->Flags |= SDREQ_FLAGS_TRANS_ASYNC;         \
+}
+        
+    /* a message block */
+typedef struct _SDMESSAGE_BLOCK {
+    SDLIST  SDList;                   /* list entry */
+    INT     MessageLength;            /* number of bytes in this message */
+    UINT8   MessageStart[1];          /* message start */
+}SDMESSAGE_BLOCK, *PSDMESSAGE_BLOCK;
+
+    /* message queue */
+typedef struct _SDMESSAGE_QUEUE {
+    SDLIST          MessageList;        /* message list */
+    OS_CRITICALSECTION MessageCritSection; /* message semaphore */
+    SDLIST          FreeMessageList;    /* free message list */
+    INT             MaxMessageLength;   /* max message block length */
+}SDMESSAGE_QUEUE, *PSDMESSAGE_QUEUE;
+          
+/* internal library prototypes that can be proxied */
+SDIO_STATUS _SDLIB_IssueCMD52(PSDDEVICE     pDevice,
+                        UINT8         FuncNo,
+                        UINT32        Address,
+                        PUINT8        pData,
+                        INT           ByteCount,
+                        BOOL          Write);                        
+SDIO_STATUS _SDLIB_FindTuple(PSDDEVICE  pDevice,
+                             UINT8      Tuple,
+                             UINT32     *pTupleScanAddress,
+                             PUINT8     pBuffer,
+                             UINT8      *pLength);                               
+SDIO_STATUS _SDLIB_IssueConfig(PSDDEVICE        pDevice,
+                               SDCONFIG_COMMAND Command,
+                               PVOID            pData,
+                               INT              Length);                                  
+void _SDLIB_PrintBuffer(PUCHAR pBuffer, INT Length,PTEXT pDescription);  
+void _SDLIB_SetupCMD52Request(UINT8         FuncNo,
+                              UINT32        Address,
+                              BOOL          Write,
+                              UINT8         WriteData,                                    
+                              PSDREQUEST    pRequest);                             
+SDIO_STATUS _SDLIB_SetFunctionBlockSize(PSDDEVICE        pDevice,
+                                        UINT16           BlockSize);
+                                        
+SDIO_STATUS _SDLIB_GetDefaultOpCurrent(PSDDEVICE  pDevice, 
+                                       SD_SLOT_CURRENT *pOpCurrent); 
+PSDMESSAGE_QUEUE _CreateMessageQueue(INT MaxMessages, INT MaxMessageLength);
+void _DeleteMessageQueue(PSDMESSAGE_QUEUE pQueue);
+SDIO_STATUS _PostMessage(PSDMESSAGE_QUEUE pQueue, PVOID pMessage, INT MessageLength);
+SDIO_STATUS _GetMessage(PSDMESSAGE_QUEUE pQueue, PVOID pData, INT *pBufferLength);
+
+#ifdef CTSYSTEM_NO_FUNCTION_PROXIES
+    /* OS port requires no proxy functions, use methods directly from the library */
+#define SDLIB_IssueCMD52        _SDLIB_IssueCMD52
+#define SDLIB_SetupCMD52Request _SDLIB_SetupCMD52Request
+#define SDLIB_FindTuple         _SDLIB_FindTuple
+#define SDLIB_IssueConfig       _SDLIB_IssueConfig
+#define SDLIB_SetFunctionBlockSize  _SDLIB_SetFunctionBlockSize
+#define SDLIB_GetDefaultOpCurrent   _SDLIB_GetDefaultOpCurrent
+#define SDLIB_CreateMessageQueue    _CreateMessageQueue
+#define SDLIB_DeleteMessageQueue    _DeleteMessageQueue
+#define SDLIB_PostMessage           _PostMessage
+#define SDLIB_GetMessage            _GetMessage
+#define SDLIB_PrintBuffer           _SDLIB_PrintBuffer
+#else
+
+/* proxied versions */
+SDIO_STATUS SDLIB_IssueCMD52(PSDDEVICE     pDevice,
+                             UINT8         FuncNo,
+                             UINT32        Address,
+                             PUINT8        pData,
+                             INT           ByteCount,
+                             BOOL          Write); 
+                                               
+void SDLIB_SetupCMD52Request(UINT8         FuncNo,
+                             UINT32        Address,
+                             BOOL          Write,
+                             UINT8         WriteData,                                    
+                             PSDREQUEST    pRequest);
+                             
+SDIO_STATUS SDLIB_FindTuple(PSDDEVICE  pDevice,
+                        UINT8      Tuple,
+                        UINT32     *pTupleScanAddress,
+                        PUINT8     pBuffer,
+                        UINT8      *pLength);   
+                        
+SDIO_STATUS SDLIB_IssueConfig(PSDDEVICE        pDevice,
+                              SDCONFIG_COMMAND Command,
+                              PVOID            pData,
+                              INT              Length); 
+                                   
+SDIO_STATUS SDLIB_SetFunctionBlockSize(PSDDEVICE        pDevice,
+                                       UINT16           BlockSize);
+                                       
+void SDLIB_PrintBuffer(PUCHAR pBuffer, INT Length,PTEXT pDescription);                  
+
+SDIO_STATUS SDLIB_GetDefaultOpCurrent(PSDDEVICE  pDevice, SD_SLOT_CURRENT *pOpCurrent);
+
+PSDMESSAGE_QUEUE SDLIB_CreateMessageQueue(INT MaxMessages, INT MaxMessageLength);
+
+void SDLIB_DeleteMessageQueue(PSDMESSAGE_QUEUE pQueue);
+
+SDIO_STATUS SDLIB_PostMessage(PSDMESSAGE_QUEUE pQueue, PVOID pMessage, INT MessageLength);
+
+SDIO_STATUS SDLIB_GetMessage(PSDMESSAGE_QUEUE pQueue, PVOID pData, INT *pBufferLength);
+#endif /* CTSYSTEM_NO_FUNCTION_PROXIES */
+
+
+SDIO_STATUS SDLIB_OSCreateHelper(POSKERNEL_HELPER pHelper,
+                           PHELPER_FUNCTION pFunction, 
+                           PVOID            pContext);                            
+
+void SDLIB_OSDeleteHelper(POSKERNEL_HELPER pHelper);
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Check message queue is empty
+  
+  @function name: SDLIB_IsQueueEmpty
+  @prototype: BOOL SDLIB_IsQueueEmpty(PSDMESSAGE_QUEUE pQueue)
+  @category: Support_Reference
+  
+  @input: pQueue - message queue to check
+
+  @return: TRUE if empty else false
+            
+  @see also: SDLIB_CreateMessageQueue 
+         
+  @example: Check message queue :
+              if (SDLIB_IsQueueEmpty(pInstance->pQueue)) {
+                   .. message queue is empty
+              }
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static INLINE BOOL SDLIB_IsQueueEmpty(PSDMESSAGE_QUEUE pQueue) {
+    return SDLIST_IS_EMPTY(&pQueue->MessageList);
+}
+
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Issue an I/O abort request
+  
+  @function name: SDLIB_IssueIOAbort
+  @prototype: SDIO_STATUS SDLIB_IssueIOAbort(PSDDEVICE pDevice)
+  @category: PD_Reference
+  
+  @input: pDevice - the device that is the target of this request
+
+  @return: SDIO_STATUS
+            
+  @notes: This procedure can be called to issue an I/O abort request to an I/O function.
+          This procedure cannot be used to abort a data (block) transfer already in progress.
+          It is intended to be used when a data (block) transfer completes with an error and only if 
+          the I/O function requires an abort action.  Some I/O functions may automatically
+          recover from such failures and not require this action. This function issues
+          the abort command synchronously and can potentially block.
+          If an async request is required, you must allocate a request and use 
+          SDLIB_SetupIOAbortAsync() to prepare the request.
+          
+  @example: Issuing I/O Abort synchronously :
+              .. check status from last block operation:
+              if (status == SDIO_STATUS_BUS_READ_TIMEOUT) {
+                   .. on failure, issue I/O abort
+                   status2 = SDLIB_IssueIOAbort(pDevice);
+              }
+            Issuing I/O Abort asynchronously:
+                ... allocate a request
+                ... setup the request:
+                 SDLIB_SetupIOAbortAsync(pDevice,pReq);
+                 pReq->pCompletion = myIOAbortCompletion;
+                 pReq->pCompleteContext = pDevice; 
+                 status = SDDEVICE_CALL_REQUEST_FUNC(pDevice,pReq);
+   
+   @see also: SDLIB_SetupIOAbortAsync              
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+static INLINE SDIO_STATUS SDLIB_IssueIOAbort(PSDDEVICE pDevice) {
+    UINT8 value = SDDEVICE_GET_SDIO_FUNCNO(pDevice);
+    return Cmd52WriteByteCommon(pDevice,0x06,&value);
+}   
+
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Setup an I/O abort request for async operation
+  
+  @function name: SDLIB_SetupIOAbortAsync
+  @prototype: SDLIB_SetupIOAbortAsync(PSDDEVICE pDevice, PSDREQUEST pRequest)
+  @category: PD_Reference
+  
+  @input: pDevice - the device that is the target of this request
+          pRequest - the request to set up
+            
+  @see also: SDLIB_IssueIOAbort   
+                
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define SDLIB_SetupIOAbortAsync(pDevice, pReq) \
+        SDLIB_SetupCMD52RequestAsync(0,0x06,TRUE,SDDEVICE_GET_SDIO_FUNCNO(pDevice),(pReq))
+               
+               
+#endif /* __SDIO_LIB_H___*/

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdlist.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdlist.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/include/sdlist.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,141 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdlist.h
+
+ at abstract: OS independent list functions
+ 
+ at notice: Copyright (c), 2004-2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifndef __SDLIST_H___
+#define __SDLIST_H___
+
+/* list functions */
+/* pointers for the list */
+typedef struct _SDLIST {
+    struct _SDLIST *pPrev;
+    struct _SDLIST *pNext;
+}SDLIST, *PSDLIST;
+/*
+ * SDLIST_INIT , circular list 
+*/
+#define SDLIST_INIT(pList)\
+    {(pList)->pPrev = pList; (pList)->pNext = pList;}
+#define SDLIST_INIT_DECLARE(List)\
+    SDLIST List =   {&List, &List}
+
+
+#define SDLIST_IS_EMPTY(pList) (((pList)->pPrev == (pList)) && ((pList)->pNext == (pList)))
+#define SDLIST_GET_ITEM_AT_HEAD(pList) (pList)->pNext   
+#define SDLIST_GET_ITEM_AT_TAIL(pList) (pList)->pPrev 
+/*
+ * SDITERATE_OVER_LIST pStart is the list, pTemp is a temp list member
+ * NOT: do not use this function if the items in the list are deleted inside the
+ * iteration loop
+*/
+#define SDITERATE_OVER_LIST(pStart, pTemp) \
+    for((pTemp) =(pStart)->pNext; pTemp != (pStart); (pTemp) = (pTemp)->pNext)
+    
+
+/* safe iterate macro that allows the item to be removed from the list
+ * the iteration continues to the next item in the list
+ */
+#define SDITERATE_OVER_LIST_ALLOW_REMOVE(pStart,pItem,st,offset)  \
+{                                                       \
+    PSDLIST  pTemp;                                     \
+    pTemp = (pStart)->pNext;                            \
+    while (pTemp != (pStart)) {                         \
+        (pItem) = CONTAINING_STRUCT(pTemp,st,offset);   \
+         pTemp = pTemp->pNext;                          \
+         
+#define SDITERATE_END }}
+ 
+/*
+ * SDListInsertTail - insert pAdd to the end of the list
+*/
+static INLINE PSDLIST SDListInsertTail(PSDLIST pList, PSDLIST pAdd) {
+        /* this assert catches when an item is added twice */
+    DBG_ASSERT(pAdd->pNext != pList);
+        /* insert at tail */ 
+    pAdd->pPrev = pList->pPrev;
+    pAdd->pNext = pList;
+    pList->pPrev->pNext = pAdd;
+    pList->pPrev = pAdd;
+    return pAdd;
+}
+    
+/*
+ * SDListInsertHead - insert pAdd into the head of the list
+*/
+static INLINE PSDLIST SDListInsertHead(PSDLIST pList, PSDLIST pAdd) {
+        /* this assert catches when an item is added twice */
+    DBG_ASSERT(pAdd->pPrev != pList);    
+        /* insert at head */ 
+    pAdd->pPrev = pList;
+    pAdd->pNext = pList->pNext;
+    pList->pNext->pPrev = pAdd;
+    pList->pNext = pAdd;
+    return pAdd;
+}
+
+#define SDListAdd(pList,pItem) SDListInsertHead((pList),(pItem))
+/*
+ * SDListRemove - remove pDel from list
+*/
+static INLINE PSDLIST SDListRemove(PSDLIST pDel) {
+    pDel->pNext->pPrev = pDel->pPrev;
+    pDel->pPrev->pNext = pDel->pNext;
+        /* point back to itself just to be safe, incase remove is called again */
+    pDel->pNext = pDel;
+    pDel->pPrev = pDel;
+    return pDel;
+}
+
+/*
+ * SDListRemoveItemFromHead - get a list item from the head
+*/
+static INLINE PSDLIST SDListRemoveItemFromHead(PSDLIST pList) {
+    PSDLIST pItem = NULL;
+    if (pList->pNext != pList) {
+        pItem = pList->pNext;
+            /* remove the first item from head */
+        SDListRemove(pItem);    
+    }   
+    return pItem; 
+}
+#endif /* __SDLIST_H___ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/Makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/Makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/Makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,40 @@
+
+ifeq ($(CT_OS_TYPE),linux)
+
+ifeq ($(CT_OS_SUB_TYPE),linux_2_4)
+# EXTRA_FLAGS is not propogated from our top-level makefile, use the variable we setup
+EXTRA_CFLAGS += $(CT_PASS_CFLAGS)
+# define the target for the obj-y variable.
+O_TARGET := sdio_lib.o 
+# need export line for module SYMBOL exports
+export-objs := linux/sdio_lib_os.o
+# define object files that must be linked together
+obj-y += sdio_lib_c.o sdio_lib_os.o
+# define the objects to be created
+obj-m += sdio_lib_c.o linux/sdio_lib_os.o sdio_lib.o 
+#include rules make file 
+include $(CT_OS_TOP_LEVEL_RULE)
+
+else
+# for all others
+obj-m += sdio_lib.o
+sdio_lib-objs := sdio_lib_c.o linux/sdio_lib_os.o
+endif
+
+endif
+
+
+ifeq ($(CT_OS_TYPE),qnx)
+##QNX
+LIST=VARIANT
+ifndef QRECURSE
+QRECURSE=recurse.mk
+ifdef QCONFIG
+QRDIR=$(dir $(QCONFIG))
+endif
+endif
+include $(QRDIR)$(QRECURSE)
+endif
+
+
+  
\ No newline at end of file

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/_sdio_lib.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/_sdio_lib.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/_sdio_lib.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,50 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: _sdio_lib.h
+
+ at abstract: SDIO Lib internal include
+
+#notes: 
+ 
+ at notice: Copyright (c), 2004-2006 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#ifndef ___SDIO_LIB_H___
+#define ___SDIO_LIB_H___
+                                                                              
+#endif /* ___SDIO_LIB_H___*/

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/linux/sdio_lib_os.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/linux/sdio_lib_os.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/linux/sdio_lib_os.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,260 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_function_os.c
+
+ at abstract: Linux implementation module for SDIO library
+
+#notes: includes module load and unload functions
+ 
+ at notice: Copyright (c), 2004 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+/* debug level for this module*/
+#define DBG_DECLARE 4;
+#include "../../include/ctsystem.h"
+ 
+#include <linux/module.h>
+#include <linux/init.h>
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)   
+#include <linux/kthread.h>
+#endif
+
+#include "../../include/sdio_busdriver.h"
+#include "../../include/sdio_lib.h"
+#include "../_sdio_lib.h"
+
+#define DESCRIPTION "SDIO Kernel Library"
+#define AUTHOR "Atheros Communications, Inc."
+
+/* debug print parameter */
+
+CT_DECLARE_MODULE_PARAM_INTEGER(debuglevel);
+MODULE_PARM_DESC(debuglevel, "debuglevel 0-7, controls debug prints");
+
+
+
+/* proxies */
+SDIO_STATUS SDLIB_IssueCMD52(PSDDEVICE     pDevice,
+                            UINT8         FuncNo,
+                            UINT32        Address,
+                            PUINT8        pData,
+                            INT           ByteCount,
+                            BOOL          Write)
+{
+    return _SDLIB_IssueCMD52(pDevice,FuncNo,Address,pData,ByteCount,Write);
+}
+
+SDIO_STATUS SDLIB_FindTuple(PSDDEVICE  pDevice,
+                         UINT8      Tuple,
+                         UINT32     *pTupleScanAddress,
+                         PUINT8     pBuffer,
+                         UINT8      *pLength)
+{
+    return _SDLIB_FindTuple(pDevice,Tuple,pTupleScanAddress,pBuffer,pLength);
+}  
+
+SDIO_STATUS SDLIB_IssueConfig(PSDDEVICE        pDevice,
+                              SDCONFIG_COMMAND Command,
+                              PVOID            pData,
+                              INT              Length)
+{
+    return _SDLIB_IssueConfig(pDevice,Command,pData,Length);
+}   
+  
+void SDLIB_PrintBuffer(PUCHAR pBuffer,INT Length,PTEXT pDescription)
+{
+    _SDLIB_PrintBuffer(pBuffer,Length,pDescription);   
+} 
+
+SDIO_STATUS SDLIB_SetFunctionBlockSize(PSDDEVICE        pDevice,
+                                       UINT16           BlockSize)   
+{
+    return _SDLIB_SetFunctionBlockSize(pDevice,BlockSize);  
+} 
+ 
+void SDLIB_SetupCMD52Request(UINT8         FuncNo,
+                             UINT32        Address,
+                             BOOL          Write,
+                             UINT8         WriteData,                                    
+                             PSDREQUEST    pRequest)
+{
+    _SDLIB_SetupCMD52Request(FuncNo,Address,Write,WriteData,pRequest);  
+}        
+      
+SDIO_STATUS SDLIB_GetDefaultOpCurrent(PSDDEVICE  pDevice, SD_SLOT_CURRENT *pOpCurrent) 
+{
+    return _SDLIB_GetDefaultOpCurrent(pDevice,pOpCurrent);  
+}   
+
+/* helper function launcher */
+INT HelperLaunch(PVOID pContext)
+{
+    INT exit;
+        /* call function */
+    exit = ((POSKERNEL_HELPER)pContext)->pHelperFunc((POSKERNEL_HELPER)pContext);
+    complete_and_exit(&((POSKERNEL_HELPER)pContext)->Completion, exit);    
+    return exit;
+}
+
+/*
+ * OSCreateHelper - create a worker kernel thread
+*/
+SDIO_STATUS SDLIB_OSCreateHelper(POSKERNEL_HELPER pHelper,
+                           PHELPER_FUNCTION pFunction, 
+                           PVOID            pContext)
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    
+    memset(pHelper,0,sizeof(OSKERNEL_HELPER));  
+    
+    do {
+        pHelper->pContext = pContext;
+        pHelper->pHelperFunc = pFunction;
+        status = SignalInitialize(&pHelper->WakeSignal);
+        if (!SDIO_SUCCESS(status)) {
+            break; 
+        }    
+        init_completion(&pHelper->Completion);
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)
+        pHelper->pTask = kthread_create(HelperLaunch,
+                                       (PVOID)pHelper,
+                                       "SDIO Helper");
+        if (NULL == pHelper->pTask) {
+            status = SDIO_STATUS_NO_RESOURCES;
+            break;  
+        }
+        wake_up_process(pHelper->pTask);
+#else 
+    /* 2.4 */       
+        pHelper->pTask = kernel_thread(HelperLaunch,
+                                       (PVOID)pHelper,
+                                       (CLONE_FS | CLONE_FILES | SIGCHLD));
+        if (pHelper->pTask < 0) {
+            DBG_PRINT(SDDBG_TRACE, 
+                ("SDIO BusDriver - OSCreateHelper, failed to create thread\n"));
+        }        
+#endif
+
+    } while (FALSE);
+    
+    if (!SDIO_SUCCESS(status)) {
+        SDLIB_OSDeleteHelper(pHelper);   
+    }
+    return status;
+}
+                           
+/*
+ * OSDeleteHelper - delete thread created with OSCreateHelper
+*/
+void SDLIB_OSDeleteHelper(POSKERNEL_HELPER pHelper)
+{
+ 
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)
+    if (pHelper->pTask != NULL) {
+#else 
+    /* 2.4 */       
+    if (pHelper->pTask >= 0) {
+#endif        
+        pHelper->ShutDown = TRUE;       
+        SignalSet(&pHelper->WakeSignal); 
+            /* wait for thread to exit */
+        wait_for_completion(&pHelper->Completion);  
+#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0)
+        pHelper->pTask = NULL;
+#else 
+    /* 2.4 */       
+        pHelper->pTask = 0;
+#endif        
+    }  
+    
+    SignalDelete(&pHelper->WakeSignal);
+}
+                          
+/*
+ * module init
+*/
+static int __init sdio_lib_init(void) {
+    REL_PRINT(SDDBG_TRACE, ("SDIO Library load\n"));
+    return 0;
+}
+
+/*
+ * module cleanup
+*/
+static void __exit sdio_lib_cleanup(void) {
+    REL_PRINT(SDDBG_TRACE, ("SDIO Library unload\n"));
+}
+
+PSDMESSAGE_QUEUE SDLIB_CreateMessageQueue(INT MaxMessages, INT MaxMessageLength)
+{
+    return _CreateMessageQueue(MaxMessages,MaxMessageLength);
+  
+}
+void SDLIB_DeleteMessageQueue(PSDMESSAGE_QUEUE pQueue)
+{
+    _DeleteMessageQueue(pQueue);
+}
+
+SDIO_STATUS SDLIB_PostMessage(PSDMESSAGE_QUEUE pQueue, PVOID pMessage, INT MessageLength)
+{
+    return _PostMessage(pQueue,pMessage,MessageLength);
+}
+
+SDIO_STATUS SDLIB_GetMessage(PSDMESSAGE_QUEUE pQueue, PVOID pData, INT *pBufferLength)
+{
+    return _GetMessage(pQueue,pData,pBufferLength);
+}
+
+MODULE_LICENSE("GPL and additional rights");
+MODULE_DESCRIPTION(DESCRIPTION);
+MODULE_AUTHOR(AUTHOR);
+module_init(sdio_lib_init);
+module_exit(sdio_lib_cleanup);
+EXPORT_SYMBOL(SDLIB_IssueCMD52);
+EXPORT_SYMBOL(SDLIB_FindTuple);
+EXPORT_SYMBOL(SDLIB_IssueConfig);
+EXPORT_SYMBOL(SDLIB_PrintBuffer);
+EXPORT_SYMBOL(SDLIB_SetFunctionBlockSize);
+EXPORT_SYMBOL(SDLIB_SetupCMD52Request);
+EXPORT_SYMBOL(SDLIB_GetDefaultOpCurrent);
+EXPORT_SYMBOL(SDLIB_OSCreateHelper);
+EXPORT_SYMBOL(SDLIB_OSDeleteHelper);
+EXPORT_SYMBOL(SDLIB_CreateMessageQueue);
+EXPORT_SYMBOL(SDLIB_DeleteMessageQueue);
+EXPORT_SYMBOL(SDLIB_PostMessage);
+EXPORT_SYMBOL(SDLIB_GetMessage);

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/sdio_lib.ko
===================================================================
(Binary files differ)


Property changes on: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/sdio_lib.ko
___________________________________________________________________
Name: svn:mime-type
   + application/octet-stream

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/sdio_lib.mod.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/sdio_lib.mod.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/sdio_lib.mod.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,45 @@
+#include <linux/module.h>
+#include <linux/vermagic.h>
+#include <linux/compiler.h>
+
+MODULE_INFO(vermagic, VERMAGIC_STRING);
+
+struct module __this_module
+__attribute__((section(".gnu.linkonce.this_module"))) = {
+ .name = KBUILD_MODNAME,
+ .init = init_module,
+#ifdef CONFIG_MODULE_UNLOAD
+ .exit = cleanup_module,
+#endif
+};
+
+static const struct modversion_info ____versions[]
+__attribute_used__
+__attribute__((section("__versions"))) = {
+	{ 0x532018d2, "struct_module" },
+	{ 0x12da5bb2, "__kmalloc" },
+	{ 0xa738d1cc, "complete_and_exit" },
+	{ 0x89b301d4, "param_get_int" },
+	{ 0xf837928e, "malloc_sizes" },
+	{ 0x98bd6f46, "param_set_int" },
+	{ 0x66c8bcd7, "_spin_lock_irqsave" },
+	{ 0x1d26aa98, "sprintf" },
+	{ 0x11067792, "__spin_lock_init" },
+	{ 0x40eb6ac6, "wait_for_completion" },
+	{ 0x1b7d4074, "printk" },
+	{ 0x8baed6ae, "_spin_unlock_irqrestore" },
+	{ 0x29caedd7, "kmem_cache_alloc" },
+	{ 0xb8ed13e6, "wake_up_process" },
+	{ 0x9bde6acc, "init_waitqueue_head" },
+	{ 0x37a0cba, "kfree" },
+	{ 0xdd1e87ae, "kthread_create" },
+	{ 0x60a4461c, "__up_wakeup" },
+};
+
+static const char __module_depends[]
+__attribute_used__
+__attribute__((section(".modinfo"))) =
+"depends=";
+
+
+MODULE_INFO(srcversion, "3F23A6C8D3AE082934D002E");

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/sdio_lib_c.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/sdio_lib_c.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/lib/sdio_lib_c.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,908 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdio_lib_c.c
+
+ at abstract: OS independent SDIO library functions
+ at category abstract: Support_Reference Support Functions.
+
+ at notes: Support functions for device I/O 
+ 
+ at notice: Copyright (c), 2004-2005 Atheros Communications, Inc.
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+#define MODULE_NAME  SDLIB_
+
+#include "../include/ctsystem.h"
+#include "../include/sdio_busdriver.h"
+#include "../include/_sdio_defs.h"
+#include "../include/sdio_lib.h"
+#include "_sdio_lib.h"
+ 
+#define _Cmd52WriteByteCommon(pDev, Address, pValue) \
+                _SDLIB_IssueCMD52((pDev),0,(Address),(pValue),1,TRUE)
+#define _Cmd52ReadByteCommon(pDev, Address, pValue) \
+                _SDLIB_IssueCMD52((pDev),0,(Address),pValue,1,FALSE)
+#define _Cmd52ReadMultipleCommon(pDev, Address, pBuf,length) \
+                _SDLIB_IssueCMD52((pDev),0,(Address),(pBuf),(length),FALSE) 
+
+/* inline version */
+static INLINE void _iSDLIB_SetupCMD52Request(UINT8         FuncNo,
+                                             UINT32        Address,
+                                             BOOL          Write,
+                                             UINT8         WriteData,                                    
+                                             PSDREQUEST    pRequest) {                                
+    if (Write) {
+        SDIO_SET_CMD52_ARG(pRequest->Argument,CMD52_WRITE,
+                           FuncNo,
+                           CMD52_NORMAL_WRITE,Address,WriteData);
+    } else {
+        SDIO_SET_CMD52_ARG(pRequest->Argument,CMD52_READ,FuncNo,0,Address,0x00);
+    }
+    
+    pRequest->Flags = SDREQ_FLAGS_RESP_SDIO_R5;
+    pRequest->Command = CMD52;                                
+}
+               
+/**++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Setup cmd52 requests
+  
+  @function name: SDLIB_SetupCMD52Request
+  @prototype: void SDLIB_SetupCMD52Request(UINT8         FuncNo,
+                                           UINT32        Address,
+                                           BOOL          Write,
+                                           UINT8         WriteData,                                    
+                                           PSDREQUEST    pRequest)
+  @category: PD_Reference
+  
+  @input:  FunctionNo - function number.
+  @input:  Address - I/O address, 17-bit register address.
+  @input:  Write  - TRUE if a write operation, FALSE for reads.
+  @input:  WriteData - write data, byte to write if write operation.
+  
+  @output: pRequest - request is updated with cmd52 parameters
+  
+  @return: none
+  
+  @notes: This function does not perform any I/O. For register reads, the completion 
+          routine can use the SD_R5_GET_READ_DATA() macro to extract the register value. 
+          The routine should also extract the response flags using the SD_R5_GET_RESP_FLAGS()
+          macro and check the flags with the SD_R5_ERRORS mask.
+          
+  @example: Getting the register value from the completion routine: 
+          flags = SD_R5_GET_RESP_FLAGS(pRequest->Response);
+          if (flags & SD_R5_ERRORS) {
+             ... errors
+          } else {          
+             registerValue = SD_R5_GET_READ_DATA(pRequest->Response);
+          }  
+  
+  @see also: SDLIB_IssueCMD52 
+  @see also: SDDEVICE_CALL_REQUEST_FUNC
+  
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void _SDLIB_SetupCMD52Request(UINT8         FuncNo,
+                              UINT32        Address,
+                              BOOL          Write,
+                              UINT8         WriteData,                                    
+                              PSDREQUEST    pRequest)
+{
+    _iSDLIB_SetupCMD52Request(FuncNo,Address,Write,WriteData,pRequest);      
+}                
+
+/**++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Issue a CMD52 to read or write a register
+
+  @function name: SDLIB_IssueCMD52
+  @prototype: SDIO_STATUS SDLIB_IssueCMD52(PSDDEVICE     pDevice,
+                                           UINT8         FuncNo,
+                                           UINT32        Address,
+                                           PUINT8        pData,
+                                           INT           ByteCount,
+                                           BOOL          Write)
+  @category: PD_Reference
+  @input: pDevice - the device that is the target of the command.
+  @input: FunctionNo - function number of the target.
+  @input: Address - 17-bit register address.
+  @input: ByteCount - number of bytes to read or write,
+  @input: Write - TRUE if a write operation, FALSE for reads.
+  @input: pData - data buffer for writes.
+  
+  @output: pData - data buffer for writes.
+
+  @return: SDIO Status
+  
+  @notes:  This function will allocate a request and issue multiple byte reads or writes
+           to satisfy the ByteCount requested.  This function is fully synchronous and will block
+           the caller.
+  
+  @see also: SDLIB_SetupCMD52Request
+  
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS _SDLIB_IssueCMD52(PSDDEVICE     pDevice,
+                              UINT8         FuncNo,
+                              UINT32        Address,
+                              PUINT8        pData,
+                              INT           ByteCount,
+                              BOOL          Write)
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    
+    PSDREQUEST  pReq = NULL;
+
+    pReq = SDDeviceAllocRequest(pDevice);
+    
+    if (NULL == pReq) {
+        return SDIO_STATUS_NO_RESOURCES;    
+    }
+                             
+    while (ByteCount) {
+        _iSDLIB_SetupCMD52Request(FuncNo,Address,Write,*pData,pReq);
+        status = SDDEVICE_CALL_REQUEST_FUNC(pDevice,pReq);
+        if (!SDIO_SUCCESS(status)) {
+            break;   
+        }  
+        
+        status = ConvertCMD52ResponseToSDIOStatus(SD_R5_GET_RESP_FLAGS(pReq->Response));
+        if (!SDIO_SUCCESS(status)) {
+            DBG_PRINT(SDDBG_TRACE, ("SDIO Library: CMD52 resp error: 0x%X \n", 
+                                    SD_R5_GET_RESP_FLAGS(pReq->Response)));
+            break; 
+        }
+        if (!Write) {
+                /* store the byte */            
+            *pData =  SD_R5_GET_READ_DATA(pReq->Response);
+        }
+        pData++;
+        Address++;                          
+        ByteCount--;   
+    }  
+  
+    SDDeviceFreeRequest(pDevice,pReq);
+    return status;  
+}
+
+     
+                                                                          
+/**++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Find a device's tuple.
+  
+  @function name: SDLIB_FindTuple
+  @prototype: SDIO_STATUS SDLIB_FindTuple(PSDDEVICE  pDevice,
+                                          UINT8      Tuple,
+                                          UINT32     *pTupleScanAddress,
+                                          PUINT8     pBuffer,
+                                          UINT8      *pLength)
+
+  @category: PD_Reference
+  @input: pDevice - the device that is the target of the command.
+  @input: Tuple - 8-bit ID of tuple to find          
+  @input: pTupleScanAddress - On entry pTupleScanAddress is the adddress to start scanning
+  @input: pLength - length of pBuffer 
+  
+  @output: pBuffer - storage for tuple
+  @output: pTupleScanAddress - address of the next tuple 
+  @output: pLength - length of tuple read
+
+  @return: status
+  
+  @notes: It is possible to have the same tuple ID multiple times with different lengths. This function
+          blocks and is fully synchronous.
+        
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS _SDLIB_FindTuple(PSDDEVICE  pDevice,
+                             UINT8      Tuple,
+                             UINT32     *pTupleScanAddress,
+                             PUINT8     pBuffer,
+                             UINT8      *pLength)
+{
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    UINT32      scanStart = *pTupleScanAddress;
+    UINT8       tupleCode;
+    UINT8       tupleLink;
+    
+        /* sanity check */
+    if (scanStart < SDIO_CIS_AREA_BEGIN) {
+        return SDIO_STATUS_CIS_OUT_OF_RANGE; 
+    }
+   
+    while (TRUE) {           
+            /* check for end */
+        if (scanStart > SDIO_CIS_AREA_END) {
+            status = SDIO_STATUS_TUPLE_NOT_FOUND;
+            break;   
+        }          
+            /* get the code */
+        status = _Cmd52ReadByteCommon(pDevice, scanStart, &tupleCode);
+        if (!SDIO_SUCCESS(status)) {
+            break;   
+        } 
+        if (CISTPL_END == tupleCode) {
+                /* found the end */
+            status = SDIO_STATUS_TUPLE_NOT_FOUND;
+            break; 
+        }
+            /* bump past tuple code */
+        scanStart++;
+            /* get the tuple link value */
+        status = _Cmd52ReadByteCommon(pDevice, scanStart, &tupleLink);
+        if (!SDIO_SUCCESS(status)) {
+            break;   
+        }
+            /* bump past tuple link*/
+        scanStart++;           
+            /* check tuple we just found */
+        if (tupleCode == Tuple) {
+             DBG_PRINT(SDDBG_TRACE, ("SDIO Library: Tuple:0x%2.2X Found at Address:0x%X, TupleLink:0x%X \n",
+                                     Tuple, (scanStart - 2), tupleLink));
+            if (tupleLink != CISTPL_LINK_END) {
+                    /* return the next scan address to the caller */
+                *pTupleScanAddress = scanStart + tupleLink; 
+            } else {
+                    /* the tuple link is an end marker */ 
+                *pTupleScanAddress = 0xFFFFFFFF;
+            }
+                /* go get the tuple */
+            status = _Cmd52ReadMultipleCommon(pDevice, scanStart,pBuffer,min(*pLength,tupleLink));         
+            if (SDIO_SUCCESS(status)) {
+                    /* set the actual return length */
+                *pLength = min(*pLength,tupleLink); 
+            }
+                /* break out of loop */
+            break;
+        }
+            /*increment past this entire tuple */
+        scanStart += tupleLink;
+    }
+    
+    return status;
+}
+
+/**++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Issue an SDIO configuration command.
+
+  @function name: SDLIB_IssueConfig
+  @prototype: SDIO_STATUS _SDLIB_IssueConfig(PSDDEVICE        pDevice,
+                                             SDCONFIG_COMMAND Command,
+                                             PVOID            pData,
+                                             INT              Length)
+
+  @category: PD_Reference
+  @input:  pDevice - the device that is the target of the command.
+  @input:  Command - command to send, see example.
+  @input:  pData - command's data
+  @input:  Length length of pData
+  
+  @output: pData - updated on commands that return data.
+  
+  @return: SDIO Status
+  
+  @example: Command and data pairs:
+            Type                               Data
+            SDCONFIG_GET_WP             SDCONFIG_WP_VALUE 
+            SDCONFIG_SEND_INIT_CLOCKS   none 
+            SDCONFIG_SDIO_INT_CTRL      SDCONFIG_SDIO_INT_CTRL_DATA
+            SDCONFIG_SDIO_REARM_INT     none 
+            SDCONFIG_BUS_MODE_CTRL      SDCONFIG_BUS_MODE_DATA
+            SDCONFIG_POWER_CTRL         SDCONFIG_POWER_CTRL_DATA
+  
+  @notes: 
+   
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS _SDLIB_IssueConfig(PSDDEVICE        pDevice,
+                               SDCONFIG_COMMAND Command,
+                               PVOID            pData,
+                               INT              Length)
+{
+    SDCONFIG  configHdr; 
+    SET_SDCONFIG_CMD_INFO(&configHdr,Command,pData,Length);
+    return SDDEVICE_CALL_CONFIG_FUNC(pDevice,&configHdr);
+}                
+
+/**++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Set function block size
+
+  @function name: SDLIB_SetFunctionBlockSize
+  @prototype: SDIO_STATUS SDLIB_SetFunctionBlockSize(PSDDEVICE        pDevice,
+                                                     UINT16           BlockSize)
+
+  @category: PD_Reference
+  @input:  pDevice - the device that is the target of the command.
+  @input:  BlockSize - block size to set in function 
+
+  @output: none
+   
+  @return: SDIO Status
+  
+  @notes:  Issues CMD52 to set the block size.  This function is fully synchronous and may
+           block.
+  
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS _SDLIB_SetFunctionBlockSize(PSDDEVICE        pDevice,
+                                        UINT16           BlockSize)
+{
+    UINT8   data[2];
+        
+      /* endian safe */
+    data[0] = (UINT8)BlockSize;
+    data[1] = (UINT8)(BlockSize >> 8);
+        /* write the function blk size control register */
+    return _SDLIB_IssueCMD52(pDevice,
+                             0,    /* function 0 register space */
+                             FBR_FUNC_BLK_SIZE_LOW_OFFSET(CalculateFBROffset(
+                             SDDEVICE_GET_SDIO_FUNCNO(pDevice))),
+                             data,
+                             2,
+                             TRUE);
+}
+                                        
+/**++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Print a buffer to the debug output
+
+  @function name: SDLIB_PrintBuffer
+  @prototype: void SDLIB_PrintBuffer(PUCHAR pBuffer, INT Length, PTEXT pDescription)
+  @category: Support_Reference
+  
+  @input:  pBuffer - Hex buffer to be printed.
+  @input:  Length - length of pBuffer.
+  @input:  pDescription - String title to be printed above the dump.
+
+  @output: none
+   
+  @return: none
+  
+  @notes:  Prints the buffer by converting to ASCII and using REL_PRINT() with 16 
+           bytes per line.
+  
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void _SDLIB_PrintBuffer(PUCHAR pBuffer, INT Length, PTEXT pDescription)
+{
+    TEXT  line[49];
+    TEXT  address[5];
+    TEXT  ascii[17];
+    TEXT  temp[5];
+    INT   i;
+    UCHAR num;
+    USHORT offset = 0;
+
+    REL_PRINT(0,
+              ("+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\n"));
+    if (pDescription != NULL) {
+        REL_PRINT(0, ("Description: %s \n\n",pDescription));
+    } else {
+        REL_PRINT(0, ("Description: NONE \n\n"));
+    }
+    REL_PRINT(0,
+              ("Offset                   Data                               ASCII        \n"));
+    REL_PRINT(0,
+              ("--------------------------------------------------------------------------\n"));
+ 
+    while (Length) {
+        line[0] = (TEXT)0;
+        ascii[0] = (TEXT)0;
+        address[0] = (TEXT)0;
+        sprintf(address,"%4.4X",offset);
+        for (i = 0; i < 16; i++) {
+            if (Length != 0) {
+                num = *pBuffer;
+                sprintf(temp,"%2.2X ",num);
+                strcat(line,temp);
+                if ((num >= 0x20) && (num <= 0x7E)) {
+                    sprintf(temp,"%c",*pBuffer);
+                } else {
+                    sprintf(temp,"%c",0x2e);
+                }            
+                strcat(ascii,temp);
+                pBuffer++;
+                Length--;  
+            } else {
+                    /* pad partial line with spaces */
+                strcat(line,"   ");
+                strcat(ascii," ");   
+            }
+        } 
+        REL_PRINT(0,("%s    %s   %s\n", address, line, ascii));
+        offset += 16;
+    }
+    REL_PRINT(0,
+              ("+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\n"));
+  
+}
+
+/**++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get default operational current
+
+  @function name: SDLIB_GetDefaultOpCurrent
+  @prototype: SDIO_STATUS SDLIB_GetDefaultOpCurrent(PSDDEVICE  pDevice, SD_SLOT_CURRENT *pOpCurrent)
+  @category: PD_Reference
+  
+  @input: pDevice - the device that is the target of the command.
+  
+  @output: pOpCurrent - operational current in mA.
+
+  @return: SDIO_STATUS
+  
+  @notes:  This routine reads the function's CISTPL_FUNCE tuple for the default operational
+           current. For SDIO 1.0 devices this value is read from the 8-bit TPLFE_OP_MAX_PWR
+           field.  For SDIO 1.1 devices, the HP MAX power field is used only if the device is
+           operating in HIPWR mode. Otherwise the 8-bit TPLFE_OP_MAX_PWR field is used. 
+           Some systems may restrict high power/current mode and force cards to operate in a 
+           legacy (< 200mA) mode.  This function is fully synchronous and will block the caller.
+           
+   @example: Getting the default operational current for this function:
+            // get default operational current
+       status = SDLIB_GetDefaultOpCurrent(pDevice, &slotCurrent);
+       if (!SDIO_SUCCESS(status)) {
+           .. failed
+       }
+  
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS _SDLIB_GetDefaultOpCurrent(PSDDEVICE  pDevice, SD_SLOT_CURRENT *pOpCurrent) 
+{
+    UINT32              nextTpl;
+    UINT8               tplLength;
+    struct SDIO_FUNC_EXT_FUNCTION_TPL_1_1 funcTuple;
+    SDIO_STATUS         status;
+    
+      /* get the FUNCE tuple */
+    nextTpl = SDDEVICE_GET_SDIO_FUNC_CISPTR(pDevice);
+    tplLength = sizeof(funcTuple); 
+        /* go get the function Extension tuple */
+    status = _SDLIB_FindTuple(pDevice,
+                              CISTPL_FUNCE,
+                              &nextTpl,
+                              (PUINT8)&funcTuple,
+                              &tplLength);
+    
+    if (!SDIO_SUCCESS(status)) {
+        DBG_PRINT(SDDBG_ERROR, ("SDLIB_GetDefaultOpCurrent: Failed to get FuncE Tuple: %d \n", status));
+        return status;  
+    }    
+       /* use the operational power (8-bit) value of current in mA as default*/
+    *pOpCurrent = funcTuple.CommonInfo.OpMaxPwr;        
+    if ((tplLength >= sizeof(funcTuple)) && (SDDEVICE_IS_SDIO_REV_GTEQ_1_10(pDevice))) {
+            /* we have a 1.1 tuple */        
+             /* check for HIPWR mode */
+        if (SDDEVICE_GET_CARD_FLAGS(pDevice) & CARD_HIPWR) {        
+                /* use the maximum operational power (16 bit ) from the tuple */
+            *pOpCurrent = CT_LE16_TO_CPU_ENDIAN(funcTuple.HiPwrMaxPwr); 
+        }
+    } 
+    return SDIO_STATUS_SUCCESS;  
+}
+
+
+static INLINE void FreeMessageBlock(PSDMESSAGE_QUEUE pQueue, PSDMESSAGE_BLOCK pMsg) {
+    SDListInsertHead(&pQueue->FreeMessageList, &pMsg->SDList);
+}
+static INLINE void QueueMessageBlock(PSDMESSAGE_QUEUE pQueue, PSDMESSAGE_BLOCK pMsg) {
+    SDListInsertTail(&pQueue->MessageList, &pMsg->SDList);
+}
+static INLINE void QueueMessageToHead(PSDMESSAGE_QUEUE pQueue, PSDMESSAGE_BLOCK pMsg) {
+    SDListInsertHead(&pQueue->MessageList, &pMsg->SDList);    
+}
+
+static INLINE PSDMESSAGE_BLOCK GetFreeMessageBlock(PSDMESSAGE_QUEUE pQueue) {
+    PSDLIST pItem = SDListRemoveItemFromHead(&pQueue->FreeMessageList);
+    if (pItem != NULL) {
+        return CONTAINING_STRUCT(pItem, SDMESSAGE_BLOCK , SDList);  
+    }
+    return NULL;
+}
+static INLINE PSDMESSAGE_BLOCK GetQueuedMessage(PSDMESSAGE_QUEUE pQueue) {
+    PSDLIST pItem = SDListRemoveItemFromHead(&pQueue->MessageList);
+    if (pItem != NULL) {
+        return CONTAINING_STRUCT(pItem, SDMESSAGE_BLOCK , SDList);  
+    }
+    return NULL;
+}
+
+/**++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Create a message queue
+
+  @function name: SDLIB_CreateMessageQueue
+  @prototype: PSDMESSAGE_QUEUE SDLIB_CreateMessageQueue(INT MaxMessages, INT MaxMessageLength)
+  @category: Support_Reference
+  
+  @input: MaxMessages - Maximum number of messages this queue supports
+  @input: MaxMessageLength - Maximum size of each message
+ 
+  @return: Message queue object, NULL on failure
+  
+  @notes:  This function creates a simple first-in-first-out message queue.  The caller must determine 
+           the maximum number of messages the queue supports and the size of each message.  This
+           function will pre-allocate memory for each message. A producer of data posts a message
+           using SDLIB_PostMessage with a user defined data structure. A consumer of this data 
+           can retrieve the message (in FIFO order) using SDLIB_GetMessage. A message queue does not
+           provide a signaling mechanism for notifying a consumer of data. Notifying a consumer is 
+           user defined.
+  
+  @see also: SDLIB_DeleteMessageQueue, SDLIB_GetMessage, SDLIB_PostMessage.
+  
+  @example: Creating a message queue:
+       typedef struct _MyMessage {
+           UINT8 Code;
+           PVOID pDataBuffer;
+       } MyMessage;
+            // create message queue, 16 messages max.
+       pMsgQueue = SDLIB_CreateMessageQueue(16,sizeof(MyMessage));
+       if (NULL == pMsgQueue) {
+           .. failed
+       }
+  
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+PSDMESSAGE_QUEUE _CreateMessageQueue(INT MaxMessages, INT MaxMessageLength)
+{
+    PSDMESSAGE_QUEUE pQueue = NULL;
+    SDIO_STATUS      status = SDIO_STATUS_SUCCESS;
+    INT              ii;
+    PSDMESSAGE_BLOCK pMsg;
+    
+    do {
+        pQueue = (PSDMESSAGE_QUEUE)KernelAlloc(sizeof(SDMESSAGE_QUEUE));   
+        
+        if (NULL == pQueue) {
+            status = SDIO_STATUS_NO_RESOURCES;
+            break; 
+        }
+        SDLIST_INIT(&pQueue->MessageList);  
+        SDLIST_INIT(&pQueue->FreeMessageList);  
+        pQueue->MaxMessageLength = MaxMessageLength;       
+        status = CriticalSectionInit(&pQueue->MessageCritSection);
+        if (!SDIO_SUCCESS(status)) {
+            break;   
+        }       
+            /* allocate message blocks */
+        for (ii = 0; ii < MaxMessages; ii++) {
+            pMsg = (PSDMESSAGE_BLOCK)KernelAlloc(sizeof(SDMESSAGE_BLOCK) + MaxMessageLength -1); 
+            if (NULL == pMsg) {
+                break;    
+            }
+            FreeMessageBlock(pQueue, pMsg);
+        } 
+       
+        if (0 == ii) {
+            status = SDIO_STATUS_NO_RESOURCES;
+            break; 
+        }
+        
+    } while (FALSE);      
+  
+    if (!SDIO_SUCCESS(status)) {
+        if (pQueue != NULL) {
+            _DeleteMessageQueue(pQueue);    
+            pQueue = NULL;  
+        } 
+    }
+    return pQueue;  
+}
+
+/**++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Delete a message queue
+
+  @function name: SDLIB_DeleteMessageQueue
+  @prototype: void SDLIB_DeleteMessageQueue(PSDMESSAGE_QUEUE pQueue)
+  @category: Support_Reference
+  
+  @input: pQueue - message queue to delete
+  
+  @notes: This function flushes the message queue and frees all memory allocated for
+          messages.
+  
+  @see also: SDLIB_CreateMessageQueue
+  
+  @example: Deleting a message queue:
+       if (pMsgQueue != NULL) {
+            SDLIB_DeleteMessageQueue(pMsgQueue);
+       }
+  
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+void _DeleteMessageQueue(PSDMESSAGE_QUEUE pQueue)
+{
+    PSDMESSAGE_BLOCK pMsg;
+    SDIO_STATUS     status;
+    CT_DECLARE_IRQ_SYNC_CONTEXT();
+    
+    status = CriticalSectionAcquireSyncIrq(&pQueue->MessageCritSection);
+    
+        /* cleanup free list */
+    while (1) {
+        pMsg = GetFreeMessageBlock(pQueue);
+        if (pMsg != NULL) {
+            KernelFree(pMsg); 
+        } else {
+            break;   
+        }
+    }  
+        /* cleanup any in the queue */
+    while (1) {
+        pMsg = GetQueuedMessage(pQueue);
+        if (pMsg != NULL) {
+            KernelFree(pMsg); 
+        } else {
+            break;   
+        }
+    }
+    
+    status = CriticalSectionReleaseSyncIrq(&pQueue->MessageCritSection);  
+    CriticalSectionDelete(&pQueue->MessageCritSection);  
+    KernelFree(pQueue);
+    
+}
+
+/**++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Post a message queue
+
+  @function name: SDLIB_PostMessage
+  @prototype: SDIO_STATUS SDLIB_PostMessage(PSDMESSAGE_QUEUE pQueue, PVOID pMessage, INT MessageLength)
+  @category: Support_Reference
+  
+  @input: pQueue - message queue to post to
+  @input: pMessage - message to post
+  @input: MessageLength - length of message (for validation)
+  
+  @return: SDIO_STATUS
+  
+  @notes: The message queue uses an internal list of user defined message structures.  When
+          posting a message the message is copied into an allocated structure and queued.  The memory 
+          pointed to by pMessage does not need to be allocated and can reside on the stack. 
+          The length of the message to post can be smaller that the maximum message size. This allows
+          for variable length messages up to the maximum message size. This 
+          function returns SDIO_STATUS_NO_RESOURCES, if the message queue is full.  This
+          function returns SDIO_STATUS_BUFFER_TOO_SMALL, if the message size exceeds the maximum
+          size of a message.  Posting and getting messsages from a message queue is safe in any
+          driver context.
+            
+  @see also: SDLIB_CreateMessageQueue , SDLIB_GetMessage
+  
+  @example: Posting a message
+       MyMessage message;
+           // set up message
+       message.code = MESSAGE_DATA_READY;
+       message.pData = pInstance->pDataBuffers[currentIndex];
+           // post message       
+       status = SDLIB_PostMessage(pInstance->pReadQueue,&message,sizeof(message));
+       if (!SDIO_SUCCESS(status)) {
+           // failed
+       }
+  
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS _PostMessage(PSDMESSAGE_QUEUE pQueue, PVOID pMessage, INT MessageLength)
+{
+    SDIO_STATUS status2;
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;
+    PSDMESSAGE_BLOCK pMsg;  
+    CT_DECLARE_IRQ_SYNC_CONTEXT();
+    
+    if (MessageLength > pQueue->MaxMessageLength) {
+        return SDIO_STATUS_BUFFER_TOO_SMALL;
+    }
+   
+    status = CriticalSectionAcquireSyncIrq(&pQueue->MessageCritSection);
+    if (!SDIO_SUCCESS(status)) {
+        return status;
+    }
+    
+    do {        
+            /* get a message block */
+        pMsg = GetFreeMessageBlock(pQueue);       
+        if (NULL == pMsg) {
+            status = SDIO_STATUS_NO_RESOURCES;
+            break;    
+        }
+            /* copy the message */
+        memcpy(pMsg->MessageStart,pMessage,MessageLength);
+            /* set the length of the message */
+        pMsg->MessageLength = MessageLength;
+            /* queue the message to the list  */
+        QueueMessageBlock(pQueue,pMsg);
+    } while (FALSE);
+    
+    status2 = CriticalSectionReleaseSyncIrq(&pQueue->MessageCritSection);
+    return status; 
+}
+
+/**++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Get a message from a message queue
+
+  @function name: SDLIB_GetMessage
+  @prototype: SDIO_STATUS SDLIB_GetMessage(PSDMESSAGE_QUEUE pQueue, PVOID pData, INT *pBufferLength) 
+  @category: Support_Reference
+  
+  @input: pQueue - message queue to retreive a message from
+  @input: pBufferLength - on entry, the length of the data buffer
+  @output: pData - buffer to hold the message
+  @output: pBufferLength - on return, contains the number of bytes copied
+
+  @return: SDIO_STATUS
+  
+  @notes: The message queue uses an internal list of user defined message structures.  The message is
+          dequeued (FIFO order) and copied to the callers buffer.  The internal allocation for the message
+          is returned back to the message queue. This function returns SDIO_STATUS_NO_MORE_MESSAGES
+          if the message queue is empty. If the length of the buffer is smaller than the length of 
+          the message at the head of the queue,this function returns SDIO_STATUS_BUFFER_TOO_SMALL and
+          returns the required length in pBufferLength.
+            
+  @see also: SDLIB_CreateMessageQueue , SDLIB_PostMessage
+  
+  @example: Getting a message
+       MyMessage message;
+       INT       length;
+           // set length
+       length = sizeof(message);
+           // post message       
+       status = SDLIB_GetMessage(pInstance->pReadQueue,&message,&length);
+       if (!SDIO_SUCCESS(status)) {
+           // failed
+       }
+       
+  @example: Checking queue for a message and getting the size of the message
+       INT       length;
+           // use zero length to get the size of the message
+       length = 0;
+       status = SDLIB_GetMessage(pInstance->pReadQueue,NULL,&length);
+       if (status == SDIO_STATUS_NO_MORE_MESSAGES) {
+            // no messages in queue 
+       } else if (status == SDIO_STATUS_BUFFER_TOO_SMALL) {
+            // message exists in queue and length of message is returned
+            messageSizeInQueue = length;
+       } else {
+            // some other failure
+       }
+       
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+SDIO_STATUS _GetMessage(PSDMESSAGE_QUEUE pQueue, PVOID pData, INT *pBufferLength) 
+{
+    SDIO_STATUS status2;
+    SDIO_STATUS status = SDIO_STATUS_SUCCESS;  
+    PSDMESSAGE_BLOCK pMsg; 
+    CT_DECLARE_IRQ_SYNC_CONTEXT();
+    
+    status = CriticalSectionAcquireSyncIrq(&pQueue->MessageCritSection);
+    if (!SDIO_SUCCESS(status)) {
+        return status;
+    }
+    
+    do {
+        pMsg = GetQueuedMessage(pQueue);
+        if (NULL == pMsg) {
+            status = SDIO_STATUS_NO_MORE_MESSAGES;
+            break;    
+        } 
+        if (*pBufferLength < pMsg->MessageLength) {
+                /* caller buffer is too small */
+            *pBufferLength = pMsg->MessageLength;
+                /* stick it back to the front */
+            QueueMessageToHead(pQueue, pMsg);
+            status = SDIO_STATUS_BUFFER_TOO_SMALL;
+            break;
+        }    
+            /* copy the message to the callers buffer */
+        memcpy(pData,pMsg->MessageStart,pMsg->MessageLength);
+            /* return actual length */
+        *pBufferLength = pMsg->MessageLength; 
+            /* return this message block back to the free list  */
+        FreeMessageBlock(pQueue, pMsg);
+        
+    } while (FALSE);
+    
+    status2 = CriticalSectionReleaseSyncIrq(&pQueue->MessageCritSection);
+    
+    return status;     
+}
+
+/* the following documents the OS helper APIs */
+
+/**++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Create an OS-specific helper task/thread
+
+  @function name: SDLIB_OSCreateHelper
+  @prototype: SDIO_STATUS SDLIB_OSCreateHelper(POSKERNEL_HELPER pHelper,
+                                               PHELPER_FUNCTION pFunction, 
+                                               PVOID            pContext)
+  @category: Support_Reference
+  
+  @input: pHelper - caller allocated helper object
+  @input: pFunction - helper function
+  @input: pContext - helper context
+  
+  @return: SDIO_STATUS
+  
+  @notes: This function creates a helper task/thread that runs in a new execution context. The newly 
+          created task/thread invokes the helper function. The thread/task exits when the helper
+          function returns.  The helper function has the prototype of:
+          THREAD_RETURN HelperFunction(POSKERNEL_HELPER pHelper)
+          The helper function usually implements a while loop and suspends execution using
+          SD_WAIT_FOR_WAKEUP().  On exit the helper function can return an OS-specific THREAD_RETURN
+          code (usually zero). The helper function executes in a fully schedule-able context and
+          can block on semaphores and sleep.
+  
+  @see also: SDLIB_OSDeleteHelper , SD_WAIT_FOR_WAKEUP
+  
+  @example: A thread helper function:
+       THREAD_RETURN HelperFunction(POSKERNEL_HELPER pHelper) 
+       {
+           SDIO_STATUS status;
+           PMYCONTEXT pContext = (PMYCONTEXT)SD_GET_OS_HELPER_CONTEXT(pHelper); 
+                // wait for wake up 
+           while(1) {
+                  status = SD_WAIT_FOR_WAKEUP(pHelper);
+                  if (!SDIO_SUCCESS(status)) {
+                      break;
+                  }
+                  if (SD_IS_HELPER_SHUTTING_DOWN(pHelper)) {
+                      //... shutting down
+                      break;
+                  }
+                  // handle wakeup...
+            }
+            return 0;
+       }
+       
+  @example: Creating a helper:
+       status = SDLIB_OSCreateHelper(&pInstance->OSHelper,HelperFunction,pInstance);
+       if (!SDIO_SUCCESS(status)) {
+           // failed
+       }
+  
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+
+/**++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+  @function: Delete an OS helper task/thread
+
+  @function name: SDLIB_OSDeleteHelper
+  @prototype: void SDLIB_OSDeleteHelper(POSKERNEL_HELPER pHelper)
+  @category: Support_Reference
+  
+  @input: pHelper - caller allocated helper object
+  
+  @notes: This function wakes the helper and waits(blocks) until the helper exits. The caller can
+          only pass an OS helper structure that was initialized sucessfully by
+          SDLIB_OSCreateHelper.  The caller must be in a schedulable context.  
+  
+  @see also: SDLIB_OSCreateHelper
+  
+  @example: Deleting a helper:
+       if (pInstance->HelperCreated) {
+               // clean up the helper if we successfully created it
+           SDLIB_OSDeleteHelper(&pInstance->OSHelper);
+       }
+       
+  
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/linux/Makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/linux/Makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/linux/Makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,30 @@
+ifeq ($(CT_OS_TYPE),linux)
+
+ifneq ($(CT_OS_SUB_TYPE),linux_2_4)
+ifeq ($(ALL_BUILD),1)
+obj-m += sdioplatformdriver/
+else 
+ifeq ($(FUNCTION_BUILD),1)
+# use this to test PDK headers
+obj-m += sdioplatformdriver/
+else 
+ifeq ($(PDK_BUILD),1)
+obj-m += sdioplatformdriver/
+else
+ifeq ($(HDK_BUILD),1)
+obj-m += sdioplatformdriver/
+endif
+endif
+endif
+endif
+
+endif
+
+ifeq ($(CT_OS_SUB_TYPE),linux_2_4)
+endif
+
+include $(CT_OS_TOP_LEVEL_RULE)
+endif
+endif
+
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/linux/sdioplatformdriver/Makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/linux/sdioplatformdriver/Makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/linux/sdioplatformdriver/Makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,11 @@
+ifeq ($(CT_OS_TYPE),linux)
+ifneq ($(CT_OS_SUB_TYPE),linux_2_4)
+obj-m += sdio_gps_fd.o
+sdio_platformbus-objs := sdioplatformdriver.o
+endif 
+
+endif
+
+
+
+  
\ No newline at end of file

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/linux/sdioplatformdriver/sdioplatformdriver.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/linux/sdioplatformdriver/sdioplatformdriver.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/linux/sdioplatformdriver/sdioplatformdriver.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,300 @@
+/*+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+ at file: sdioplatformdriver.c
+
+ at abstract: Linux implementation module for SDIO pltaform driver
+
+#notes: 
+ 
+ at notice: Copyright (c), 2006 Atheros Communications, Inc.
+
+ at license:  This program is free software; you can redistribute it and/or modify
+           it under the terms of the GNU General Public License version 2 as
+           published by the Free Software Foundation.
+
+
+
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ *  Portions of this code were developed with information supplied from the 
+ *  SD Card Association Simplified Specifications. The following conditions and disclaimers may apply:
+ * 
+ *   The following conditions apply to the release of the SD simplified specification (�Simplified
+ *   Specification�) by the SD Card Association. The Simplified Specification is a subset of the complete 
+ *   SD Specification which is owned by the SD Card Association. This Simplified Specification is provided 
+ *   on a non-confidential basis subject to the disclaimers below. Any implementation of the Simplified 
+ *   Specification may require a license from the SD Card Association or other third parties.
+ *   Disclaimers:
+ *   The information contained in the Simplified Specification is presented only as a standard 
+ *   specification for SD Cards and SD Host/Ancillary products and is provided "AS-IS" without any 
+ *   representations or warranties of any kind. No responsibility is assumed by the SD Card Association for 
+ *   any damages, any infringements of patents or other right of the SD Card Association or any third 
+ *   parties, which may result from its use. No license is granted by implication, estoppel or otherwise 
+ *   under any patent or other rights of the SD Card Association or any third party. Nothing herein shall 
+ *   be construed as an obligation by the SD Card Association to disclose or distribute any technical 
+ *   information, know-how or other confidential information to any third party.
+ * 
+ * 
+ *  The initial developers of the original code are Seung Yi and Paul Lever
+ * 
+ *  sdio at atheros.com
+ * 
+ * 
+
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*/
+
+#define DESCRIPTION "SDIO Platform Driver"
+#define AUTHOR "Atheros Communications, Inc."
+
+//??for .h 
+
+struct sdioplatform_peripheral {
+    struct list_head    node;       
+    struct sdioplatform_controller *controller;      
+    struct device       dev;        
+};
+struct sdioplatform_driver {
+    struct device_driver drv;
+    int (*probe)(struct sdioplatform_peripheral *);
+    void (*remove)(struct sdioplatform_peripheral *);
+    int (*suspend)(struct sdioplatform_peripheral *, pm_message_t);
+    int (*resume)(struct sdioplatform_peripheral *);
+};
+
+
+struct sdioplatform_controller {
+    struct device       *dev;
+};
+struct sdioplatform_controller_driver {
+    struct device_driver drv;
+    int (*probe)(struct sdioplatform_controller *);
+    void (*remove)(struct sdioplatform_controller *);
+    int (*suspend)(struct sdioplatform_controller *, pm_message_t);
+    int (*resume)(struct sdioplatform_controller *);
+};
+
+
+
+#define device_to_sdioplatform_peripheral(d)  container_of(d, struct sdioplatform_peripheral, dev)
+#define driver_to_sdioplatform_driver(d)  container_of(d, struct sdioplatform_driver, drv)
+
+#define device_to_sdioplatform_controller(d)  container_of(d, struct sdioplatform_controller, dev)
+#define driver_to_sdioplatform_controller_driver(d)  container_of(d, struct sdioplatform_controller_driver, drv)
+
+#define SDIOPLATFORM_ATTR(name, fmt, args...)                    \
+static ssize_t sdio_##name##_show (struct device *dev, struct device_attribute *attr, char *buf) \
+{                                   \
+    struct sdioplatform_peripheral *peripheral = device_to_sdioplatform_peripheral(dev);  \
+    return sprintf(buf, fmt, args);                 \
+}
+
+SDIOPLATFORM_ATTR(bus_id, "%s\n", bus_id);
+#define SDIOPLATFORM_ATTR_RO(name) __ATTR(name, S_IRUGO, sdioplatform_##name##_show, NULL)
+
+static struct device_attribute sdioplatform_dev_attrs[] = {
+    SDIOPLATFORM_ATTR_RO(bus_id),
+    __ATTR_NULL
+};
+
+static struct bus_type sdioplatform_bus_type = {
+    .name       = "sdioplatform",
+    .dev_attrs  = sdioplatform_dev_attrs,
+    .match      = sdioplatform_bus_match,
+    .hotplug    = NULL,
+    .suspend    = sdioplatform_bus_suspend,
+    .resume     = sdioplatform_bus_resume,
+};
+
+
+/* controller functions */
+static int sdioplatform_controllerdrv_probe(struct device *dev)
+{
+    struct sdioplatform_controller_driver *drv = driver_to_sdioplatform_controller_driver(dev->driver);
+    struct sdioplatform_controller *controller = device_to_sdioplatform_controller(dev);
+
+    return drv->probe(controller);
+}
+
+static int sdioplatform_controllerdrv_remove(struct device *dev)
+{
+    struct sdioplatform_controller_driver *drv = driver_to_sdioplatform_controller_driver(dev->driver);
+    struct sdioplatform_controller *controller = device_to_sdioplatform_controller(dev);
+
+    return drv->remove(controller);
+}
+
+/* 
+ * sdioplatform_register_controller_driver - register a controller driver
+ */
+int sdioplatform_register_controller_driver(struct sdioplatform_controller_driver *drv)
+{
+    drv->drv.bus = &sdioplatform_bus_type;
+    drv->drv.probe = sdioplatform_controllerdrv_probe;
+    drv->drv.remove = sdioplatform_controllerdrv_remove;
+    return driver_register(&drv->drv);
+}
+
+/*
+ *  sdioplatform_unregister_controller_driver - unregister a controller driver
+ */
+void sdioplatform_unregister_controller_driver(struct sdioplatform_driver *drv)
+{
+    driver_unregister(&drv->drv);
+}
+
+/* 
+ * sdioplatform_add_controller - register a controller device
+ */
+int sdioplatform_add_controller(char *name, struct sdioplatform_controller *dev)
+{
+    if (!dev) {
+        return -EINVAL;
+    }
+    strncpy(dev->dev.bus_id, BUS_ID_SIZE, name);
+    return device_register(&dev->dev);
+}
+
+/* 
+ * sdioplatform_remove_controller - unregister a controller device
+ */
+int sdioplatform_remove_controller(char *name, struct sdioplatform_controller *dev)
+{
+    if (!dev) {
+        return -EINVAL;
+    }
+    return device_unregister(&dev->dev);
+}
+
+/* peripheral functions */
+static int sdioplatform_drv_probe(struct device *dev)
+{
+    struct sdioplatform_driver *drv = driver_to_sdioplatform_driver(dev->driver);
+    struct sdioplatform_peripheral *peripheral = device_to_sdioplatform_peripheral(dev);
+
+    return drv->probe(peripheral);
+}
+
+static int sdioplatform_controllerdrv_remove(struct device *dev)
+{
+    struct sdioplatform_controller_driver *drv = driver_to_sdioplatform_controller_driver(dev->driver);
+    struct sdioplatform_controller *controller = device_to_sdioplatform_controller(dev);
+
+    return drv->remove(controller);
+}
+
+/* 
+ * sdioplatform_register_driver - register a driver
+ */
+int sdioplatform_register_driver(struct sdioplatform_driver *drv)
+{
+    drv->drv.bus = &sdioplatform_bus_type;
+    drv->drv.probe = sdioplatform_drv_probe;
+    drv->drv.remove = sdioplatform_drv_remove;
+    return driver_register(&drv->drv);
+}
+
+/*
+ *  sdioplatform_unregister_driver - unregister a driver
+ */
+void sdioplatform_unregister_driver(struct sdioplatform_driver *drv)
+{
+    driver_unregister(&drv->drv);
+}
+
+/* 
+ * sdioplatform_add_peripheral - register a peripheral device
+ */
+int sdioplatform_add_peripheral(char *name, struct sdioplatform_peripheral *dev)
+{
+    if (!dev) {
+        return -EINVAL;
+    }
+    strncpy(dev->dev.bus_id, BUS_ID_SIZE, name);
+    return device_register(&dev->dev);
+}
+
+/* 
+ * sdioplatform_remove_peripheral - unregister a peripheral device
+ */
+int sdioplatform_remove_peripheral(char *name, struct sdioplatform_peripheral *dev)
+{
+    if (!dev) {
+        return -EINVAL;
+    }
+    return device_unregister(&dev->dev);
+}
+
+
+
+
+
+static int sdioplatform_bus_match(struct device *dev, struct device_driver *drv)
+{
+    /* probes handle the matching */
+    return 1;
+}
+
+static int sdioplatform_bus_suspend(struct device *dev, pm_message_t state)
+{
+    struct sdioplatform_driver *drv = driver_to_sdioplatform_driver(dev->driver);
+    struct sdioplatform_peripheral *peripheral = device_to_sdioplatform_peripheral(dev);
+    int ret = 0;
+
+    if (peripheral->driver && drv->suspend) {
+        ret = drv->suspend(peripheral, state);
+    }
+    return ret;
+}
+
+static int sdioplatform_bus_resume(struct device *dev)
+{
+    struct sdioplatform_driver *drv = driver_to_sdioplatform_driver(dev->driver);
+    struct sdioplatform_peripheral *peripheral = device_to_sdioplatform_peripheral(dev);
+    int ret = 0;
+
+    if (peripheral->driver && drv->resume) {
+        ret = drv->resume(card);
+    }
+    return ret;
+}
+
+/*
+ * module init
+*/
+static int __init sdio_platformdriver_init(void) {
+    int ret = bus_register(&sdioplatform_bus_type);
+    return ret;
+}
+
+/*
+ * module cleanup
+*/
+static void __exit sdio_platformdriver_cleanup(void) {
+    REL_PRINT(SDDBG_TRACE, ("SDIO unloaded\n"));
+    _SDIO_BusDriverCleanup();
+}
+
+MODULE_LICENSE("GPL");
+MODULE_DESCRIPTION(DESCRIPTION);
+MODULE_AUTHOR(AUTHOR);
+
+module_init(sdio_platformdriver_init);
+module_exit(sdio_platformdriver_cleanup);
+EXPORT_SYMBOL(sdioplatform_register_controller_driver);
+EXPORT_SYMBOL(sdioplatform_unregister_controller_driver);
+EXPORT_SYMBOL(sdioplatform_add_controller);
+EXPORT_SYMBOL(sdioplatform_remove_controller);
+EXPORT_SYMBOL(sdioplatform_register_driver);
+EXPORT_SYMBOL(sdioplatform_unregister_driver);
+EXPORT_SYMBOL(sdioplatform_add_peripheral);
+EXPORT_SYMBOL(sdioplatform_remove_peripheral);
+
+
+ 

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/localmake.linux.inc
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/localmake.linux.inc	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/localmake.linux.inc	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,108 @@
+#
+#  Local Makefile includes for tool and kernel source paths
+#  Copyright 2004-2006 Atheros Communications, Inc.
+#
+# When creating a new build type, use the following template:
+#  	ifeq ($(CT_BUILD_TYPE),<platform name>) 
+#       CT_ARCH_CPU_TYPE :=  < cpu architecture >
+#       CT_CROSS_COMPILE_TYPE := < cross compiler path >
+#       CT_LINUXPATH := < kernel source path >
+#       < Add HCD flags to compile specific HCDs for this platform >
+#	endif 
+#
+#
+
+DEV_BASE :=/usr/dev
+
+ifeq ($(CT_BUILD_TYPE),LOCAL_i686) 
+# compiling locally on x86 for i686
+CT_ARCH_CPU_TYPE :=  
+CT_CROSS_COMPILE_TYPE :=
+CT_LINUXPATH :=$(DEV_BASE)/linux/kernels/fc3-i686-linux-2.6.9
+CT_HC_DRIVERS :=pci_ellen/ pci_std/
+CT_OUTPUT_FLAGS := 
+endif  
+   
+ifeq ($(CT_BUILD_TYPE),LOCAL_i586) 
+# compiling locally on x86 for i586
+CT_ARCH_CPU_TYPE := 
+CT_CROSS_COMPILE_TYPE :=
+CT_LINUXPATH :=$(DEV_BASE)/linux/kernels/fc3-i586-linux-2.6.9
+CT_HC_DRIVERS :=pci_ellen/ pci_std/
+CT_OUTPUT_FLAGS := 
+endif
+
+ifeq ($(CT_BUILD_TYPE),GUMSTIX_ARM) 
+# cross compiling to gumstix arm
+CT_ARCH_CPU_TYPE :=arm  
+CT_CROSS_COMPILE_TYPE :=$(DEV_BASE)/linux/tools/gcc/arm/3.4.2/bin/arm-unknown-linux-gnu-
+CT_LINUXPATH :=$(DEV_BASE)/linux/kernels/gumstix-linux-2.6.9-rc1
+CT_OUTPUT_FLAGS :=   
+CT_HC_DRIVERS :=pxa255/
+endif
+
+ifeq ($(CT_BUILD_TYPE),OMAP1610_ARM) 
+# cross compiling to OMAP
+CT_ARCH_CPU_TYPE :=arm  
+CT_CROSS_COMPILE_TYPE :=$(DEV_BASE)/linux/tools/gcc/arm/3.3.2/bin/arm-linux-
+CT_LINUXPATH :=$(DEV_BASE)/linux/kernels/omap-1610-linux-2.6.9
+CT_OUTPUT_FLAGS :=  
+CT_HC_DRIVERS :=omap/
+endif
+
+ifeq ($(CT_BUILD_TYPE),MV_OMAP1610_ARM) 
+# cross compiling to OMAP
+CT_ARCH_CPU_TYPE :=arm  
+CT_CROSS_COMPILE_TYPE :=$(DEV_BASE)/linux/tools/gcc/arm/mv_3.3.1_v4t/bin/arm_v4t_le-
+CT_LINUXPATH :=$(DEV_BASE)/linux/kernels/mv-omap-1610-linux-2.4.20
+CT_OUTPUT_FLAGS :=  
+CT_OS_SUB_TYPE :=linux_2_4
+CT_HC_DRIVERS :=omap/
+endif
+ 
+ifeq ($(CT_BUILD_TYPE),MV_OMAP5912_ARM) 
+# cross compiling to OMAP
+CT_ARCH_CPU_TYPE :=arm  
+CT_CROSS_COMPILE_TYPE :=$(DEV_BASE)/linux/tools/gcc/arm/mv_3.3.1_v4t/bin/arm_v4t_le-
+CT_LINUXPATH :=$(DEV_BASE)/linux/kernels/mv-omap-5912-linux-2.4.20
+CT_OUTPUT_FLAGS :=
+CT_OS_SUB_TYPE :=linux_2_4
+CT_HC_DRIVERS :=omap_raw_spi/ omap/
+endif
+
+ifeq ($(CT_BUILD_TYPE),SANDGATEII_ARM) 
+# cross compiling to SandGateII arm
+CT_ARCH_CPU_TYPE :=arm  
+CT_CROSS_COMPILE_TYPE :=$(DEV_BASE)/linux/tools/gcc/arm/3.4.3/bin/arm-linux-
+CT_LINUXPATH :=$(DEV_BASE)/linux/kernels/pxa270-sg2-linux-2.6.9
+CT_OUTPUT_FLAGS := 
+CT_HC_DRIVERS :=pxa270/
+endif
+
+ifeq ($(CT_BUILD_TYPE),MX21_ARM) 
+# cross compiling to MX21
+CT_ARCH_CPU_TYPE :=arm  
+CT_CROSS_COMPILE_TYPE :=$(DEV_BASE)/linux/tools/gcc/arm/3.3.2/bin/arm-linux-
+CT_LINUXPATH :=$(DEV_BASE)/linux/kernels/freescale-mx21-celinux-2.4.20
+CT_OUTPUT_FLAGS :=
+CT_OS_SUB_TYPE :=linux_2_4
+CT_HC_DRIVERS :=mx21/
+endif
+
+ifeq ($(CT_BUILD_TYPE),MV_OMAP2420_ARM) 
+# cross compiling to OMAP
+CT_ARCH_CPU_TYPE :=arm  
+CT_CROSS_COMPILE_TYPE :=$(DEV_BASE)/linux/tools/gcc/arm/mv_3.3.1_v5t/bin/arm_v5t_le-
+CT_LINUXPATH :=$(DEV_BASE)/linux/kernels/mv-omap-2420-linux-2.4.20
+CT_OUTPUT_FLAGS :=
+CT_OS_SUB_TYPE :=linux_2_4
+CT_HC_DRIVERS :=omap2420_raw_spi/ omap_2420/
+endif
+
+ifeq ($(CT_BUILD_TYPE),OMAP2420_ARM)
+CT_ARCH_CPU_TYPE :=arm  
+CT_CROSS_COMPILE_TYPE :=$(DEV_BASE)/linux/tools/gcc/arm/3.4.2/bin/arm-unknown-linux-gnu-
+CT_LINUXPATH :=$(DEV_BASE)/linux/kernels/omap-2420-linux-2.6.10
+CT_OUTPUT_FLAGS :=
+CT_HC_DRIVERS :=omap_2420/
+endif

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/localmake.linux.private.inc
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/localmake.linux.private.inc	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/localmake.linux.private.inc	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,24 @@
+
+ifeq ($(CT_BUILD_TYPE),LOCAL_i686_ATHEROS) 
+# compiling locally on X86
+CT_ARCH_CPU_TYPE :=
+CT_CROSS_COMPILE_TYPE :=
+CT_LINUXPATH :=$(DEV_BASE)/linux/kernels/fc3-i686-linux-2.6.9
+CT_HC_DRIVERS :=pci_ellen/ pci_std/
+EXTRA_CFLAGS += -DCT_MAN_CODE_CHECK=0x271
+endif  
+
+
+ifeq ($(CT_BUILD_TYPE),MV_OMAP5912_ATHEROS) 
+# cross compiling to OMAP
+CT_ARCH_CPU_TYPE :=arm  
+CT_CROSS_COMPILE_TYPE :=$(DEV_BASE)/linux/tools/gcc/arm/mv_3.3.1/bin/arm_v4t_le-
+CT_LINUXPATH :=$(DEV_BASE)/linux/kernels/mv-omap-5912-linux-2.4.20
+CT_OS_SUB_TYPE :=linux_2_4
+CT_HC_DRIVERS :=omap_raw_spi/
+EXTRA_CFLAGS += -DCT_MAN_CODE_CHECK=0x271
+endif
+
+
+ 
+ 

Added: trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/localmake.qnx.inc
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/localmake.qnx.inc	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/sdiostack/src/localmake.qnx.inc	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1 @@
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/support/loadAR6000.sh
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/support/loadAR6000.sh	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/support/loadAR6000.sh	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,376 @@
+#!/bin/sh
+# Loads and unloads the driver modules in the proper sequence
+Help() {
+    echo "Usage: $0 [options]"
+    echo
+    echo "With NO options, perform a default driver loading"
+    echo
+    echo "To bypass WMI: "
+    echo "   $0 1"
+    echo "To run Test commands:"
+    echo "   $0 -t or $ --test"
+    echo "To recover Flash using ROM BSP,ie,force target boot from ROM:"
+    echo "   $0 -r or $0 --rom"
+    echo" To enable console print:"
+    echo "   $0 --enableuartprint"
+    echo" To disable console print:"
+    echo "   $0 --disableuartprint"
+    echo" To specify the log file name:"
+    echo "   $0 -l <log.file> or $0 --log <log.file>"
+    echo "To see this help information:"
+    echo "   $0 --help or $0 -h "
+    echo "To unload all of the drivers:"
+    echo "   $0 unloadall"
+	exit 0
+}
+if [ -z "$WORKAREA" ]
+then
+	echo "Please set your WORKAREA environment variable."
+	exit -1
+fi
+if [ -z "$ATH_PLATFORM" ]
+then
+	echo "Please set your ATH_PLATFORM environment variable."
+	exit -1
+fi
+
+fromrom=0
+slowbus=0
+tmode=0
+dounload=""
+ar6000args=""
+busclocksetting=""
+bmi_enable=""
+logfile="/tmp/dbglog.out"
+NETIF=${NETIF:-eth1}
+START_WLAN="TRUE"
+
+echo "Platform set to $ATH_PLATFORM"
+
+while [ "$#" -ne 0 ]
+do
+	case $1 in
+		-t|--test )
+        tmode=1
+        ar6000args="$ar6000args testmode=1"
+        shift
+        ;;
+        -r|--rom )
+        fromrom=1
+        slowbus=1
+        ar6000args="$ar6000args skipflash=1"
+        shift
+        ;;
+        -l|--log )
+        shift
+        logfile="$1"
+        shift
+        ;;
+        -h|--help )
+        Help
+        ;;
+        bmi)
+	bmi_enable="yes"
+        shift
+        ;;
+        bypasswmi)
+        ar6000args="$ar6000args bypasswmi=1"
+        shift
+        ;;
+        noresetok)
+        ar6000args="$ar6000args resetok=0"
+        shift
+        ;;
+        specialmode)
+        ar6000args="$ar6000args bypasswmi=1, resetok=0"
+	bmi_enable="yes"
+        shift
+        ;;
+        unloadall)
+        dounload="yes"
+        shift
+        ;;
+        enableuartprint)
+        ar6000args="$ar6000args enableuartprint=1"
+        shift
+        ;;
+        disableuartprint)
+        ar6000args="$ar6000args enableuartprint=0"
+        shift
+        ;;
+        logwmimsgs)
+        ar6000args="$ar6000args logWmiRawMsgs=1"
+        shift
+        ;;
+        --nostart|-nostart|nostart)
+        START_WLAN="FALSE"
+        shift
+        ;;
+        * )
+            echo "Unsupported argument"
+            exit -1
+        shift
+    esac
+done
+
+if [ "$dounload" = "yes" ]
+then
+	echo "..unloading all"
+	case $ATH_PLATFORM in
+		LOCAL_i686-SDIO)
+		/sbin/rmmod -w ar6000.ko
+		/sbin/rmmod -w sdio_pcistd_hcd.ko
+		/sbin/rmmod -w sdio_busdriver.ko
+		/sbin/rmmod -w sdio_lib.ko
+		killall recEvent
+		;;
+		LOCAL_i686-CF)
+		/sbin/rmmod -w ar6000.ko
+		/sbin/cardctl eject
+		/sbin/rmmod -w ar6000_cs.ko
+		/sbin/cardctl insert
+		;;
+		SANDGATEII_ARM-SDIO)
+		/sbin/rmmod ar6000.ko
+		/sbin/rmmod sdio_pxa270hcd.ko
+		/sbin/rmmod sdio_busdriver.ko
+		/sbin/rmmod sdio_lib.ko
+		;;
+		SANDGATEII_ARM-CF)
+		/sbin/rmmod ar6000.ko
+		/sbin/cardctl eject
+		/sbin/rmmod ar6000_cs.ko
+		/sbin/cardctl insert
+		;;
+		SGDK020_2-MSIO)
+		/sbin/rmmod -w ar6000
+		/sbin/rmmod -w mshost_drv
+		;;
+		OMAP2420-SPI2)
+		/sbin/rmmod ar6000
+		/sbin/rmmod athspi_omap2420_hcd
+		/sbin/rmmod sdio_busdriver
+		/sbin/rmmod sdio_lib
+		;;
+		OMAP2420-SPI)
+		/sbin/rmmod ar6000
+		/sbin/rmmod sdio_omap_raw_spi_hcd
+		/sbin/rmmod sdio_busdriver
+		/sbin/rmmod sdio_lib
+		;;
+		OMAP5912-SPI)
+		/sbin/rmmod ar6000
+		/sbin/rmmod sdio_omap_raw_spi_hcd
+		/sbin/rmmod sdio_busdriver
+		/sbin/rmmod sdio_lib
+		;;
+		OMAP2420-SDIO)
+		/sbin/rmmod ar6000
+		/sbin/rmmod sdio_omap_hcd
+		/sbin/rmmod sdio_busdriver
+		/sbin/rmmod sdio_lib		
+		;;
+		*)
+		echo "Check your ATH_PLATFORM environment variable"
+	esac
+
+	exit 0
+fi
+
+# For AR6002 FPGA rather than silicon, uncomment these lines:
+# wlanapp=${wlanapp:-$WORKAREA/target/AR6002/fpga/bin/athwlan.bin}
+# busclocksetting="DefaultOperClock=12000000"
+# slowbus=1
+
+export IMAGEPATH=$WORKAREA/host/.output/$ATH_PLATFORM/image
+
+case $ATH_PLATFORM in
+	OMAP5912-SPI)
+	if [ "$fromrom" -eq "1" ];then 
+		/sbin/insmod $IMAGEPATH/ForceROM.o 
+		/sbin/rmmod ForceROM
+	fi
+	/sbin/insmod $IMAGEPATH/sdio_lib.o debuglevel=0
+	/sbin/insmod $IMAGEPATH/sdio_busdriver.o RequestListSize=300 debuglevel=0
+	/sbin/insmod $IMAGEPATH/sdio_omap_raw_spi_hcd.o debuglevel=1 gpiodebug=0 powerupdelay=600
+	;;
+	OMAP2420-SPI)
+	if [ "$fromrom" -eq "1" ];then 
+		/sbin/insmod $IMAGEPATH/ForceROM.o
+		/sbin/rmmod ForceROM
+	fi
+	/sbin/insmod $IMAGEPATH/sdio_lib.o debuglevel=0
+	/sbin/insmod $IMAGEPATH/sdio_busdriver.o RequestListSize=300 debuglevel=0 HcdRCount=5
+	if [ "$fromrom" -eq "1" ];then
+		/sbin/insmod $IMAGEPATH/sdio_omap_raw_spi_hcd.o debuglevel=1 op_clock=12000000 gpiodebug=0
+	else
+		/sbin/insmod $IMAGEPATH/sdio_omap_raw_spi_hcd.o debuglevel=1 op_clock=24000000 gpiodebug=0 powerupdelay=600
+	fi
+	;;
+	LOCAL_i686-SDIO)
+        $IMAGEPATH/recEvent $logfile > /dev/null 2>&1 &
+	/sbin/insmod $IMAGEPATH/sdio_lib.ko
+	/sbin/insmod $IMAGEPATH/sdio_busdriver.ko debuglevel=7 RequestListSize=300 $busclocksetting
+	/sbin/insmod $IMAGEPATH/sdio_pcistd_hcd.ko debuglevel=7
+	;;
+	LOCAL_i686-CF)
+	/sbin/insmod $IMAGEPATH/ar6000_cs.ko
+	/sbin/cardctl eject
+	/sbin/cardctl insert
+	sleep 2
+	;;
+	SANDGATEII_ARM-SDIO)
+	/sbin/insmod $IMAGEPATH/sdio_lib.ko
+	/sbin/insmod $IMAGEPATH/sdio_busdriver.ko $busclocksetting
+	/sbin/insmod $IMAGEPATH/sdio_pxa270hcd.ko
+	;;
+	SANDGATEII_ARM-CF)
+	/sbin/insmod $IMAGEPATH/ar6000_cs.ko
+	/sbin/cardctl eject
+	/sbin/cardctl insert
+	sleep 2
+	;;
+	SGDK020_2-MSIO)
+	/sbin/insmod $IMAGEPATH/mshost_drv.ko hostsel=1
+	;;
+	OMAP2420-SPI2)
+	/sbin/insmod $IMAGEPATH/sdio_lib.o
+	/sbin/insmod $IMAGEPATH/sdio_busdriver.o debuglevel=7 RequestListSize=300
+	/sbin/insmod $IMAGEPATH/athspi_omap2420_hcd.o debuglevel=7 op_clock=12000000
+	;;
+	OMAP2420-SDIO)
+	echo $IMAGEPATH
+	/sbin/insmod $IMAGEPATH/sdio_lib.o
+	/sbin/insmod $IMAGEPATH/sdio_busdriver.o debuglevel=7 RequestListSize=300 $busclocksetting
+	/sbin/insmod $IMAGEPATH/sdio_omap_hcd.o debuglevel=7 builtin_card=1 async_irq=1
+	;;
+	*)
+	echo "Check your ATH_PLATFORM environment variable"
+	exit -1
+esac
+
+case $ATH_PLATFORM in
+	LOCAL_i686-SDIO|LOCAL_i686-CF|SANDGATEII_ARM-SDIO|SANDGATEII_ARM-CF|SGDK020_2-MSIO)
+	/sbin/insmod $IMAGEPATH/ar6000.ko bmienable=1 $ar6000args busspeedlow=$slowbus
+	;;
+	OMAP2420-SPI2|OMAP2420-SDIO|OMAP2420-SPI|OMAP5912-SPI)
+	/sbin/insmod $IMAGEPATH/ar6000.o bmienable=1 $ar6000args busspeedlow=$slowbus
+	;;
+	*)
+	echo "UNKNOWN PLATFORM"
+esac
+
+# At this point, all Host-side software is loaded.
+# So we turn our attention to Target-side setup.
+
+
+# If user requested BMI mode, he will handle everything himself.
+# Otherwise, we load the Target firmware, load EEPROM and exit
+# BMI mode.
+exit_value=0
+if [ "$bmi_enable" != "yes" ]
+then
+
+    # For speed, temporarily disable BMI debugging
+    save_dbgbmi=`cat /sys/module/ar6000/debugbmi`
+    echo 0 > /sys/module/ar6000/debugbmi
+
+    eval export `$IMAGEPATH/bmiloader -i $NETIF --info | grep TARGET_TYPE`
+    # echo TARGET TYPE is $TARGET_TYPE
+
+
+    # TBDXXX: Eventually remove WAR
+    if [ "$TARGET_TYPE" = "AR6002" ]
+    then
+	$WORKAREA/host/support/AR6002.war1.sh > /dev/null
+    fi
+
+    # ....and temporarily disable System Sleep on AR6002
+    if [ "$TARGET_TYPE" = "AR6002" ]
+    then
+        old_sleep=`$IMAGEPATH/bmiloader -i $NETIF --get --address=0x40c4 | tail -1 | sed -e 's/.*: //'`
+        new_sleep=$(($old_sleep | 1))
+        $IMAGEPATH/bmiloader -i $NETIF --set --address=0x40c4 --param=$new_sleep > /dev/null
+    fi
+
+    # If no ROM Patch Distribution is specified but an
+    # RPDF file is present, try to use it by default.
+    if [ "$RPDF_FILE" = "" ]
+    then
+        if [ -r $WORKAREA/target/$TARGET_TYPE/patch.rpdf ]
+        then
+            export RPDF_FILE=$WORKAREA/target/$TARGET_TYPE/patch.rpdf
+        fi
+    fi
+
+    if [ "$RPDF_FILE" != "" ]
+    then
+        echo "Install ROM Patch Distribution File, " $RPDF_FILE
+        $IMAGEPATH/fwpatch --interface=$NETIF --file=$RPDF_FILE
+        if [ $? -ne 0 ]
+        then
+            echo "Failed to load ROM Patch Distribution"
+            exit_value=-1
+        fi
+    fi
+
+    if [ "$EEPROM" != "" ]
+    then
+        echo "Load Board Data from $EEPROM"
+        $IMAGEPATH/eeprom.$TARGET_TYPE --transfer --file=$EEPROM --interface=$NETIF
+        if [ $? -ne 0 ]
+        then
+            echo "Failed to load Board Data from file."
+            exit_value=-1
+        fi
+    else
+        # Transfer Board Data from Target EEPROM to Target RAM
+        # If EEPROM does not appear valid, this has no effect.
+        $IMAGEPATH/eeprom.$TARGET_TYPE --transfer --interface=$NETIF 2> /dev/null
+
+        # On AR6001, a failure to load from EEPROM is not fatal
+        # because Board Data may be in flash.
+        # On a standard driver load of AR6002, lack of Board
+        # Data is fatal.
+        if [ \( $? -ne 0 \) -a \( "$TARGET_TYPE" = "AR6002" \) ]
+        then
+            echo "Failed to load Board Data from EEPROM."
+            exit_value=-1
+        fi
+    fi
+
+    # For AR6002, download athwlan.bin to Target RAM.
+    # For AR6001, athwlan is already in ROM or Flash.
+    if [ "$TARGET_TYPE" = "AR6002" ]
+    then
+        # Download the Target application, usually athwlan.bin,
+	# into Target RAM.
+
+	wlanapp=${wlanapp:-$WORKAREA/target/AR6002/hw/bin/athwlan.bin}
+        $IMAGEPATH/bmiloader -i $NETIF --write --address=0x502000 --file=$wlanapp
+    fi
+
+    if [ "$TARGET_TYPE" = "AR6001" ]
+    then
+        # Request maximum system performance (max clock rates)
+        $IMAGEPATH/bmiloader -i $NETIF --set --address=0xac000020 --param=0x203 > /dev/null
+        $IMAGEPATH/bmiloader -i $NETIF --set --address=0xac000024 --param=0x203 > /dev/null
+    fi
+    
+    # Restore System Sleep on AR6002
+    if [ "$TARGET_TYPE" = "AR6002" ]
+    then
+        $IMAGEPATH/bmiloader -i $NETIF --set --address=0x40c4 --param=$old_sleep > /dev/null
+    fi
+
+    # Restore BMI debug state.
+    echo $save_dbgbmi > /sys/module/ar6000/debugbmi
+
+    if [ \( $exit_value -eq 0 \) -a \( $START_WLAN = TRUE \) ]
+    then
+        # Leave BMI now and start the WLAN driver.
+        $IMAGEPATH/bmiloader -i $NETIF --done
+    fi
+fi
+
+exit $exit_value


Property changes on: trunk/src/target/AR6kSDK.build_sw.18/host/support/loadAR6000.sh
___________________________________________________________________
Name: svn:executable
   + *

Added: trunk/src/target/AR6kSDK.build_sw.18/host/tools/bmiloader/Makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/tools/bmiloader/Makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/tools/bmiloader/Makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,4 @@
+CC := $(ATH_CROSS_COMPILE_TYPE)gcc
+
+all:
+	$(CC) -Wall -I../../include -I../../os/linux/include -I../../../include bmiloader.c -o bmiloader

Added: trunk/src/target/AR6kSDK.build_sw.18/host/tools/bmiloader/bmiloader.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/tools/bmiloader/bmiloader.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/tools/bmiloader/bmiloader.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,543 @@
+/*
+ * Copyright (c) 2004-2006 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ */
+
+#include <sys/types.h>
+#include <sys/file.h>
+#include <sys/ioctl.h>
+#include <sys/socket.h>
+#include <linux/wireless.h>
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <getopt.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <fcntl.h>
+#include <unistd.h>
+#include <err.h>
+#include <errno.h>
+#if defined(DWSIM)
+#include <sched.h>
+#endif
+
+#include <a_config.h>
+#include <a_osapi.h>
+#include <athdefs.h>
+#include <a_types.h>
+#include "athdrv_linux.h"
+#include "bmi_msg.h"
+
+#define ADDRESS_FLAG                    0x01
+#define LENGTH_FLAG                     0x02
+#define PARAM_FLAG                      0x04
+#define FILE_FLAG                       0x08
+#define COUNT_FLAG                      0x10
+
+#define BMI_TEST                        BMI_NO_COMMAND
+
+/* Limit malloc size when reading/writing file */
+#define MAX_BUF                         (8*1024)
+
+const char *progname;
+const char commands[] = 
+"commands:\n\
+--get --address=<register address>\n\
+--set --address=<register address> --param=<register value>\n\
+--read --address=<target address> --length=<bytes> --file=<filename>\n\
+--write --address=<target address> [--file=<filename> | --param=<value>]\n\
+--execute --address=<function start address> --param=<input param>\n\
+--begin --address=<function start address>\n\
+--info\n\
+--test --address=<target address> --length=<cmd size> --count=<iterations>\n\
+--done\n\
+The options can also be given in the abbreviated form --option=x or -o x. The options can be given in any order";
+
+#define A_ROUND_UP(x, y)             ((((x) + ((y) - 1)) / (y)) * (y))
+
+INLINE void *
+MALLOC(int nbytes)
+{
+    void *p= malloc(nbytes);
+
+    if (!p)
+    {
+        err(1, "Cannot allocate memory\n");
+    }
+
+    return p;
+}
+
+static void
+usage(void)
+{
+    fprintf(stderr, "usage:\n%s [-i device] commands\n", progname);
+    fprintf(stderr, "%s\n", commands);
+    exit(-1);
+}
+
+int
+main (int argc, char **argv) {
+    int c, s, fd;
+    unsigned int address, length;
+    unsigned int count, param;
+    char filename[128], ifname[IFNAMSIZ];
+    unsigned int cmd;
+    struct ifreq ifr;
+    char *buffer;
+    struct stat filestat;
+    int flag;
+    int target_version = -1;
+    int target_type = -1;
+
+    progname = argv[0];
+    if (argc == 1) usage();
+
+    flag = 0;
+    memset(filename, '\0', 128);
+    memset(ifname, '\0', IFNAMSIZ);
+    strcpy(ifname, "eth1");
+    s = socket(AF_INET, SOCK_DGRAM, 0);
+    if (s < 0) err(1, "socket");
+
+    while (1) {
+        int option_index = 0;
+        static struct option long_options[] = {
+            {"get", 0, NULL, 'g'},
+            {"set", 0, NULL, 's'},
+            {"read", 0, NULL, 'r'},
+            {"test", 0, NULL, 't'},
+            {"file", 1, NULL, 'f'},
+            {"done", 0, NULL, 'd'},
+            {"write", 0, NULL, 'w'},
+            {"begin", 0, NULL, 'b'},
+            {"count", 1, NULL, 'c'},
+            {"param", 1, NULL, 'p'},
+            {"length", 1, NULL, 'l'},
+            {"execute", 0, NULL, 'e'},
+            {"address", 1, NULL, 'a'},
+            {"interface", 1, NULL, 'i'},
+            {"info", 0, NULL, 'I'},
+            {0, 0, 0, 0}
+        };
+
+        c = getopt_long (argc, argv, "rwtebdgsIf:l:a:p:i:c:",
+                         long_options, &option_index);
+        if (c == -1)
+            break;
+
+        switch (c) {
+        case 'r':
+            cmd = BMI_READ_MEMORY;
+            break;
+
+        case 'w':
+            cmd = BMI_WRITE_MEMORY;
+            break;
+
+        case 'e':
+            cmd = BMI_EXECUTE;
+            break;
+
+        case 'b':
+            cmd = BMI_SET_APP_START;
+            break;
+
+        case 'd':
+            cmd = BMI_DONE;
+            break;
+
+        case 'g':
+            cmd = BMI_READ_SOC_REGISTER;
+            break;
+
+        case 's':
+            cmd = BMI_WRITE_SOC_REGISTER;
+            break;
+
+        case 't':
+            cmd = BMI_TEST;
+            break;
+
+        case 'f':
+            memset(filename, '\0', 128);
+            strcpy(filename, optarg);
+            flag |= FILE_FLAG;
+            break;
+
+        case 'l':
+            length = atoi(optarg);
+            flag |= LENGTH_FLAG;
+            break;
+
+        case 'a':
+            address = strtoul(optarg, NULL, 0);
+            flag |= ADDRESS_FLAG;
+            break;
+
+        case 'p':
+            param = strtoul(optarg, NULL, 0);
+            flag |= PARAM_FLAG;
+            break;
+
+        case 'c':
+            count = atoi(optarg);
+            flag |= COUNT_FLAG;
+            break;
+
+        case 'i':
+            memset(ifname, '\0', 8);
+            strcpy(ifname, optarg);
+            break;
+
+        case 'I':
+            cmd = BMI_GET_TARGET_INFO;
+            break;
+
+        default:
+            usage();
+        }
+    }
+
+    strncpy(ifr.ifr_name, ifname, sizeof(ifr.ifr_name));
+    /* Verify that the Target is alive.  If not, wait for it. */
+    {
+        int rv;
+        static int waiting_msg_printed = 0;
+
+        buffer = (char *)MALLOC(sizeof(struct bmi_target_info));
+        ((int *)buffer)[0] = AR6000_XIOCTL_TARGET_INFO;
+        ifr.ifr_data = buffer;
+        while ((rv=ioctl(s, AR6000_IOCTL_EXTENDED, &ifr)) < 0)
+        {
+            if (errno == ENODEV) {
+                /* 
+                 * Give the Target device a chance to start.
+                 * Then loop back and see if it's alive.
+                 */
+                if (!waiting_msg_printed) {
+                    printf("bmiloader is waiting for Target....\n");
+                    waiting_msg_printed = 1;
+                }
+                usleep(100000); /* Wait for 100ms */
+            } else {
+                printf("Unexpected error on AR6000_XIOCTL_TARGET_INFO: %d\n", rv);
+                exit(1);
+            }
+        }
+        target_version = ((int *)buffer)[0];
+        target_type = ((int *)buffer)[1];
+        free(buffer);
+    }
+    switch(cmd)
+    {
+    case BMI_DONE:
+        printf("BMI Done\n");
+        buffer = (char *)MALLOC(4);
+        ((int *)buffer)[0] = AR6000_XIOCTL_BMI_DONE;
+        ifr.ifr_data = buffer;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        free(buffer);
+        break;
+
+    case BMI_TEST:
+        if ((flag & (COUNT_FLAG | LENGTH_FLAG | ADDRESS_FLAG)) == 
+            (COUNT_FLAG | LENGTH_FLAG | ADDRESS_FLAG))
+        {
+            printf("BMI Test (address: 0x%x, length: %d, count: %d)\n", 
+                    address, length, count);
+            buffer = (char *)MALLOC(16);
+            ((int *)buffer)[0] = AR6000_XIOCTL_BMI_TEST;
+            ((int *)buffer)[1] = address;
+            ((int *)buffer)[2] = length;
+            ((int *)buffer)[3] = count;
+            ifr.ifr_data = buffer;
+            if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+            {
+                err(1, ifr.ifr_name);
+            }
+            free(buffer);
+        }
+        else usage();
+        break;
+
+    case BMI_READ_MEMORY:
+        if ((flag & (ADDRESS_FLAG | LENGTH_FLAG | FILE_FLAG)) == 
+            (ADDRESS_FLAG | LENGTH_FLAG | FILE_FLAG))
+        {
+            printf(
+                 "BMI Read Memory (address: 0x%x, length: %d, filename: %s)\n",
+                  address, length, filename);
+
+            if ((fd = open(filename, O_CREAT|O_WRONLY|O_TRUNC, 00644)) < 0)
+            {
+                perror("Could not create a file");
+                exit(1);
+            }
+            buffer = (char *)MALLOC(MAX_BUF + 12);
+
+            {
+                unsigned int remaining = length;
+
+                while (remaining)
+                {
+                    length = (remaining > MAX_BUF) ? MAX_BUF : remaining;
+                    ((int *)buffer)[0] = AR6000_XIOCTL_BMI_READ_MEMORY;
+                    ((int *)buffer)[1] = address;
+
+                    /*
+                     * We round up the requested length because some
+                     * SDIO Host controllers can't handle other lengths;
+                     * but we still only write the requested number of
+                     * bytes to the file.
+                     */
+                    ((int *)buffer)[2] = A_ROUND_UP(length, 4);
+                    ifr.ifr_data = buffer;
+                    if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+                    {
+                        err(1, ifr.ifr_name);
+                    }
+                    else
+                    {
+                        write(fd, buffer, length);
+                    }
+
+                    remaining -= length;
+                    address += length;
+                }
+            }
+
+            close(fd);
+            free(buffer);
+        }
+        else usage();
+        break;
+
+    case BMI_WRITE_MEMORY:
+        if (!(flag & ADDRESS_FLAG))
+        {
+            usage(); /* no address specified */
+        }
+        if (!(flag & (FILE_FLAG | PARAM_FLAG)))
+        {
+            usage(); /* no data specified */
+        }
+        if ((flag & FILE_FLAG) && (flag & PARAM_FLAG))
+        {
+            usage(); /* too much data specified */
+        }
+
+        if (flag & FILE_FLAG)
+        {
+            printf(
+                 "BMI Write Memory (address: 0x%x, filename: %s)\n",
+                  address, filename);
+            if ((fd = open(filename, O_RDONLY)) < 0)
+            {
+                perror("Could not open file");
+                exit(1);
+            }
+            memset(&filestat, '\0', sizeof(struct stat));
+            buffer = (char *)MALLOC(MAX_BUF + 12);
+            fstat(fd, &filestat);
+            length = filestat.st_size;
+        }
+        else
+        { /* PARAM_FLAG */
+            printf(
+                 "BMI Write Memory (address: 0x%x, value: 0x%x)\n",
+                  address, param);
+            length = sizeof(param);
+            buffer = (char *)MALLOC(length + 12);
+            *(unsigned int *)(&buffer[12]) = param;
+            fd = -1;
+        }
+
+        /*
+         * Write length bytes of data to memory.
+         * Data is either present in buffer OR
+         * needs to be read from fd in MAX_BUF chunks.
+         *
+         * Within the kernel, the implementation of
+         * AR6000_XIOCTL_BMI_WRITE_MEMORY further
+         * limits the size of each transfer over the
+         * interconnect according to BMI protocol
+         * limitations.
+         */ 
+        {
+            unsigned int remaining = length;
+
+            while (remaining)
+            {
+                length = (remaining > MAX_BUF) ? MAX_BUF : remaining;
+#if defined(DWSIM)
+                if ((address & 0xf0000000) == 0) {
+                    /*
+                     * TBDXXX: 
+                     * If it looks like we're writing to an XTENSA address,
+                     * write at most 20 bytes at a time.  If it looks like
+                     * we're talking MIPS, do the whole thing.  Currently,
+                     * we can't write too much at once through BMI to XT
+                     * because the Host driver internally divides the request
+                     * into multiple BMI transactions and it waits for each
+                     * transaction to complete before starting the next one.
+                     * But the first one never completes because the ISS
+                     * never gets an opportunity to execute properly because
+                     * the kernel locks it out when it tries to access
+                     * simulated target registers through diag window.
+                     */
+                    if (remaining > 20) {
+                        length = 20;
+                    } else {
+                        length = remaining;
+                    }
+                }
+#endif
+                if (fd > 0)
+                {
+                    if (read(fd, &buffer[12], length) != length)
+                    {
+                        perror("read from file failed");
+                        exit(1);
+                    }
+                }
+
+                ((int *)buffer)[0] = AR6000_XIOCTL_BMI_WRITE_MEMORY;
+                ((int *)buffer)[1] = address;
+
+                /*
+                 * We round up the requested length because some
+                 * SDIO Host controllers can't handle other lengths.
+                 * This generally isn't a problem for users, but it's
+                 * something to be aware of.
+                 */
+                ((int *)buffer)[2] = A_ROUND_UP(length, 4);
+                ifr.ifr_data = buffer;
+                while (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+                {
+#if defined(DWSIM)
+                    printf("Retry BMI write...address=0x%x length=0x%d\n", address, length);
+#else
+                    err(1, ifr.ifr_name);
+#endif
+                }
+
+                remaining -= length;
+                address += length;
+            }
+        }
+
+        free(buffer);
+        if (fd > 0)
+        {
+            close(fd);
+        }
+
+        break;
+
+    case BMI_READ_SOC_REGISTER:
+        if ((flag & (ADDRESS_FLAG)) == (ADDRESS_FLAG))
+        {
+            printf("BMI Read Register (address: 0x%x)\n", address);
+            buffer = (char *)MALLOC(8);
+            ((int *)buffer)[0] = AR6000_XIOCTL_BMI_READ_SOC_REGISTER;
+            ((int *)buffer)[1] = address;
+            ifr.ifr_data = buffer;
+            if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+            {
+                err(1, ifr.ifr_name);
+            }
+            param = ((int *)buffer)[0];
+            printf("Return Value from target: 0x%x\n", param);
+            free(buffer);
+        }
+        else usage();
+        break;
+
+    case BMI_WRITE_SOC_REGISTER:
+        if ((flag & (ADDRESS_FLAG | PARAM_FLAG)) == (ADDRESS_FLAG | PARAM_FLAG))
+        {
+            printf("BMI Write Register (address: 0x%x, param: 0x%x)\n", address, param);
+            buffer = (char *)MALLOC(12);
+            ((int *)buffer)[0] = AR6000_XIOCTL_BMI_WRITE_SOC_REGISTER;
+            ((int *)buffer)[1] = address;
+            ((int *)buffer)[2] = param;
+            ifr.ifr_data = buffer;
+            if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+            {
+                err(1, ifr.ifr_name);
+            }
+            free(buffer);
+        }
+        else usage();
+        break;
+
+    case BMI_EXECUTE:
+        if ((flag & (ADDRESS_FLAG | PARAM_FLAG)) == (ADDRESS_FLAG | PARAM_FLAG))
+        {
+            printf("BMI Execute (address: 0x%x, param: 0x%x)\n", address, param);
+            buffer = (char *)MALLOC(12);
+            ((int *)buffer)[0] = AR6000_XIOCTL_BMI_EXECUTE;
+            ((int *)buffer)[1] = address;
+            ((int *)buffer)[2] = param;
+            ifr.ifr_data = buffer;
+            if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+            {
+                err(1, ifr.ifr_name);
+            }
+            param = ((int *)buffer)[0];
+            printf("Return Value from target: 0x%x\n", param);
+            free(buffer);
+        }
+        else usage();
+        break;
+
+    case BMI_SET_APP_START:
+        if ((flag & ADDRESS_FLAG) == ADDRESS_FLAG)
+        {
+            printf("BMI Set App Start (address: 0x%x)\n", address);
+            buffer = (char *)MALLOC(8);
+            ((int *)buffer)[0] = AR6000_XIOCTL_BMI_SET_APP_START;
+            ((int *)buffer)[1] = address;
+            ifr.ifr_data = buffer;
+            if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+            {
+                err(1, ifr.ifr_name);
+            }
+            free(buffer);
+        }
+        else usage();
+        break;
+    case BMI_GET_TARGET_INFO:
+        printf("BMI Target Info:\n");
+        printf("TARGET_TYPE=%s\n",
+                (target_type == TARGET_TYPE_AR6001) ? "AR6001" :
+                ((target_type == TARGET_TYPE_AR6002) ? "AR6002" : "unknown"));
+        printf("TARGET_VERSION=0x%x\n", target_version);
+        break;
+
+    default:
+        usage();
+    }
+
+    exit (0);
+}

Added: trunk/src/target/AR6kSDK.build_sw.18/host/tools/wmiconfig/Makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/tools/wmiconfig/Makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/tools/wmiconfig/Makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,4 @@
+CC :=$(ATH_CROSS_COMPILE_TYPE)gcc
+
+all:
+	$(CC) -Wall -DUSER_KEYS -g -I../../include -I../../../include -I../../wlan/include -I../../os/linux/include wmiconfig.c -o wmiconfig

Added: trunk/src/target/AR6kSDK.build_sw.18/host/tools/wmiconfig/wmiconfig.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/tools/wmiconfig/wmiconfig.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/tools/wmiconfig/wmiconfig.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,2766 @@
+/*
+ * Copyright (c) 2004-2006 Atheros Communications Inc.
+ * All rights reserved.
+
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ * 
+ *
+ */
+static const char athId[] __attribute__ ((unused)) = "$Id: //depot/sw/releases/olca2.0-GPL/host/tools/wmiconfig/wmiconfig.c#2 $";
+
+#include <sys/types.h>
+#include <sys/file.h>
+#include <sys/ioctl.h>
+#include <sys/socket.h>
+#include <linux/types.h>
+#include <linux/if.h>
+#include <linux/wireless.h>
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <getopt.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <fcntl.h>
+#include <unistd.h>
+#include <err.h>
+
+#include <a_config.h>
+#include <a_osapi.h>
+#include <athdefs.h>
+#include <a_types.h>
+#include "athdrv_linux.h"
+#include "ieee80211.h"
+#include "ieee80211_ioctl.h"
+#include <wmi.h>
+#include "wmiconfig.h"
+
+#define TO_LOWER(c) ((((c) >= 'A') && ((c) <= 'Z')) ? ((c)+ 0x20) : (c))
+
+static int _from_hex(char c);
+static A_INT8 getPhyMode(char *pArg);
+
+static A_UINT16 wmic_ieee2freq(int chan);
+static A_STATUS wmic_ether_aton(const char *orig, A_UINT8 *eth);
+void            printTargetStats(TARGET_STATS *pStats);
+A_STATUS 
+wmic_validate_roam_ctrl(WMI_SET_ROAM_CTRL_CMD *pRoamCtrl, A_UINT8 numArgs,
+                        char **argv);
+A_STATUS
+wmic_validate_appie(struct ieee80211req_getset_appiebuf *appIEInfo, char **argv);
+
+A_STATUS
+wmic_validate_mgmtfilter(A_UINT32 *pMgmtFilter, char **argv);
+void convert_hexstring_bytearray(char *hexStr, A_UINT8 *byteArray, 
+                                    A_UINT8 numBytes);
+
+
+const char *progname;
+const char commands[] =
+"commands:\n\
+--version\n\
+--power <mode> where <mode> is rec or maxperf\n\
+--getpower is used to get the power mode(rec or maxperf)\n\
+--pmparams --it=<msec> --np=<number of PS POLL> --dp=<DTIM policy: ignore/normal/stick>\n\
+--psparams --psPollTimer=<psPollTimeout> --triggerTimer=<triggerTimeout> --apsdTimPolicy=<ignore/adhere> --simulatedAPSDTimPolicy=<ignore/adhere>\n\
+--ibsspmcaps --ps=<enable/disable> --aw=<ATIM Windows in millisecond> --to=<TIMEOUT in millisecond> --ttl=<Time to live in number of beacon periods>\n\
+--scan --fgstart=<sec> --fgend=<sec> --bg=<sec> --minact=<msec> maxact=<msec> --pas=<msec> --sr=<short scan ratio> --maxact2pas=<msec> --scanctrlflags <connScan> <scanConnected> <activeScan> <roamScan> <reportBSSINFO> <EnableAutoScan> where: \n\\n\
+  <connScan>           is 0 to not scan when Connect and Reconnect command, \n\
+                          1 to scan when Connect and Reconnect command, \n\
+  <scanConnected>      is 0 to skip the ssid it is already connected to, \n\
+                          1 to scan the ssid it is already connected to, \n\
+  <activeScan>         is 0 to disable active scan, \n\
+                          1 to enable active scan, \n\
+  <roamScan>           is 0 to disable roam scan when beacom miss and low rssi.(It's only valible when connScan is 0.\n\
+                          1 to enable roam scan.\n\
+  <reportBSSINFO>      is 0 to disable specified BSSINFO reporting rule.\n\
+                          1 to enable specified BSSINFO reporting rule.\n\
+ <EnableAutoScan>      is 0 to disable autonomous scan. No scan after a disconnect event\n\
+                          1 Enable autonomous scan.\n\
+--listen=<#of TUs, can  range from 15 to 5000>\n\
+--listenbeacons=<#of beacons, can  range from 1 to 50>\n\
+--setbmisstime <#of TUs, can range from 1000 to 5000>\n\
+--setbmissbeacons <#of beacons, can range from 5 to 50>\n\
+--filter=<filter> --ieMask 0x<mask> where <filter> is none, all, profile, not_profile, bss, not_bss, or ssid and <mask> is a combination of the following\n\
+{\n\
+    BSS_ELEMID_CHANSWITCH = 0x01 \n\
+    BSS_ELEMID_ATHEROS = 0x02\n\
+}\n\
+--wmode <mode> <list> sc <scan> where \n\
+        <mode> is a, g, b or ag\n\
+        <list> is a list of channels (frequencies in mhz or ieee channel numbers)\n\
+        <scan> is 0 to disable scan after setting channel list.\n\
+                  1 to enable scan after setting channel list.\n\
+--ssid=<ssid> [--num=<index>] where <ssid> is the wireless network string and <index> is 0 or 1 (set to 0 if not specified). Set ssid to 'off' to clear the entry\n\
+--badAP=<macaddr> [--num=<index>] where macaddr is macaddr of AP to be avoided in xx:xx:xx:xx:xx:xx format, and num is index from 0-3.\n\
+--rmAP [--num=<index>] is used to clear a badAP entry.  num is index from 0-3\n\
+--createqos <user priority> <direction> <traffic class> <trafficType> <voice PS capability> \n\
+    <min service interval> <max service interval> <inactivity interval> <suspension interval> \n\
+    <service start time> <tsid> <nominal MSDU> <max MSDU> <min data rate> <mean data rate> \n\
+    <peak data rate> <max burst size> <delay bound> <min phy rate> <sba> <medium time>where:\n\
+        <user priority>         802.1D user priority range : 0-7        \n\
+        <direction>             is 0 for Tx(uplink) traffic,            \n\
+                                   1 for Rx(downlink) traffic,          \n\
+                                   2 for bi-directional traffic;        \n\
+        <traffic class>         is 0 for BE,                            \n\
+                                   1 for BK,                            \n\
+                                   2 for VI,                            \n\
+                                   3 for VO;                            \n\
+        <trafficType>           1-periodic, 0-aperiodic                 \n\
+        <voice PS capability>   specifies whether the voice power save mechanism \n\
+                                (APSD if AP supports it or legacy/simulated APSD \n\
+                                    [using PS-Poll] ) should be used             \n\
+                                = 0 to disable voice power save for this traffic class,\n\
+                                = 1 to enable APSD voice power save for this traffic class,\n\
+                                = 2 to enable voice power save for ALL traffic classes,\n\
+        <min service interval>  in milliseconds                     \n\
+        <max service interval>  in milliseconds                     \n\
+        <inactivity interval>   in milliseconds;=0 means infinite inactivity interval\n\
+        <suspension interval>   in milliseconds \n\
+        <service start time>    service start time \n\
+        <tsid>                  TSID range: 0-15                    \n\
+        <nominal MSDU>          nominal MAC SDU size                \n\
+        <max MSDU>              maximum MAC SDU size                \n\
+        <min data rate>         min data rate in bps                \n\
+        <mean data rate>        mean data rate in bps               \n\
+        <peak data rate>        peak data rate in bps               \n\
+        <max burst size>        max burst size in bps               \n\
+        <delay bound>           delay bound                         \n\
+        <min phy rate>          min phy rate in bps                 \n\
+        <sba>                   surplus bandwidth allowance         \n\
+        <medium time>           medium time in TU of 32-us periods per sec    \n\
+--deleteqos <trafficClass> <tsid> where:\n\
+  <traffic class>         is 0 for BE,                            \n\
+                             1 for BK,                            \n\
+                             2 for VI,                            \n\
+                             3 for VO;                            \n\
+  <tsid> is the TspecID, use --qosqueue option to get the active tsids\n\
+--qosqueue <traffic class>, where:\n\
+  <traffic class>         is 0 for BE,                            \n\
+                             1 for BK,                            \n\
+                             2 for VI,                            \n\
+                             3 for VO;                            \n\
+--getTargetStats --clearStats\n\
+   tx_unicast_rate, rx_unicast_rate values will be 0Kbps when no tx/rx \n\
+   unicast data frame is received.\n\
+--setErrorReportingBitmask\n\
+--acparams  --txop <limit> --cwmin <0-15> --cwmax <0-15> --aifsn<0-15>\n\
+--disc=<timeout> to set the disconnect timeout in seconds\n\
+--mode <mode> set the optional mode, where mode is special or off \n\
+--sendframe <frmType> <dstaddr> <bssid> <optIEDatalen> <optIEData> where:\n\
+  <frmType>   is 1 for probe request frame,\n\
+                 2 for probe response frame,\n\
+                 3 for CPPP start,\n\
+                 4 for CPPP stop, \n\
+  <dstaddr>   is the destination mac address, in xx:xx:xx:xx:xx:xx format, \n\
+  <bssid>     is the bssid, in xx:xx:xx:xx:xx:xx format, \n\
+  <optIEDatalen> optional IE data length,\n\
+  <optIEData> is the pointer to optional IE data arrary \n\
+--adhocbssid <macaddr> where macaddr is the BSSID for IBSS to be created in xx:xx:xx:xx:xx:xx format\n\
+--ibssbconintvl   <beacon_interval in milliseonds> \n\
+--setretrylimits  <frameType> <trafficClass> <maxRetries> <enableNotify>\n\
+  <frameType>      is 0 for management frame, \n\
+                      1 for control frame,\n\
+                      2,for data frame;\n\
+  <trafficClass>   is 1 for BK, 2 for VI, 3 for VO, only applies to data frame type\n\
+  <maxRetries>     is # in [2 - 13];      \n\
+  <enableNotify>   is \"on\" to enable the notification of max retries exceed \n\
+                      \"off\" to disable the notification of max retries excedd \n\
+--rssiThreshold <weight> <pollTimer> <above_threshold_tag_1> <above_threshold_val_1> ... \n\
+                <above_threshold_tag_6> <above_threshold_val_6> \n\
+                <below_threshold_tag_1> <below_threshold_val_1> ... \n\
+                <below_threshold_tag_6> <below_threshold_val_6> \n\
+  <weight>        share with snrThreshold\n\
+  <threshold_x>   will be converted to negatvie value automatically, \n\
+                   i.e. input 90, actually -90 will be set into HW\n\
+  <pollTimer>     is timer to poll rssi value(factor of LI), set to 0 will disable all thresholds\n\
+                 \n\
+--snrThreshold <weight> <upper_threshold_1> ... <upper_threshold_4> \n\
+               <lower_threshold_1> ... <lower_threshold_4> <pollTimer>\n\
+  <weight>        share with rssiThreshold\n\
+  <threshold_x>  is positive value, in ascending order\n\
+  <pollTimer>     is timer to poll snr value(factor of LI), set to 0 will disable all thresholds\n\
+                 \n\
+--cleanRssiSnr \n\
+--lqThreshold <enable> <upper_threshold_1>  ... <upper_threshold_4>\n\
+              <lower_threshold_1> ... <lower_threshold_4>\n\
+   <enable>       is 0 for disable,\n\
+                     1 for enable lqThreshold\n\
+   <threshold_x>  is in ascending order            \n\
+--setlongpreamble <enable>\n\
+    <enable>      is 0 for diable,\n\
+                     1 for enable.\n\
+--setRTS  <pkt length threshold>\n\
+--startscan   --homeDwellTime=<msec> --forceScanInt<ms> --forceScanFlags <scan type> <forcefgscan> <isLegacyCisco>where:\n\
+  <homeDwellTime>     Maximum duration in the home channel(milliseconds),\n\
+  <forceScanInt>      Time interval between scans (milliseconds),\n\
+    <scan type>     is 0 for long scan,\n\
+                     1 for short scan,\n\
+  <forcefgscan>   is 0 for disable force fgscan,\n\
+                     1 for enable force fgscan,\n\
+  <isLegacyCisco> is 0 for disable legacy Cisco AP compatible,\n\
+                     1 for enable legacy Cisco AP compatible,\n\
+--setfixrates <rate index> where: \n\
+  <rate index> is {0 1M},{1 2M},{2 5.5M},{3 11M},{4 6M},{5 9M},{6 12M},{7 18M},{8 24M},{9 36M},{10 48M},{11 54M},\n\
+  if want to config more rare index, can use blank to space out, such as: --setfixrates 0 1 2 \n\
+--getfixrates : Get the fix rate index from target\n\
+--setauthmode <mode> where:\n\
+  <mode>        is 0 to do authentication when reconnect, \n\
+                   1 to not do authentication when reconnect.(not clean key). \n\
+--setreassocmode <mode> where:\n\
+  <mode>        is 0 do send disassoc when reassociation, \n\
+                   1 do not send disassoc when reassociation. \n\
+--setVoicePktSize  is maximum size of voice packet \n\
+--setMaxSPLength   is the maximum service period in packets, as applicable in APSD \n\
+                   0 - deliver all packets \n\
+                   1 - deliver up to 2 packets \n\
+                   2 - deliver up to 4 packets \n\
+                   3 - deliver up to 6 packets \n\
+--setAssocIe <IE String>\n\
+--roam <roamctrl> <info>\n\
+       where <roamctrl> is   1  force a roam to specified bssid\n\
+                             2  set the roam mode \n\
+                             3  set the host bias of the specified BSSID\n\
+                             4 set the lowrssi scan parameters \n\
+      where <info> is BSSID<aa:bb:cc:dd:ee:ff> for roamctrl of 1\n\
+                      DEFAULT ,BSSBIAS or LOCK for roamctrl of 2\n\
+                      BSSID<aa:bb:cc:dd:ee:ff> <bias> for  roamctrl of 3\n\
+                             where <bias> is  a value between -256 and 255\n\
+                      <scan period> <scan threshold> <roam threshold> \n\
+                      <roam rssi floor> for roamctrl of 4\n\
+--getroamtable\n\
+--getroamdata\n\
+--wlan <enable/disable>\n\
+--setBTstatus <streamType> <status>\n\
+      where <streamType> is    1 - Bluetooth SCO stream\n\
+                               2 - Bluetooth A2DP stream\n\
+      \n\
+      where <status> is        1 - stream started\n\
+                               2 - stream stopped\n\
+                               3 - stream resumed\n\
+                               4 - stream suspended\n\
+--setBTparams <paramType> <params>\n\
+      where <paramType> is     1 - Bluetooth SCO stream parameters\n\
+                               2 - Bluetooth A2DP stream parameters\n\
+                               3 - Bluetooth Miscellaneous and ad-hoc parameters\n\
+                               4 - Bluetooth co-existence register parameters\n\
+      \n\
+      where <params> for Bluetooth SCO are:\n\
+                            <no> - number of Bluetooth SCO packets between consecutive PS-Polls\n\
+                 <pspollTimeout> - timeout for receiving downlink packet per PS-poll\n\
+                       <stompbt> - if 0, co-existence is disabled when PS-poll is sent\n\
+                                      1, Bluetooth SCO packet is stomped upon if PS-poll response\n\
+                                         isn't received in time\n\
+      \n\
+      where <params> for Bluetooth A2DP are:\n\
+                        <period> - time in millisec at which STA-awake NULL data packet is sent\n\
+                     <dutycycle> - value in percent of <period> for which STA is kept awake\n\
+                       <stompbt> - if 0, co-existence is disabled when STA-awake NULL data packet is sent\n\
+                                      1, Bluetooth SCO packet is stomped upon for duration of <dutycycle>\n\
+      \n\
+      where Miscellaneous parameters <params> are:\n\
+                <paramType> <params>\n\
+            \n\
+            where    <paramType> - 1 : WLAN Tx packet protection policy\n\
+                                   2 : co-existence policy during WLAN disconnect, roam/scan or stream off\n\
+                                       situation\n\
+            \n\
+            where <params> for WLAN Tx packet protection policy are:\n\
+                <period> <dutycycle> <stompbt> <protect policy>\n\
+                        <period> - time in millisec at which co-existence is disabled/enabled\n\
+                     <dutycycle> - value in percent of <period> for which co-existence is disabled\n\
+                       <stompbt> - if 0, when co-existence is disabled, Bluetooth packet isn't stomped\n\
+                                      1, Bluetooth SCO packet is stomped upon for duration of <dutycycle>\n\
+                <protect policy> - if 1 - WLAN Tx protection on per stream SCO/A2DP basis\n\
+                                      2 - WLAN protect any Tx packet\n\
+            \n\
+            where <params> for co-existence policy are:\n\
+                     <ctrlflags> - flags to disable/keep/override co-existence when WLAN is\n\
+                                   disconnected, roaming/scanning or when Bluetooth is stream off\n\
+      \n\
+      where <params> for Bluetooth co-existence register parameters are:\n\
+                          <mode> - co-existence mode\n\
+                   <sco weights> - Bluetooth and WLAN weights for SCO\n\
+                  <a2dp weights> - Bluetooth and WLAN weights for A2DP\n\
+               <general weights> - Bluetooth and WLAN weights for profiles other than SCO and A2DP\n\
+                         <mode2> - co-existence mode2\n\
+                    <set values> - if 1, above values are set in registers right away\n\
+                                      0, registers are kept unmodified until BT status command is sent\n\
+--detecterror --frequency=<sec> --threshold=<count> where:\n\
+  <frequency>   is the periodicity of the challenge messages in seconds, \n\
+  <threshold>   is the number of challenge misses after which the error detection module in the driver will report an error, \n\
+--getheartbeat --cookie=<cookie>\n\
+  <cookie>  is used to identify the response corresponding to a challenge sent\n\
+--usersetkeys --initrsc=<on/off>\n\
+  initrsc=on(off> initialises(doesnot initialise) the RSC in the firmware\n\
+--getRD\n\
+--txopbursting <burstEnable>\n\
+        where <burstEnable> is  0 disallow TxOp bursting\n\
+                                1 allow TxOp bursting\n\
+--diagread\n\
+--diagwrite\n\
+--setkeepalive <keepalive interval>\n\
+  <keepalive interval> is the time within which if there is no transmission/reception activity, the station sends a null packet to AP.\n\
+--getkeepalive\n\
+--setappie <frame> <IE>\n\
+         where frame is one of beacon, probe, respon, assoc\n\
+               IE is a hex string starting with dd\n\
+               if IE is 0 then no IE is sent in the management frame\n\
+--setmgmtfilter <op> <frametype>\n\
+                op is one of set, clear\n\
+                frametype is one of beacon proberesp\n\
+--setdbglogconfig --mmask=<mask> --rep=<0/1> --tsr=<tsr codes> --size=<num>\n\
+         where <mask> is a 16 bit wide mask to selectively enable logging for different modules. Example: 0xFFFD enables logging for all modules except WMI. The mask is derived from the module ids defined in the dbglog.h header file.\n\
+               <rep> is whether the target should generate log events to the host whenever the log buffer is full.\n\
+               <tsr> resolution of the debug timestamp (less than 16)\n\
+                     0: 31.25 us\n\
+                     1: 62.50 us\n\
+                     2: 125.0 us\n\
+                     3: 250.0 us\n\
+                     4: 500.0 us\n\
+                     5: 1.0 ms and so on.\n\
+               <size> size of the report in number of debug logs.\n\
+--getdbglogs\n\
+--sethostmode <mode>\n\
+  where <mode> is awake\n\
+                  asleep\n\
+--setwowmode <mode> \n\
+  where <mode> is enable \n\
+                  disable\n\
+--getwowlist <listid> \n\
+--addwowpattern <list-id> <pattern-size> <pattern-offset> <pattern> <pattern-mask \n\
+--delwowpattern <list-id> <pattern-id>\n\
+--dumpchipmem \n\
+--setconnectctrl <ctrl flags bitmask> \n\
+  where <flags> could take the following values:\n\
+      0x0001(CONNECT_ASSOC_POLICY_USER): Assoc frames are sent using the policy specified by the flag below.\n\
+      0x0002(CONNECT_SEND_REASSOC): Send Reassoc frame while connecting otherwise send assoc frames.\n\
+      0x0004(CONNECT_IGNORE_WPAx_GROUP_CIPHER): Ignore WPAx group cipher for WPA/WPA2.\n\
+      0x0008(CONNECT_PROFILE_MATCH_DONE): Ignore any profile check.\n\
+      0x0010(CONNECT_IGNORE_AAC_BEACON): Ignore the admission control beacon.\n\
+--dumpcreditstates \n\
+      Triggers the HTC layer to dump credit state information to the debugger \n\
+--setakmp --multipmkid=<on/off>\n\
+  multipmkid=on(off> enables(doesnot enable) Multi PMKID Caching in firmware\n\
+--setpmkidlist --numpmkid=<n> --pmkid=<pmkid_1> ... --pmkid=<pmkid_n>\n\
+   where n is the number of pmkids (max 8)\n\
+   and pmkid_i is the ith pmkid (16 bytes in hex format)\n\
+--setbsspmkid --bssid=<aabbccddeeff> --bsspmkid=<pmkid>\n\
+   bssid is 6 bytes in hex format\n\
+   bsspmkid is 16 bytes in hex format\n\
+--getpmkidlist \n\
+The options can be given in any order";
+
+A_UINT32 mercuryAdd[5][2] = {
+            {0x20000, 0x200fc},
+            {0x28000, 0x28800},
+            {0x20800, 0x20a40},
+            {0x21000, 0x212f0},
+            {0x500000, 0x500000+184*1024},
+        };
+
+
+
+static void
+usage(void)
+{
+    fprintf(stderr, "usage:\n%s [-i device] commands\n", progname);
+    fprintf(stderr, "%s\n", commands);
+    exit(-1);
+}
+
+int
+main (int argc, char **argv)
+{
+    int c, s;
+    char ifname[IFNAMSIZ];
+    unsigned int cmd = 0;
+    progname = argv[0];
+    struct ifreq ifr;
+    struct iwreq iwr;
+    char buf[1756];
+    int clearstat = 0;
+    
+    WMI_LISTEN_INT_CMD *listenCmd         = (WMI_LISTEN_INT_CMD*)buf;
+    WMI_BMISS_TIME_CMD *bmissCmd         = (WMI_BMISS_TIME_CMD*)buf;
+    
+    WMI_POWER_MODE_CMD *pwrCmd         = (WMI_POWER_MODE_CMD *)buf;
+    WMI_IBSS_PM_CAPS_CMD *adhocPmCmd   = (WMI_IBSS_PM_CAPS_CMD *)buf;
+    WMI_SCAN_PARAMS_CMD *sParamCmd     = (WMI_SCAN_PARAMS_CMD *)buf;
+    WMI_BSS_FILTER_CMD *filterCmd      = (WMI_BSS_FILTER_CMD *)buf;
+    WMI_CHANNEL_PARAMS_CMD *chParamCmd = (WMI_CHANNEL_PARAMS_CMD *)buf;
+    WMI_PROBED_SSID_CMD *ssidCmd       = (WMI_PROBED_SSID_CMD *)buf;
+    WMI_POWER_PARAMS_CMD *pmParamCmd   = (WMI_POWER_PARAMS_CMD *)buf;
+    WMI_ADD_BAD_AP_CMD *badApCmd       = (WMI_ADD_BAD_AP_CMD *)buf;
+    WMI_CREATE_PSTREAM_CMD *crePStreamCmd = (WMI_CREATE_PSTREAM_CMD *)buf;
+    WMI_DELETE_PSTREAM_CMD *delPStreamCmd = (WMI_DELETE_PSTREAM_CMD *)buf;
+    USER_RSSI_PARAMS *rssiThresholdParam = (USER_RSSI_PARAMS *)(buf + 4);
+    WMI_SNR_THRESHOLD_PARAMS_CMD *snrThresholdParam = (WMI_SNR_THRESHOLD_PARAMS_CMD *)buf;
+    WMI_LQ_THRESHOLD_PARAMS_CMD *lqThresholdParam = (WMI_LQ_THRESHOLD_PARAMS_CMD *)(buf + 4);
+    WMI_TARGET_ERROR_REPORT_BITMASK *pBitMask =
+                                    (WMI_TARGET_ERROR_REPORT_BITMASK *)buf;
+    TARGET_STATS_CMD tgtStatsCmd;
+    WMI_SET_ASSOC_INFO_CMD *ieInfo = (WMI_SET_ASSOC_INFO_CMD *)buf;
+    WMI_SET_ACCESS_PARAMS_CMD *acParamsCmd = (WMI_SET_ACCESS_PARAMS_CMD *)buf;
+    WMI_DISC_TIMEOUT_CMD *discCmd = (WMI_DISC_TIMEOUT_CMD *)buf;
+    WMI_SET_ADHOC_BSSID_CMD *adhocBssidCmd = (WMI_SET_ADHOC_BSSID_CMD *)(buf + 4);
+    WMI_SET_OPT_MODE_CMD *optModeCmd       = (WMI_SET_OPT_MODE_CMD *)(buf + 4);
+    WMI_OPT_TX_FRAME_CMD *optTxFrmCmd      = (WMI_OPT_TX_FRAME_CMD *)(buf + 4);
+    WMI_BEACON_INT_CMD *adhocbconIntvl     = (WMI_BEACON_INT_CMD *)(buf + 4);
+    WMI_SET_RETRY_LIMITS_CMD *setRetryCmd  = (WMI_SET_RETRY_LIMITS_CMD *)(buf + 4);
+    WMI_START_SCAN_CMD *startScanCmd  = (WMI_START_SCAN_CMD *)(buf + 4);
+    WMI_FIX_RATES_CMD *setFixRatesCmd  = (WMI_FIX_RATES_CMD *)(buf + 4);
+    WMI_FIX_RATES_CMD *getFixRatesCmd  = (WMI_FIX_RATES_CMD *)(buf + 4);
+    WMI_SET_AUTH_MODE_CMD *setAuthMode = (WMI_SET_AUTH_MODE_CMD *)(buf + 4);
+    WMI_SET_REASSOC_MODE_CMD *setReassocMode = (WMI_SET_REASSOC_MODE_CMD *)(buf + 4);
+    WMI_SET_LPREAMBLE_CMD *setLpreambleCmd = (WMI_SET_LPREAMBLE_CMD *)(buf + 4);
+    WMI_SET_RTS_CMD *setRtsCmd = (WMI_SET_RTS_CMD *)(buf + 4);
+    struct ar6000_queuereq *getQosQueueCmd = (struct ar6000_queuereq *)buf;
+    WMI_SET_VOICE_PKT_SIZE_CMD *pSizeThresh = (WMI_SET_VOICE_PKT_SIZE_CMD *)(buf + sizeof(int));
+    WMI_SET_MAX_SP_LEN_CMD *pMaxSP          = (WMI_SET_MAX_SP_LEN_CMD *)(buf + sizeof(int));
+    WMI_SET_ROAM_CTRL_CMD *pRoamCtrl        = (WMI_SET_ROAM_CTRL_CMD *)(buf +
+                                                sizeof(int));
+    WMI_POWERSAVE_TIMERS_POLICY_CMD *pPowerSave    = (WMI_POWERSAVE_TIMERS_POLICY_CMD *)(buf + sizeof(int));
+    WMI_POWER_MODE_CMD *getPowerMode = (WMI_POWER_MODE_CMD *)buf;
+    WMI_SET_BT_STATUS_CMD *pBtStatCmd = (WMI_SET_BT_STATUS_CMD *) (buf + sizeof(int));
+    WMI_SET_BT_PARAMS_CMD *pBtParmCmd = (WMI_SET_BT_PARAMS_CMD *) (buf + sizeof(int));
+    WMI_SET_WMM_CMD *setWmmCmd = (WMI_SET_WMM_CMD *)(buf + 4);
+    WMI_SET_HB_CHALLENGE_RESP_PARAMS_CMD *hbparam = (WMI_SET_HB_CHALLENGE_RESP_PARAMS_CMD *)(buf + 4);
+    A_UINT32 *cookie = (A_UINT32 *)(buf + 4);
+    A_UINT32 *diagaddr = (A_UINT32 *)(buf + 4);
+    A_UINT32 *diagdata = (A_UINT32 *)(buf + 8);
+    WMI_SET_WMM_TXOP_CMD *pTxOp = (WMI_SET_WMM_TXOP_CMD *)(buf + sizeof(int));
+    A_UINT32 *rd = (A_UINT32 *)(buf + 4);
+    WMI_SET_KEEPALIVE_CMD *setKeepAlive = (WMI_SET_KEEPALIVE_CMD *)(buf + 4);
+    WMI_GET_KEEPALIVE_CMD *getKeepAlive = (WMI_GET_KEEPALIVE_CMD *)(buf + 4);
+    //WMI_SET_APPIE_CMD     *appIEInfo     = (WMI_SET_APPIE_CMD *)(buf + 4);
+    struct ieee80211req_getset_appiebuf     *appIEInfo     = (struct ieee80211req_getset_appiebuf *)(buf + 4);
+    A_UINT32              *pMgmtFilter  = (A_UINT32 *)(buf + 4);
+    DBGLOG_MODULE_CONFIG *dbglogCfg = (DBGLOG_MODULE_CONFIG *)(buf + 4);
+
+    WMI_SET_HOST_SLEEP_MODE_CMD *hostSleepModeCmd = (WMI_SET_HOST_SLEEP_MODE_CMD*)(buf + sizeof(int));
+    WMI_SET_WOW_MODE_CMD *wowModeCmd = (WMI_SET_WOW_MODE_CMD*)(buf + sizeof(int));
+    WMI_ADD_WOW_PATTERN_CMD *addWowCmd = (WMI_ADD_WOW_PATTERN_CMD*)(buf + sizeof(int));
+    WMI_DEL_WOW_PATTERN_CMD *delWowCmd = (WMI_DEL_WOW_PATTERN_CMD*)(buf + sizeof(int));
+    WMI_GET_WOW_LIST_CMD *getWowListCmd = (WMI_GET_WOW_LIST_CMD*)(buf + sizeof(int));
+    A_UINT32 *connectCtrlFlags = (A_UINT32 *)(buf + 4);
+    AR6000_USER_SETKEYS_INFO *user_setkeys_info = 
+                                (AR6000_USER_SETKEYS_INFO *)(buf + sizeof(int));
+    WMI_SET_AKMP_PARAMS_CMD *akmpCtrlCmd = 
+                                (WMI_SET_AKMP_PARAMS_CMD *)(buf + sizeof(int));
+    pmkidUserInfo_t         pmkidUserInfo;
+    A_UINT8                 bssid[ATH_MAC_LEN];
+    struct ieee80211req_addpmkid *pi_cmd = (struct ieee80211req_addpmkid *)buf;
+
+    int i, index = 0, channel, chindex;
+    A_INT8 phyMode;
+    A_INT16 threshold[26];  /* user can set rssi tags */
+    A_UINT16 *clist;
+    A_UCHAR *ssid;
+    char *ethIf;
+
+    if (argc == 1) {
+        usage();
+    }
+
+    memset(buf, 0, sizeof(buf));
+    memset(ifname, '\0', IFNAMSIZ);
+    if ((ethIf = getenv("NETIF")) == NULL) {
+        ethIf = "eth1";
+    }
+    strcpy(ifname, ethIf);
+    s = socket(AF_INET, SOCK_DGRAM, 0);
+    if (s < 0) {
+        err(1, "socket");
+    }
+
+    while (1) {
+        int option_index = 0;
+        static struct option long_options[] = {
+            {"it", 1, NULL, 'a'},
+            {"bg", 1, NULL, 'b'},
+            {"np", 1, NULL, 'c'},
+            {"dp", 1, NULL, 'd'},
+            {"fgend", 1, NULL, 'e'},
+            {"filter", 1, NULL, 'f'},
+            {"fgstart", 1, NULL, 'g'},
+            {"maxact", 1, NULL, 'h'},
+            {"interface", 1, NULL, 'i'},
+            {"createqos", 1, NULL, 'j'},
+            {"deleteqos", 1, NULL, 'k'},
+            {"listen", 1, NULL, 'l'},
+            {"listenbeacons", 1, NULL, 'N'},
+            {"pmparams", 0, NULL, 'm'},
+            {"num", 1, NULL, 'n'},
+            {"qosqueue", 1, NULL, 'o'},
+            {"power", 1, NULL, 'p'},
+            {"pas", 1, NULL, 'q'},
+            {"scan", 0, NULL, 's'},
+            {"sr", 1, NULL, 'r'},
+            {"ssid", 1, NULL, 't'},
+            {"rssiThreshold", 1, NULL, 'u'},
+            {"snrThreshold", 1, NULL, WMI_SET_SNR_THRESHOLDS},
+            {"cleanRssiSnr", 0, NULL, WMI_CLR_RSSISNR},
+            {"lqThreshold", 1, NULL, WMI_SET_LQ_THRESHOLDS},
+            {"version", 0, NULL, 'v'},
+            {"wmode", 1, NULL, 'w'},
+            {"badAP", 1, NULL, 'x'},
+            {"clrAP", 0, NULL, 'y'},
+            {"minact", 1, NULL, 'z'},
+            {"getTargetStats", 0, NULL, WMI_GET_TARGET_STATS},
+            {"setErrorReportingBitmask", 1, NULL, 
+                        WMI_SET_TARGET_ERROR_REPORTING_BITMASK},
+            {"acparams", 0, NULL, WMI_SET_AC_PARAMS},
+            {"txop", 1, NULL, 'A'},
+            {"cwmin", 1, NULL, 'B'},
+            {"cwmax", 1, NULL, 'C'},
+            {"aifsn", 1, NULL, 'D'},
+            {"ps", 1, NULL, 'E'},
+            {"aw", 1, NULL, 'F'},
+            {"adhocbssid", 1, NULL, 'G'},
+            {"mode", 1, NULL, 'H'},
+            {"sendframe", 1, NULL, 'I'},
+            {"wlan", 1, NULL, 'J'},
+            {"to", 1, NULL, 'K'},
+            {"ttl", 1, NULL, 'L'},
+            {"scanctrlflags", 1, NULL, 'O'},
+            {"homeDwellTime", 1, NULL, 'P'},
+            {"forceScanInt", 1, NULL, 'Q'},
+            {"forceScanFlags",1, NULL, 'R'},
+            {"threshold", 1, NULL, 'S'},
+            {"frequency", 1, NULL, 'T'},
+            {"cookie", 1, NULL, 'U'},
+            {"mmask", 1, NULL, 'V'},
+            {"rep", 1, NULL, 'W'},
+            {"tsr", 1, NULL, 'X'},
+            {"size", 1, NULL, 'Y'},
+            {"bssid",1, NULL, WMI_BSSID},
+            {"initrsc", 1, NULL, USER_SETKEYS_INITRSC},
+            {"multipmkid", 1, NULL, WMI_AKMP_MULTI_PMKID},
+            {"numpmkid", 1, NULL, WMI_NUM_PMKID},
+            {"pmkid", 1, NULL, WMI_PMKID_ENTRY},
+            {"clearStats", 0, NULL, 'Z'},
+            {"maxact2pas", 1, NULL, WMI_SCAN_DFSCH_ACT_TIME},
+            {"ibsspmcaps", 0, NULL, WMI_SET_IBSS_PM_CAPS},
+            {"setAssocIe", 1, NULL, WMI_SET_ASSOC_IE},
+            {"setbmisstime", 1, NULL, WMI_SET_BMISS_TIME},
+            {"setbmissbeacons", 1, NULL, 'M'},
+            {"disc", 1, NULL, WMI_SET_DISC_TIMEOUT},
+            {"ibssbconintvl", 1, NULL, WMI_SET_BEACON_INT},
+            {"setVoicePktSize", 1, NULL, WMI_SET_VOICE_PKT_SIZE},
+            {"setMaxSPLength", 1, NULL, WMI_SET_MAX_SP},
+            {"getroamtable", 0, NULL, WMI_GET_ROAM_TBL},
+            {"roam", 1, NULL, WMI_SET_ROAM_CTRL},
+            {"psparams", 0, NULL, WMI_SET_POWERSAVE_TIMERS},
+            {"psPollTimer", 1, NULL, WMI_SET_POWERSAVE_TIMERS_PSPOLLTIMEOUT},
+            {"triggerTimer", 1, NULL, WMI_SET_POWERSAVE_TIMERS_TRIGGERTIMEOUT},
+            {"getpower", 0, NULL, WMI_GET_POWER_MODE},
+            {"getroamdata", 0, NULL, WMI_GET_ROAM_DATA},
+            {"setBTstatus", 1, NULL, WMI_SET_BT_STATUS},
+            {"setBTparams", 1, NULL, WMI_SET_BT_PARAMS},
+            {"setretrylimits", 1, NULL, WMI_SET_RETRYLIMITS},
+            {"startscan", 0, NULL, WMI_START_SCAN},
+            {"setfixrates", 1, NULL, WMI_SET_FIX_RATES},
+            {"getfixrates", 0, NULL, WMI_GET_FIX_RATES},
+            {"setauthmode", 1, NULL, WMI_SET_AUTH_MODE},
+            {"setreassocmode", 1, NULL, WMI_SET_REASSOC_MODE},
+            {"setlongpreamble", 1, NULL, WMI_SET_LPREAMBLE},
+            {"setRTS", 1, NULL, WMI_SET_RTS}, 
+            {"setwmm", 1, NULL, WMI_SET_WMM},
+            {"apsdTimPolicy", 1, NULL, WMI_APSD_TIM_POLICY},
+            {"simulatedAPSDTimPolicy", 1, NULL, WMI_SIMULATED_APSD_TIM_POLICY},
+            {"detecterror", 0, NULL, WMI_SET_ERROR_DETECTION},
+            {"getheartbeat", 0, NULL, WMI_GET_HB_CHALLENGE_RESP},
+#ifdef USER_KEYS
+            {"usersetkeys", 0, NULL, USER_SETKEYS},
+#endif
+            {"getRD", 0, NULL, WMI_GET_RD},
+            {"txopbursting", 1, NULL, WMI_SET_TXOP},
+            {"diagaddr", 1, NULL, DIAG_ADDR},
+            {"diagdata", 1, NULL, DIAG_DATA},
+            {"diagread", 0, NULL, DIAG_READ},
+            {"diagwrite", 0, NULL, DIAG_WRITE},
+            {"setkeepalive", 1, NULL, WMI_SET_KEEPALIVE},
+            {"getkeepalive", 0, NULL, WMI_GET_KEEPALIVE},
+            {"setappie", 1, NULL, WMI_SET_APPIE},
+            {"setmgmtfilter", 1, NULL, WMI_SET_MGMT_FRM_RX_FILTER},
+            {"setdbglogconfig", 0, NULL, WMI_DBGLOG_CFG_MODULE},
+            {"getdbglogs", 0, NULL, WMI_DBGLOG_GET_DEBUG_LOGS},
+            {"sethostmode", 1, NULL, WMI_SET_HOST_SLEEP_MODE},
+            {"setwowmode", 1, NULL, WMI_SET_WOW_MODE},
+            {"getwowlist", 1, NULL, WMI_GET_WOW_LIST},
+            {"addwowpattern", 1, NULL, WMI_ADD_WOW_PATTERN},
+            {"delwowpattern", 1, NULL, WMI_DEL_WOW_PATTERN},
+            {"dumpchipmem", 0, NULL, DIAG_DUMP_CHIP_MEM},
+            {"setconnectctrl", 1, NULL, WMI_SET_CONNECT_CTRL_FLAGS},
+            {"dumpcreditstates",0, NULL, DUMP_HTC_CREDITS},
+            {"setakmp", 0, NULL, WMI_SET_AKMP_INFO},
+            {"setpmkidlist", 0, NULL, WMI_SET_PMKID_LIST},
+            {"getpmkidlist", 0, NULL, WMI_GET_PMKID_LIST},
+            {"ieMask", 1, NULL, WMI_SET_IEMASK},
+            {"setbsspmkid", 0, NULL, WMI_SET_BSS_PMKID_INFO},
+            {"bsspmkid", 1, NULL, WMI_BSS_PMKID_ENTRY},
+            {0, 0, 0, 0}
+        };
+
+        c = getopt_long(argc, argv, "rsvda:b:c:e:h:f:g:h:i:l:p:q:r:w:n:t:u:x:y:z:A:B:C:D:E:F:G:H:I:J:K:L:M:N:O:P:Q:R:S:T:U:V:W:X:Y:Z:", long_options, &option_index);
+        if (c == -1)
+        break;
+        switch (c) {
+        case 'a':
+            pmParamCmd->idle_period = atoi(optarg);
+            break;
+        case 'b':
+            if (!strcasecmp(optarg,"default")) {
+                sParamCmd->bg_period = 0;
+            } else {
+                sParamCmd->bg_period = atoi(optarg);
+                /* Setting the background scan to 0 or 65535 has the same effect
+                 - it disables background scanning */
+                if(!sParamCmd->bg_period)
+                    sParamCmd->bg_period = 65535;
+            }
+            break;
+        case 'c':
+            pmParamCmd->pspoll_number = atoi(optarg);
+            break;
+        case 'd':
+            if (!strcmp(optarg, "ignore")) {
+                pmParamCmd->dtim_policy = IGNORE_DTIM;
+            } else if (!strcmp(optarg, "normal")) {
+                pmParamCmd->dtim_policy = NORMAL_DTIM;
+            } else if (!strcmp(optarg, "stick")) {
+                pmParamCmd->dtim_policy = STICK_DTIM;
+            } else {
+                cmd = 0;
+            }
+            break;
+        case 'f':
+            cmd = WMI_SET_BSS_FILTER;
+            if (!strcmp(optarg, "none")) {
+                filterCmd->bssFilter = NONE_BSS_FILTER;
+            } else if (!strcmp(optarg, "all")) {
+                filterCmd->bssFilter = ALL_BSS_FILTER;
+            } else if (!strcmp(optarg, "profile")) {
+                filterCmd->bssFilter = PROFILE_FILTER;
+            } else if (!strcmp(optarg, "not_profile")) {
+                filterCmd->bssFilter = ALL_BUT_PROFILE_FILTER;
+            } else if (!strcmp(optarg, "bss")) {
+                filterCmd->bssFilter = CURRENT_BSS_FILTER;
+            } else if (!strcmp(optarg, "not_bss")) {
+                filterCmd->bssFilter = ALL_BUT_BSS_FILTER;
+            } else if (!strcmp(optarg, "ssid")) {
+                filterCmd->bssFilter = PROBED_SSID_FILTER;
+            } else {
+                cmd = 0;
+            }
+            break;
+        case 'e':
+            sParamCmd->fg_end_period = atoi(optarg);
+            break;
+        case 'g':
+            sParamCmd->fg_start_period = atoi(optarg);
+            break;
+        case 'h':
+            sParamCmd->maxact_chdwell_time = atoi(optarg);
+            break;
+        case 'q':
+            sParamCmd->pas_chdwell_time = atoi(optarg);
+            break;
+        case 'j':
+            cmd = WMI_CREATE_QOS;
+            crePStreamCmd->userPriority = atoi(optarg);
+            break;
+        case 'k':
+            cmd = WMI_DELETE_QOS;
+            delPStreamCmd->trafficClass = atoi(optarg);
+            break;
+        case 'l':
+            cmd = WMI_SET_LISTEN_INTERVAL;
+            listenCmd->listenInterval = atoi(optarg);
+            if ((listenCmd->listenInterval < MIN_LISTEN_INTERVAL) ||
+                (listenCmd->listenInterval > MAX_LISTEN_INTERVAL))
+            {
+                printf("Listen Interval out of range\n");
+                cmd = 0;
+            }
+            break;
+        case 'N':
+            cmd =  WMI_SET_LISTEN_INTERVAL;
+            listenCmd->numBeacons = atoi(optarg);
+            if ((listenCmd->numBeacons < MIN_LISTEN_BEACONS) ||
+                (listenCmd->numBeacons > MAX_LISTEN_BEACONS))
+            {
+                printf("Listen beacons out of range\n");
+                cmd = 0;
+            }
+            break;
+        case 'm':
+            cmd = WMI_SET_PM_PARAMS;
+            break;
+        case 'n':
+            index = atoi(optarg);
+            break;
+        case 'v':
+            cmd = WMI_GET_VERSION;
+            break;
+        case 'o':
+            cmd = WMI_GET_QOS_QUEUE;
+            getQosQueueCmd->trafficClass = atoi(optarg);
+            break;
+        case 'p':
+            cmd = WMI_SET_POWER_MODE;
+            if (!strcmp(optarg, "rec")) {
+                pwrCmd->powerMode = REC_POWER;
+            } else if (!strcmp(optarg, "maxperf")) {
+                pwrCmd->powerMode = MAX_PERF_POWER;
+            } else {
+                cmd = 0;
+            }
+            break;
+        case 'r':
+            sParamCmd->shortScanRatio = atoi(optarg);
+            break;
+        case 's':
+            cmd = WMI_SET_SCAN_PARAMS;
+            sParamCmd->scanCtrlFlags = DEFAULT_SCAN_CTRL_FLAGS;
+            sParamCmd->shortScanRatio = WMI_SHORTSCANRATIO_DEFAULT;
+            sParamCmd->max_dfsch_act_time = 0 ;
+            break;
+        case WMI_SCAN_DFSCH_ACT_TIME:
+            sParamCmd->max_dfsch_act_time = atoi(optarg);
+            break;
+        case 't':
+            cmd = WMI_SET_SSID;
+            ssid = (A_UCHAR *)optarg;
+            break;
+        case 'u':
+            cmd = WMI_SET_RSSI_THRESHOLDS;
+            memset(threshold, 0, sizeof(threshold));
+            for (index = optind; index <= argc; index++) 
+                threshold[index-optind] = atoi(argv[index-1]);
+
+            rssiThresholdParam->weight                  = threshold[0];
+            rssiThresholdParam->pollTime                = threshold[1];
+            rssiThresholdParam->tholds[0].tag           = threshold[2];
+            rssiThresholdParam->tholds[0].rssi          = 0 - threshold[3];
+            rssiThresholdParam->tholds[1].tag           = threshold[4];
+            rssiThresholdParam->tholds[1].rssi          = 0 - threshold[5];
+            rssiThresholdParam->tholds[2].tag           = threshold[6];
+            rssiThresholdParam->tholds[2].rssi          = 0 - threshold[7];
+            rssiThresholdParam->tholds[3].tag           = threshold[8];
+            rssiThresholdParam->tholds[3].rssi          = 0 - threshold[9];
+            rssiThresholdParam->tholds[4].tag           = threshold[10];
+            rssiThresholdParam->tholds[4].rssi          = 0 - threshold[11];
+            rssiThresholdParam->tholds[5].tag           = threshold[12];
+            rssiThresholdParam->tholds[5].rssi          = 0 - threshold[13];
+            rssiThresholdParam->tholds[6].tag           = threshold[14];
+            rssiThresholdParam->tholds[6].rssi          = 0 - threshold[15];
+            rssiThresholdParam->tholds[7].tag           = threshold[16];
+            rssiThresholdParam->tholds[7].rssi          = 0 - threshold[17];
+            rssiThresholdParam->tholds[8].tag           = threshold[18];
+            rssiThresholdParam->tholds[8].rssi          = 0 - threshold[19];
+            rssiThresholdParam->tholds[9].tag           = threshold[20];
+            rssiThresholdParam->tholds[9].rssi          = 0 - threshold[21];
+            rssiThresholdParam->tholds[10].tag           = threshold[22];
+            rssiThresholdParam->tholds[10].rssi          = 0 - threshold[23];
+            rssiThresholdParam->tholds[11].tag           = threshold[24];
+            rssiThresholdParam->tholds[11].rssi          = 0 - threshold[25];
+
+            break;
+        case WMI_SET_SNR_THRESHOLDS:
+            cmd = WMI_SET_SNR_THRESHOLDS;
+            memset(threshold, 0, sizeof(threshold));
+            for (index = optind; index <= argc; index++)
+                threshold[index-optind] = atoi(argv[index-1]);
+
+            snrThresholdParam->weight                  = threshold[0];
+            snrThresholdParam->thresholdAbove1_Val     = threshold[1];
+            snrThresholdParam->thresholdAbove2_Val     = threshold[2];
+            snrThresholdParam->thresholdAbove3_Val     = threshold[3];
+            snrThresholdParam->thresholdAbove4_Val     = threshold[4];
+            snrThresholdParam->thresholdBelow1_Val    = threshold[5];
+            snrThresholdParam->thresholdBelow2_Val    = threshold[6];
+            snrThresholdParam->thresholdBelow3_Val    = threshold[7];
+            snrThresholdParam->thresholdBelow4_Val    = threshold[8];
+            snrThresholdParam->pollTime                = threshold[9];
+            break;
+        case WMI_CLR_RSSISNR:
+            cmd = WMI_CLR_RSSISNR;
+            break;
+        case WMI_SET_LQ_THRESHOLDS:
+            cmd = WMI_SET_LQ_THRESHOLDS;
+            memset(threshold, 0, sizeof(threshold));
+            for (index = optind; index <= argc; index++)
+                threshold[index-optind] = atoi(argv[index-1]);
+
+            lqThresholdParam->enable                       = threshold[0];
+            lqThresholdParam->thresholdAbove1_Val          = threshold[1];
+            lqThresholdParam->thresholdAbove2_Val          = threshold[2];
+            lqThresholdParam->thresholdAbove3_Val          = threshold[3];
+            lqThresholdParam->thresholdAbove4_Val          = threshold[4];
+            lqThresholdParam->thresholdBelow1_Val          = threshold[5];
+            lqThresholdParam->thresholdBelow2_Val          = threshold[6];
+            lqThresholdParam->thresholdBelow3_Val          = threshold[7];
+            lqThresholdParam->thresholdBelow4_Val          = threshold[8];
+
+            break;
+        case 'i':
+            memset(ifname, '\0', 8);
+            strcpy(ifname, optarg);
+            break;
+        case 'w':
+            cmd = WMI_SET_CHANNEL;
+            chParamCmd->numChannels = 0;
+            chParamCmd->scanParam = 0;
+            break;
+        case 'x':
+            if (wmic_ether_aton(optarg, badApCmd->bssid) != A_OK) {
+                printf("bad mac address\n");
+                break;
+            }
+            cmd = WMI_SET_BADAP;
+            break;
+        case 'y':
+            /*
+             * we are clearing a bad AP. We pass a null mac address
+             */
+            cmd = WMI_DELETE_BADAP;
+            break;
+        case 'z':
+            sParamCmd->minact_chdwell_time = atoi(optarg);
+            break;
+        case WMI_GET_TARGET_STATS:
+            cmd = WMI_GET_TARGET_STATS;
+            break;
+        case WMI_SET_TARGET_ERROR_REPORTING_BITMASK:
+            cmd = WMI_SET_TARGET_ERROR_REPORTING_BITMASK;
+            pBitMask->bitmask = atoi(optarg);
+            printf("Setting the bitmask = 0x%x\n", pBitMask->bitmask);
+            break;
+        case WMI_SET_ASSOC_IE:
+            cmd = WMI_SET_ASSOC_INFO_CMDID;
+            ieInfo->ieType = 1;
+            if (strlen(optarg) > WMI_MAX_ASSOC_INFO_LEN) {
+                printf("IE Size cannot be greater than %d\n",
+                        WMI_MAX_ASSOC_INFO_LEN);
+                cmd = 0;
+            } else {
+                ieInfo->bufferSize = strlen(optarg) + 2;
+                memcpy(&ieInfo->assocInfo[2], optarg,
+                       ieInfo->bufferSize - 2);
+               ieInfo->assocInfo[0] = 0xdd;  
+               ieInfo->assocInfo[1] = ieInfo->bufferSize - 2; 
+            }
+            break;
+        case WMI_SET_BMISS_TIME:
+            cmd = WMI_SET_BMISS_TIME;
+            bmissCmd->bmissTime = atoi(optarg);
+            if ((bmissCmd->bmissTime < MIN_BMISS_TIME) ||
+                (bmissCmd->bmissTime > MAX_BMISS_TIME))
+            {
+                printf("BMISS time out of range\n");
+                cmd = 0;
+            }
+            break;
+        case 'M':
+            cmd = WMI_SET_BMISS_TIME;
+            bmissCmd->numBeacons =  atoi(optarg);
+            if ((bmissCmd->numBeacons < MIN_BMISS_BEACONS) ||
+                (bmissCmd->numBeacons > MAX_BMISS_BEACONS))
+            {
+                printf("BMISS beacons out of range\n");
+                cmd = 0;
+            }
+            break;
+
+        case WMI_SET_AC_PARAMS:
+            cmd = WMI_SET_AC_PARAMS;
+            break;
+        case 'A':
+            acParamsCmd->txop = atoi(optarg);
+            break;
+        case 'B':
+            acParamsCmd->eCWmin = atoi(optarg);
+            break;
+        case 'C':
+            acParamsCmd->eCWmax = atoi(optarg);
+            break;
+        case 'D':
+            acParamsCmd->aifsn = atoi(optarg);
+            break;
+        case 'E':
+            if (!strcmp(optarg, "enable")) {
+                adhocPmCmd->power_saving = TRUE;
+            } else if (!strcmp(optarg, "disable")) {
+                adhocPmCmd->power_saving = FALSE;
+            } else {
+                cmd = 0;
+            }
+
+            break;
+        case 'F':
+            adhocPmCmd->atim_windows = atoi(optarg);
+            break;
+        case 'G':
+            if (wmic_ether_aton(optarg, adhocBssidCmd->bssid) != A_OK) {
+                printf("bad mac address\n");
+                break;
+            }
+            printf("adhoc bssid address, %x\n", adhocBssidCmd->bssid[0]);
+            cmd = WMI_SET_ADHOC_BSSID;
+            break;
+
+        case 'H':
+            cmd = WMI_SET_OPT_MODE;
+            if (!strcmp(optarg, "special")) {
+                optModeCmd->optMode = SPECIAL_ON;
+            } else if (!strcmp(optarg, "off")) {
+                optModeCmd->optMode = SPECIAL_OFF; 
+            } else {
+                printf("optional mode is not support\n");
+                cmd = 0;
+            }
+            break;
+
+         case 'I':
+            optTxFrmCmd->frmType = atoi(optarg);
+            if (optTxFrmCmd->frmType != OPT_CPPP_STOP) {
+                index = optind;
+                if (wmic_ether_aton(argv[index], optTxFrmCmd->dstAddr) != A_OK) {
+                    printf("bad dst address\n");
+                    break;
+                }
+                index++;
+                if (wmic_ether_aton(argv[index], optTxFrmCmd->bssid) != A_OK) {
+                    printf("bad bssid address\n");
+                    break;
+                }
+                index++;
+                optTxFrmCmd->optIEDataLen = atoi(argv[index]);
+                if (optTxFrmCmd->optIEDataLen < 6 ||
+                    optTxFrmCmd->optIEDataLen > MAX_OPT_DATA_LEN)
+                {
+                    printf("bad Total IE length\n");
+                    break;
+                }
+            
+#ifndef OPT_TEST
+                /* for testing only */
+                optTxFrmCmd->optIEData[0] = 0xdd;
+                optTxFrmCmd->optIEData[1] = optTxFrmCmd->optIEDataLen - 2;
+                optTxFrmCmd->optIEData[2] = 0x08;
+                optTxFrmCmd->optIEData[3] = 0x00;
+                optTxFrmCmd->optIEData[4] = 0x46;
+                optTxFrmCmd->optIEData[5] = 0x01;
+                {
+                int i;
+                for (i=6; i<MAX_OPT_DATA_LEN; i++)
+                    optTxFrmCmd->optIEData[i] = i;
+                }
+                
+#else
+                index++;
+                memcpy(&optTxFrmCmd->optIEData[0], argv[index],
+                            optTxFrmCmd->optIEDataLen);
+                            
+#endif
+            }
+            cmd = WMI_OPT_SEND_FRAME;
+            break;
+       case 'J':
+            cmd = WMI_SET_WLAN_STATE;
+            if (!strcmp(optarg, "enable")) {
+                ((int *)buf)[1] = WLAN_ENABLED;
+            } else if (!strcmp(optarg, "disable")) {
+                ((int *)buf)[1] = WLAN_DISABLED;
+            } else {
+                usage();
+            }
+            break;
+        case 'K':
+            adhocPmCmd->timeout_value = atoi(optarg);
+            break;
+       case 'O':
+            index = optind;
+            index--;
+            if((index + 6) > argc) {  /*6 is the number of  flags
+                                       scanctrlflags takes  */
+                printf("Incorrect number of scanctrlflags\n");
+                cmd = 0;
+                break;
+           }
+            sParamCmd->scanCtrlFlags = 0;
+            if (atoi(argv[index]) == 1)
+                sParamCmd->scanCtrlFlags |= CONNECT_SCAN_CTRL_FLAGS;
+            index++;
+            if (atoi(argv[index]) == 1)
+                sParamCmd->scanCtrlFlags |= SCAN_CONNECTED_CTRL_FLAGS;
+            index++;
+            if (atoi(argv[index]) == 1)
+                sParamCmd->scanCtrlFlags |= ACTIVE_SCAN_CTRL_FLAGS;
+            index++;
+            if (atoi(argv[index]) == 1)
+                sParamCmd->scanCtrlFlags |= ROAM_SCAN_CTRL_FLAGS;
+            index++;
+            if (atoi(argv[index]) == 1)
+                sParamCmd->scanCtrlFlags |= REPORT_BSSINFO_CTRL_FLAGS;
+            index++;
+            if(atoi(argv[index]) == 1)
+               sParamCmd->scanCtrlFlags |= ENABLE_AUTO_CTRL_FLAGS;
+            index++;
+            if (argc - index) {
+                if(atoi(argv[index]) == 1)
+                   sParamCmd->scanCtrlFlags |= ENABLE_SCAN_ABORT_EVENT;
+                index++;
+            }
+            if(!sParamCmd->scanCtrlFlags) { 
+               sParamCmd->scanCtrlFlags = 255; /* all flags have being disabled by the user */
+            }
+            break;  
+       case 'L':
+            adhocPmCmd->ttl = atoi(optarg);
+            break;
+       case  'P':
+            startScanCmd->homeDwellTime =atoi(optarg);
+            break;
+       case 'Q':
+            startScanCmd->forceScanInterval =atoi(optarg);
+            break;
+       case 'R':
+            index = optind;
+            index--;
+            if((index + 3) > argc) {
+                printf("Incorrect number of forceScanCtrlFlags\n");
+                cmd = 0;
+                break;
+            }
+            startScanCmd->scanType = atoi(argv[index]);
+            index++;
+            startScanCmd->forceFgScan = atoi(argv[index]);
+            index++;
+            startScanCmd->isLegacy = atoi(argv[index]);
+            index++;
+            break;
+       case WMI_SET_IBSS_PM_CAPS:
+            cmd = WMI_SET_IBSS_PM_CAPS;
+            break;
+        case WMI_SET_DISC_TIMEOUT:
+            cmd = WMI_SET_DISC_TIMEOUT;
+            discCmd->disconnectTimeout = atoi(optarg);
+            break;
+        case WMI_SET_BEACON_INT:
+            cmd = WMI_SET_BEACON_INT;
+            adhocbconIntvl->beaconInterval = atoi(optarg);
+            break;
+        case WMI_SET_VOICE_PKT_SIZE:
+            cmd = WMI_SET_VOICE_PKT_SIZE;
+            pSizeThresh->voicePktSize = atoi(optarg);
+            break;
+        case WMI_SET_MAX_SP:
+            cmd = WMI_SET_MAX_SP;
+            pMaxSP->maxSPLen = atoi(optarg);
+            break;
+        case WMI_GET_ROAM_TBL:
+            cmd = WMI_GET_ROAM_TBL;
+            break;
+        case WMI_SET_ROAM_CTRL:
+            pRoamCtrl->roamCtrlType = atoi(optarg);
+            if (A_OK != wmic_validate_roam_ctrl(pRoamCtrl, argc-optind, argv)) {
+                break;
+            }
+            cmd = WMI_SET_ROAM_CTRL;
+            break;
+        case WMI_SET_POWERSAVE_TIMERS:
+            cmd = WMI_SET_POWERSAVE_TIMERS;
+            break;
+        case WMI_SET_POWERSAVE_TIMERS_PSPOLLTIMEOUT:
+            pPowerSave->psPollTimeout = atoi(optarg);
+            break;
+        case WMI_SET_POWERSAVE_TIMERS_TRIGGERTIMEOUT:
+            pPowerSave->triggerTimeout = atoi(optarg);
+            break;
+        case WMI_GET_POWER_MODE:
+            cmd = WMI_GET_POWER_MODE;
+            break;
+        case WMI_GET_ROAM_DATA:
+            cmd = WMI_GET_ROAM_DATA;
+            break;
+        case WMI_SET_BT_STATUS:
+            cmd = WMI_SET_BT_STATUS;
+            pBtStatCmd->streamType = atoi(optarg);
+            pBtStatCmd->status = atoi(argv[optind]);
+            if (pBtStatCmd->streamType >= BT_STREAM_MAX ||
+                pBtStatCmd->status >= BT_STATUS_MAX)
+            {
+                fprintf(stderr, "Invalid parameters.\n");
+                exit(0);
+            }
+            break;
+        case WMI_SET_BT_PARAMS:
+            cmd = WMI_SET_BT_PARAMS;
+            pBtParmCmd->paramType = atoi(optarg);
+            if (pBtParmCmd->paramType >= BT_PARAM_MAX)
+            {
+                fprintf(stderr, "Invalid parameters.\n");
+                exit(0);
+            }
+            
+            if (BT_PARAM_SCO == pBtParmCmd->paramType)
+            {
+                pBtParmCmd->info.scoParams.noSCOPkts = strtoul(argv[optind], NULL, 0);
+                pBtParmCmd->info.scoParams.pspollTimeout = strtoul(argv[optind+1], NULL, 0);
+                pBtParmCmd->info.scoParams.stompbt = strtoul(argv[optind+2], NULL, 0);
+            }
+            else if (BT_PARAM_A2DP == pBtParmCmd->paramType)
+            {
+                pBtParmCmd->info.a2dpParams.period = strtoul(argv[optind], NULL, 0);
+                pBtParmCmd->info.a2dpParams.dutycycle = strtoul(argv[optind+1], NULL, 0);
+                pBtParmCmd->info.a2dpParams.stompbt = strtoul(argv[optind+2], NULL, 0);
+            }
+            else if (BT_PARAM_MISC == pBtParmCmd->paramType)
+            {
+                pBtParmCmd->info.miscParams.paramType = strtoul(argv[optind], NULL, 0);
+                
+                if (WLAN_PROTECT_POLICY == pBtParmCmd->info.miscParams.paramType)
+                {
+                    pBtParmCmd->info.miscParams.info.protectParams.period = strtoul(argv[optind+1], NULL, 0);
+                    pBtParmCmd->info.miscParams.info.protectParams.dutycycle = strtoul(argv[optind+2], NULL, 0);
+                    pBtParmCmd->info.miscParams.info.protectParams.stompbt = strtoul(argv[optind+3], NULL, 0);
+                    pBtParmCmd->info.miscParams.info.protectParams.policy = strtoul(argv[optind+4], NULL, 0);
+                }
+                else if (WLAN_COEX_CTRL_FLAGS == pBtParmCmd->info.miscParams.paramType)
+                {
+                    pBtParmCmd->info.miscParams.info.wlanCtrlFlags = strtoul(argv[optind+1], NULL, 0);
+                }
+            }
+            else if (BT_PARAM_REGS == pBtParmCmd->paramType)
+            {
+                pBtParmCmd->info.regs.mode = strtoul(argv[optind], NULL, 0);
+                pBtParmCmd->info.regs.scoWghts = strtoul(argv[optind+1], NULL, 0);
+                pBtParmCmd->info.regs.a2dpWghts = strtoul(argv[optind+2], NULL, 0);
+                pBtParmCmd->info.regs.genWghts = strtoul(argv[optind+3], NULL, 0);
+                pBtParmCmd->info.regs.mode2 = strtoul(argv[optind+4], NULL, 0);
+                pBtParmCmd->info.regs.setVal = strtoul(argv[optind+5], NULL, 0);
+            }
+            else
+            {
+                fprintf(stderr, "Invalid parameters.\n");
+                exit(0);
+            }
+            break;
+        case WMI_SET_RETRYLIMITS:
+            index = optind - 1;
+            setRetryCmd->frameType = atoi(argv[index++]);
+            if (setRetryCmd->frameType > 2) {
+                printf("Invalid frame type! [0 - 2]\n");
+                exit(-1);
+            }
+            setRetryCmd->trafficClass = atoi(argv[index++]);
+            if (setRetryCmd->trafficClass < 1 || setRetryCmd->trafficClass > 3) {
+                printf("Invalid traffic class! [1 - 3]\n");
+                exit(-1);
+            }
+            setRetryCmd->maxRetries = atoi(argv[index++]);
+            if (setRetryCmd->maxRetries > WMI_MAX_RETRIES) {
+                printf("Invalid max retries! [0 - 13] \n");
+                exit(-1);
+            }
+            if (!strcmp(argv[index], "on")) {
+                setRetryCmd->enableNotify = 1;
+            } else if (!strcmp(argv[index], "off")) {
+                setRetryCmd->enableNotify = 0;
+            } else {
+                usage();
+            }
+            cmd = WMI_SET_RETRYLIMITS;
+            break;
+        case WMI_START_SCAN:
+            cmd = WMI_START_SCAN;
+            startScanCmd->homeDwellTime = 0;
+            startScanCmd->forceScanInterval = 0;
+            break;
+        case WMI_SET_FIX_RATES:
+            cmd = WMI_SET_FIX_RATES;
+            break;
+        case WMI_GET_FIX_RATES:
+            cmd = WMI_GET_FIX_RATES;
+            break;
+        case WMI_SET_AUTH_MODE:
+            cmd = WMI_SET_AUTH_MODE;
+            break;
+        case WMI_SET_REASSOC_MODE:
+            cmd = WMI_SET_REASSOC_MODE;
+            break;
+        case WMI_SET_LPREAMBLE:
+            cmd = WMI_SET_LPREAMBLE;
+            setLpreambleCmd->status = atoi(optarg);
+            break;
+        case WMI_SET_RTS:
+            cmd = WMI_SET_RTS;
+            setRtsCmd->threshold = atoi(optarg);
+            break;
+        case WMI_SET_WMM:
+            cmd = WMI_SET_WMM;
+            setWmmCmd->status = atoi(optarg);
+            break;
+        case WMI_APSD_TIM_POLICY:
+            if (!strcmp(optarg, "ignore")) {
+                pPowerSave->apsdTimPolicy = IGNORE_TIM_ALL_QUEUES_APSD;
+            } else {
+                pPowerSave->apsdTimPolicy = PROCESS_TIM_ALL_QUEUES_APSD;
+            }
+            break;
+        case WMI_SIMULATED_APSD_TIM_POLICY:
+            if (!strcmp(optarg, "ignore")) {
+                pPowerSave->simulatedAPSDTimPolicy = IGNORE_TIM_SIMULATED_APSD;
+            } else {
+                pPowerSave->simulatedAPSDTimPolicy = PROCESS_TIM_SIMULATED_APSD;
+            }
+            break;
+        case WMI_SET_ERROR_DETECTION:
+            cmd = WMI_SET_ERROR_DETECTION;
+            break;
+        case 'S':
+            hbparam->threshold = atoi(optarg);
+            break;
+        case 'T':
+            hbparam->frequency = atoi(optarg);
+            break;
+        case WMI_GET_HB_CHALLENGE_RESP:
+            cmd = WMI_GET_HB_CHALLENGE_RESP;
+            break;
+        case 'U':
+            *cookie = strtoul(optarg, (char **)NULL, 0);
+            break;
+        case USER_SETKEYS:
+            if (argc == 5) {
+                user_setkeys_info->keyOpCtrl = 0;
+                cmd = USER_SETKEYS;
+            } else {
+              printf("Invalid arg %s:Usage --usersetkeys --initrsc=<on/off>",
+                     optarg);
+            }
+            break; 
+        case WMI_GET_RD:
+            cmd = WMI_GET_RD;
+            break;
+        case WMI_SET_TXOP:
+            cmd = WMI_SET_TXOP;
+            pTxOp->txopEnable = atoi(optarg);
+            break;
+        case DIAG_ADDR:
+            *diagaddr = strtoul(optarg, (char **)NULL, 0);
+            printf("addr: 0x%x\n", *diagaddr);
+            break;
+        case DIAG_DATA:
+            *diagdata = strtoul(optarg, (char **)NULL, 0);
+            printf("data: 0x%x\n", *diagdata);
+            break;
+        case DIAG_READ:
+            cmd = DIAG_READ;
+            break;
+        case DIAG_WRITE:
+            cmd = DIAG_WRITE;
+            break;
+        case WMI_SET_KEEPALIVE:
+             cmd = WMI_SET_KEEPALIVE;
+             break;
+        case WMI_GET_KEEPALIVE:
+             cmd = WMI_GET_KEEPALIVE;
+             break;
+        case WMI_SET_APPIE:
+             cmd = WMI_SET_APPIE;
+             
+            if (argc - optind != 1) {
+                printf("Usage is --setappie <beacon/probe/respon/assoc> <IE>\n");
+                cmd = 0;
+                break;
+            }
+
+            if (A_OK != wmic_validate_appie(appIEInfo, argv)) {
+                cmd = 0;
+                break;
+            }
+            break;
+        case WMI_SET_MGMT_FRM_RX_FILTER:
+             cmd = WMI_SET_MGMT_FRM_RX_FILTER;
+            if (argc - optind != 1) {
+                printf("Usage is --setmgmtfilter <set/clear> <frmtype> \n");
+                cmd = 0;
+                break;
+            }
+
+            if (A_OK != wmic_validate_mgmtfilter(pMgmtFilter, argv)) {
+                cmd = 0;
+                break;
+            }
+            break;
+        case 'V':
+            dbglogCfg->mmask = strtoul(optarg, (char **)NULL, 0);
+            dbglogCfg->valid |= DBGLOG_MODULE_LOG_ENABLE_MASK;
+            break;
+        case 'W':
+            dbglogCfg->rep = strtoul(optarg, (char **)NULL, 0);
+            dbglogCfg->valid |= DBGLOG_REPORTING_ENABLED_MASK;
+            break;
+        case 'X':
+            dbglogCfg->tsr = strtoul(optarg, (char **)NULL, 0);
+            dbglogCfg->valid |= DBGLOG_TIMESTAMP_RESOLUTION_MASK;
+            break;
+        case 'Y':
+            dbglogCfg->size = strtoul(optarg, (char **)NULL, 0);
+            dbglogCfg->valid |= DBGLOG_REPORT_SIZE_MASK;
+            break;
+        case 'Z':
+            clearstat = 1;
+            break;
+        case WMI_BSSID:
+             convert_hexstring_bytearray(optarg, bssid, sizeof(bssid));
+            break;
+        case USER_SETKEYS_INITRSC:
+            if (strcmp(optarg, "on") == 0) {
+                user_setkeys_info->keyOpCtrl &= 
+                                    ~AR6000_USER_SETKEYS_RSC_UNCHANGED;
+            } else if (strcmp(optarg, "off") == 0) {
+                user_setkeys_info->keyOpCtrl |= 
+                                    AR6000_USER_SETKEYS_RSC_UNCHANGED;
+            } else {
+              printf("Invalid arg %s:Usage --usersetkeys --initrsc=<on/off>",
+                     optarg);
+            }
+            break;
+        case WMI_DBGLOG_CFG_MODULE:
+            dbglogCfg->valid = 0;
+            cmd = WMI_DBGLOG_CFG_MODULE;
+            break;
+        case WMI_DBGLOG_GET_DEBUG_LOGS:
+            cmd = WMI_DBGLOG_GET_DEBUG_LOGS;
+            break;
+        case WMI_SET_HOST_SLEEP_MODE:
+            cmd = WMI_SET_HOST_SLEEP_MODE;
+            if (!strcmp(optarg, "asleep")) {
+                hostSleepModeCmd->asleep = TRUE;
+                hostSleepModeCmd->awake = FALSE;
+            } else if (!strcmp(optarg, "awake")) {
+                hostSleepModeCmd->asleep = FALSE;
+                hostSleepModeCmd->awake = TRUE;
+            }
+            break;
+        case WMI_SET_WOW_MODE:
+            cmd = WMI_SET_WOW_MODE;
+            if (!strcmp(optarg, "enable")) {
+                wowModeCmd->enable_wow = TRUE;
+            } else if (!strcmp(optarg, "disable")) {
+                wowModeCmd->enable_wow = FALSE;
+            }
+            break;
+        case WMI_ADD_WOW_PATTERN:
+            cmd = WMI_ADD_WOW_PATTERN;
+            index = (optind - 1);
+            A_UINT8* filter_mask = NULL;
+            A_UINT8 temp1[64]={0};
+            A_UINT8 temp2[64]={0};
+
+            if((index + 4) > argc) {
+                printf("Incorrect number of add wow pattern parameters\n");
+                cmd = 0;
+                break;
+            }
+            memset((char*)addWowCmd, 0, sizeof(WMI_ADD_WOW_PATTERN_CMD));
+            i = addWowCmd->filter_list_id = 0;
+            addWowCmd->filter_list_id = atoi(argv[index++]);
+            addWowCmd->filter_size = atoi(argv[index++]);
+            addWowCmd->filter_offset = atoi(argv[index++]);
+            printf("optind=%d, size=%d offset=%d id=%d\n", optind, 
+                    addWowCmd->filter_size, addWowCmd->filter_offset, 
+                    addWowCmd->filter_list_id);
+            convert_hexstring_bytearray(argv[index], temp1,addWowCmd->filter_size );
+            memcpy(&addWowCmd->filter[0], temp1, addWowCmd->filter_size);
+            index++;
+            filter_mask = (A_UINT8*)(addWowCmd->filter + addWowCmd->filter_size);
+            convert_hexstring_bytearray(argv[index], temp2,addWowCmd->filter_size );
+            memcpy(filter_mask, temp2, addWowCmd->filter_size);
+            
+            for (i=0; i< addWowCmd->filter_size; i++) {
+
+                printf ("mask[%d]=%x pattern[%d]=%x temp=%x\n", i, filter_mask[i], i, addWowCmd->filter[i], temp1[i]);
+            }
+            break;
+        case WMI_DEL_WOW_PATTERN:
+            cmd = WMI_DEL_WOW_PATTERN;
+            index = (optind - 1);
+            if ((index  + 1) > argc) {
+                printf("Incorrect number of del wow pattern parameters\n");
+                cmd = 0;
+                break;
+            }
+            delWowCmd->filter_list_id = 0;
+            index++;
+            delWowCmd->filter_id = atoi(argv[index]);
+            break;
+        case WMI_GET_WOW_LIST:
+            cmd = WMI_GET_WOW_LIST;
+            index = (optind - 1);
+            if ((index  + 1) > argc) {
+                printf("Incorrect number of get wow list parameters\n");
+                cmd = 0;
+                break;
+            }
+            getWowListCmd->filter_list_id = atoi(argv[index]);
+            printf("Get wow filters in list %d\n", getWowListCmd->filter_list_id);
+            break;
+        case DIAG_DUMP_CHIP_MEM:
+            cmd = DIAG_DUMP_CHIP_MEM;
+            break;
+        case WMI_SET_CONNECT_CTRL_FLAGS:
+            cmd = WMI_SET_CONNECT_CTRL_FLAGS;
+            break;
+        case DUMP_HTC_CREDITS: 
+            cmd = DUMP_HTC_CREDITS;
+            break; 
+        case WMI_AKMP_MULTI_PMKID:
+            if (strcmp(optarg, "on") == 0) {
+                akmpCtrlCmd->akmpInfo |= WMI_AKMP_MULTI_PMKID_EN;
+            } else if (strcmp(optarg, "off") == 0) {
+                akmpCtrlCmd->akmpInfo &= ~WMI_AKMP_MULTI_PMKID_EN;
+            } else {
+              printf("Invalid arg %s:Usage --setakmctrl --multipmkid=<on/off>",
+                     optarg);
+            }
+            break;
+        case WMI_SET_AKMP_INFO:
+            cmd = WMI_SET_AKMP_INFO;
+            break;
+        case WMI_NUM_PMKID:
+            if ((pmkidUserInfo.numPMKIDUser = atoi(optarg)) 
+                                                > WMI_MAX_PMKID_CACHE) 
+            {
+                printf("Number of PMKIDs %d is out of range [1-%d]\n",
+                       pmkidUserInfo.numPMKIDUser, 
+                       WMI_MAX_PMKID_CACHE);
+                pmkidUserInfo.numPMKIDUser = 0;
+            }
+            break;
+        case WMI_PMKID_ENTRY:
+            if (pmkidUserInfo.pmkidInfo->numPMKID < 
+                    pmkidUserInfo.numPMKIDUser)
+            {
+                A_UINT8 nextEntry = pmkidUserInfo.pmkidInfo->numPMKID;
+            
+                convert_hexstring_bytearray(optarg,
+                                            pmkidUserInfo.pmkidInfo->
+                                            pmkidList[nextEntry].pmkid,
+                                            WMI_PMKID_LEN);
+                pmkidUserInfo.pmkidInfo->numPMKID++;
+            }
+            break;
+        case WMI_SET_PMKID_LIST:
+            cmd = WMI_SET_PMKID_LIST;
+            pmkidUserInfo.pmkidInfo = 
+                                 (WMI_SET_PMKID_LIST_CMD *)(buf + sizeof(int));
+            pmkidUserInfo.pmkidInfo->numPMKID = 0;
+            pmkidUserInfo.numPMKIDUser = 0;
+            break;
+        case WMI_GET_PMKID_LIST:
+            cmd = WMI_GET_PMKID_LIST;
+            break;
+        case WMI_SET_IEMASK:
+            filterCmd->ieMask = strtoul(argv[optind-1], NULL, 0);
+            break;
+        case WMI_SET_BSS_PMKID_INFO:
+            cmd = WMI_SET_BSS_PMKID_INFO;
+            memset(bssid, 0, sizeof(bssid));
+            pi_cmd->pi_enable = FALSE;
+            break;
+        case WMI_BSS_PMKID_ENTRY:
+            convert_hexstring_bytearray(optarg, pi_cmd->pi_pmkid, 
+                                        sizeof(pi_cmd->pi_pmkid));
+            memcpy(pi_cmd->pi_bssid, bssid, sizeof(bssid));
+            pi_cmd->pi_enable = TRUE;
+            break;
+        default:
+            usage(); 
+            break;
+        }
+    }
+
+    strncpy(ifr.ifr_name, ifname, sizeof(ifr.ifr_name));
+    memset(&iwr, 0, sizeof(iwr));
+    strncpy(iwr.ifr_name, ifname, sizeof(iwr.ifr_name));
+
+    switch (cmd) {
+    case WMI_SET_BSS_FILTER:
+        ifr.ifr_data = (void *)filterCmd;
+        if (ioctl(s, AR6000_IOCTL_WMI_SETBSSFILTER, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_POWER_MODE:
+        ifr.ifr_data = (void *)pwrCmd;
+        if (ioctl(s, AR6000_IOCTL_WMI_SETPWR, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_PM_PARAMS:
+        ifr.ifr_data = (void *)pmParamCmd;
+        if (ioctl(s, AR6000_IOCTL_WMI_SET_PMPARAMS, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_IBSS_PM_CAPS:
+        ifr.ifr_data = (void *)adhocPmCmd;
+        if (ioctl(s, AR6000_IOCTL_WMI_SET_IBSS_PM_CAPS, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_ERROR_DETECTION:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_HB_CHALLENGE_RESP_PARAMS;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_GET_HB_CHALLENGE_RESP:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_GET_HB_CHALLENGE_RESP;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+#ifdef USER_KEYS
+    case USER_SETKEYS:
+        {
+            ((int *)buf)[0] = AR6000_XIOCTL_USER_SETKEYS;
+            ifr.ifr_data = buf;
+
+            if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+            {
+                err(1, ifr.ifr_name);
+            }
+
+            break;
+        }
+#endif /* USER_KEYS */
+    case WMI_SET_SCAN_PARAMS:
+        if (sParamCmd->maxact_chdwell_time) {
+           if (sParamCmd->maxact_chdwell_time < 5) {
+              printf("Max active channel dwell time should be between 5-65535 msec\n");
+              break;
+           }
+           if (sParamCmd->minact_chdwell_time &&
+              (sParamCmd->maxact_chdwell_time < sParamCmd->minact_chdwell_time)) {
+               printf("Max active channel dwell time should be greater than minimum\n");
+               break;
+           }
+        }
+        ifr.ifr_data = (void *)sParamCmd;
+        if (ioctl(s, AR6000_IOCTL_WMI_SETSCAN, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_GET_VERSION:
+        {
+        struct ar6000_version *revinfo;
+
+        revinfo = malloc(sizeof(*revinfo));
+        ifr.ifr_data = (void *)revinfo;
+        if (ioctl(s, AR6000_IOCTL_WMI_GETREV, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        printf("Host Rev = 0x%x(%u.%u.%u.%u), Target Rev = 0x%x(%u.%u.%u.%u)\n",
+              revinfo->host_ver,
+              ((revinfo->host_ver)&0xf0000000)>>28,
+              ((revinfo->host_ver)&0x0f000000)>>24,
+              ((revinfo->host_ver)&0x00ff0000)>>16,
+              ((revinfo->host_ver)&0x0000ffff),
+              revinfo->target_ver,
+              ((revinfo->target_ver)&0xf0000000)>>28,
+              ((revinfo->target_ver)&0x0f000000)>>24,
+              ((revinfo->target_ver)&0x00ff0000)>>16,
+              ((revinfo->target_ver)&0x0000ffff)
+              );
+        }
+        break;
+    case WMI_SET_LISTEN_INTERVAL:
+        ifr.ifr_data = (void *)listenCmd;
+        if (ioctl(s, AR6000_IOCTL_WMI_SETLISTENINT, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_BMISS_TIME:
+        ifr.ifr_data = (void *)bmissCmd;
+        if (ioctl(s, AR6000_IOCTL_WMI_SET_BMISS_TIME, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_RSSI_THRESHOLDS:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_RSSITHRESHOLD;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_SNR_THRESHOLDS:
+        ifr.ifr_data = (void *)snrThresholdParam;
+        if (ioctl(s, AR6000_IOCTL_WMI_SET_SNRTHRESHOLD, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_CLR_RSSISNR:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_CLR_RSSISNR;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_LQ_THRESHOLDS:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_LQTHRESHOLD;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_CHANNEL:
+        index = optind - 1;
+
+        phyMode = getPhyMode(argv[index]);
+
+        if(phyMode == -1)
+        {
+            printf("Incorrect Phy mode \n"); 
+            break;
+        }
+        else
+        {
+            chParamCmd->phyMode = (WMI_PHY_MODE) phyMode;
+            //printf("Phy mode %d \n",phyMode); 
+        }
+        
+        clist = chParamCmd->channelList;
+        chindex = 0;
+        index++;
+
+        for (; index < argc; index++) {
+            if (strcmp(argv[index],"sc") == 0) {
+                chParamCmd->scanParam = atoi(argv[++index]);
+                break;
+            } else {
+                channel = atoi(argv[index]);
+                if (!channel) {
+                    break;
+                }
+                if (channel < 255) {
+                    /*
+                     * assume channel is a ieee channel #
+                     */	
+	            clist[chindex] = wmic_ieee2freq(channel);
+                } else {
+                    clist[chindex] = channel;
+                }
+                chindex++;
+            }
+        }
+
+        chParamCmd->numChannels = chindex;
+        ifr.ifr_data = (void *)chParamCmd;
+ 
+        if (ioctl(s, AR6000_IOCTL_WMI_SET_CHANNELPARAMS, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_SSID:
+        if (index > MAX_PROBED_SSID_INDEX) {
+            printf("num option for ssid command too large\n");
+            err(1, ifr.ifr_name);
+            break;
+        }
+        if (strlen((char *)ssid) > sizeof (ssidCmd->ssid)) {
+            printf("ssid name too large\n");
+            err(1, ifr.ifr_name);
+            break;
+        }
+        ssidCmd->entryIndex = index;
+        if (strcmp((char *)ssid, "off") == 0) {
+            ssidCmd->ssidLength = 0;
+            ssidCmd->flag = DISABLE_SSID_FLAG;
+        } else if (strcmp((char *)ssid, "any") == 0) {
+            ssidCmd->ssidLength = 0;
+            ssidCmd->flag = ANY_SSID_FLAG;
+        } else {
+            ssidCmd->flag = SPECIFIC_SSID_FLAG;
+            ssidCmd->ssidLength = strlen((char *)ssid);
+            strcpy((char *)(ssidCmd->ssid), (char *)ssid);
+        }
+        ifr.ifr_data = (void *)ssidCmd;
+        if (ioctl(s, AR6000_IOCTL_WMI_SET_PROBEDSSID, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_BADAP:
+    case WMI_DELETE_BADAP:
+        if (index > WMI_MAX_BAD_AP_INDEX) {
+            printf("bad index\n");
+            break;
+        }
+        badApCmd->badApIndex = index;
+        ifr.ifr_data = (void *)badApCmd;
+        if (ioctl(s, AR6000_IOCTL_WMI_SET_BADAP, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_CREATE_QOS:
+        index = optind;
+        crePStreamCmd->trafficDirection = atoi(argv[index]);
+        index++;
+        crePStreamCmd->trafficClass = atoi(argv[index]);
+        index++;
+        crePStreamCmd->trafficType = atoi(argv[index]);
+        index++;
+        crePStreamCmd->voicePSCapability = atoi(argv[index]);
+        index++;
+        crePStreamCmd->minServiceInt = strtoll(argv[index], (char **)NULL, 0);
+        index++;
+        crePStreamCmd->maxServiceInt = strtoll(argv[index], (char **)NULL, 0);
+        index++;
+        crePStreamCmd->inactivityInt = strtoll(argv[index], (char **)NULL, 0);
+        index++;
+        crePStreamCmd->suspensionInt = strtoll(argv[index], (char **)NULL, 0);
+        index++;
+        crePStreamCmd->serviceStartTime = strtoll(argv[index], (char **)NULL, 0);
+        index++;
+        crePStreamCmd->tsid = strtoll(argv[index], (char **)NULL, 0);
+        index++;
+        crePStreamCmd->nominalMSDU =  strtoll(argv[index], (char **)NULL, 0);
+        index++;
+        crePStreamCmd->maxMSDU =  strtoll(argv[index], (char **)NULL, 0);
+        index++;
+        crePStreamCmd->minDataRate = strtoll(argv[index], (char **)NULL, 0);
+        index++;
+        crePStreamCmd->meanDataRate = strtoll(argv[index], (char **)NULL, 0);
+        index++;
+        crePStreamCmd->peakDataRate = strtoll(argv[index], (char **)NULL, 0);
+        index++;
+        crePStreamCmd->maxBurstSize = strtoll(argv[index], (char **)NULL, 0);
+        index++;
+        crePStreamCmd->delayBound = strtoll(argv[index], (char **)NULL, 0);
+        index++;
+        crePStreamCmd->minPhyRate = strtoll(argv[index], (char **)NULL, 0);
+        index++;
+        crePStreamCmd->sba = strtoll(argv[index], (char **)NULL, 0);
+        index++;
+        crePStreamCmd->mediumTime = strtoll(argv[index],(char **)NULL, 0);
+        index++;
+
+        if (crePStreamCmd->trafficClass > 3) {
+            printf("bad traffic class (%d)\n", crePStreamCmd->trafficClass);
+            printf("Traffic class should be 1(BK), 2(VI) or 3(VO)\n");
+            break;
+        } else if (crePStreamCmd->trafficDirection > BIDIR_TRAFFIC) {
+            printf("bad traffic direction (%d)\n", crePStreamCmd->trafficDirection);
+            printf("Traffic class should be 0(uplink), 1(dnlink) or 2(bi-dir)\n");
+            break;
+        }
+
+        ifr.ifr_data = (void *)crePStreamCmd;
+        if (ioctl(s, AR6000_IOCTL_WMI_CREATE_QOS, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_GET_TARGET_STATS:
+        if (clearstat == 1) {
+           tgtStatsCmd.clearStats = 1;
+        } else {
+           tgtStatsCmd.clearStats = 0;
+        }
+
+        ifr.ifr_data = (void *)&tgtStatsCmd;
+        if (ioctl(s, AR6000_IOCTL_WMI_GET_TARGET_STATS, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        printTargetStats(&(tgtStatsCmd.targetStats));
+        break;
+    case WMI_SET_TARGET_ERROR_REPORTING_BITMASK:
+        ifr.ifr_data = (void *)pBitMask;
+        if (ioctl(s, AR6000_IOCTL_WMI_SET_ERROR_REPORT_BITMASK, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_DELETE_QOS:
+        index = optind;
+        delPStreamCmd->tsid = atoi(argv[index]);
+        ifr.ifr_data = (void *)delPStreamCmd;
+        if (ioctl(s, AR6000_IOCTL_WMI_DELETE_QOS, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_GET_QOS_QUEUE:
+        {
+        int i;
+        printf("getQosQueue: %d\n", getQosQueueCmd->trafficClass);
+
+        if (getQosQueueCmd->trafficClass > 3) {
+            printf("bad traffic class (%d)\n", getQosQueueCmd->trafficClass);
+            printf("Traffic class should be 0(BE), 1(BK), 2(VI) or 3(VO)\n");
+            break;
+        }
+        ifr.ifr_data = (void *)getQosQueueCmd;
+        if (ioctl(s, AR6000_IOCTL_WMI_GET_QOS_QUEUE, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+
+        printf("Active TSIDs \n");
+        for (i=0; i <=15; i++) {
+            if ((getQosQueueCmd->activeTsids & (1<<i))) {
+                printf("tsID: %d\n",i);
+            }
+        }
+        }
+        break;
+    case WMI_SET_ASSOC_INFO_CMDID:
+        ifr.ifr_data = (void *)ieInfo;
+        if (ioctl(s, AR6000_IOCTL_WMI_SET_ASSOC_INFO, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_AC_PARAMS:
+        if ((acParamsCmd->eCWmin > WMI_MAX_CW_ACPARAM) ||
+            (acParamsCmd->eCWmax > WMI_MAX_CW_ACPARAM) ||
+            (acParamsCmd->aifsn > WMI_MAX_AIFSN_ACPARAM))
+        {
+            printf("incorrect value for access parameters\n");
+            usage();
+            break;
+        }
+
+        ifr.ifr_data = (void *)acParamsCmd;
+        if (ioctl(s, AR6000_IOCTL_WMI_SET_ACCESS_PARAMS, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_DISC_TIMEOUT:
+        ifr.ifr_data = (void *)discCmd;
+        if (ioctl(s, AR6000_IOCTL_WMI_SET_DISC_TIMEOUT, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+     case WMI_SET_ADHOC_BSSID:
+        ((int *)buf)[0] = AR6000_XIOCTL_SET_ADHOC_BSSID;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            printf("fail to set adhoc bssid \n");
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_OPT_MODE:
+        ((int *)buf)[0] = AR6000_XIOCTL_SET_OPT_MODE;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_OPT_SEND_FRAME:
+        ((int *)buf)[0] = AR6000_XIOCTL_OPT_SEND_FRAME;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_BEACON_INT:
+        ((int *)buf)[0] = AR6000_XIOCTL_SET_ADHOC_BEACON_INTVAL;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_VOICE_PKT_SIZE:
+        ((int *)buf)[0] = AR6000_XIOCTL_SET_VOICE_PKT_SIZE;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_MAX_SP:
+        ((int *)buf)[0] = AR6000_XIOCTL_SET_MAX_SP;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_GET_ROAM_TBL:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_GET_ROAM_TBL;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_ROAM_CTRL:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_ROAM_CTRL;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_POWERSAVE_TIMERS:
+        ((int *)buf)[0] = AR6000_XIOCTRL_WMI_SET_POWERSAVE_TIMERS;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_GET_POWER_MODE:
+        ((int *)buf)[0] = AR6000_XIOCTRL_WMI_GET_POWER_MODE;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        printf("Power mode is %s\n",
+               (getPowerMode->powerMode == MAX_PERF_POWER) ? "maxperf" : "rec");
+        break;
+     case WMI_SET_WLAN_STATE:
+        ((int *)buf)[0] = AR6000_XIOCTRL_WMI_SET_WLAN_STATE;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_GET_ROAM_DATA:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_GET_ROAM_DATA;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_BT_STATUS:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_BT_STATUS;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_BT_PARAMS:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_BT_PARAMS;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;   
+    case WMI_SET_RETRYLIMITS:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SETRETRYLIMITS;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_START_SCAN:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_STARTSCAN;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_FIX_RATES:
+        index = optind;
+        index--;
+        setFixRatesCmd->fixRateMask = 0;
+        printf("argc = %d\n",argc);
+        for(; index<argc; index++)
+        {
+            if (atoi(argv[index])<0 || atoi(argv[index])>11)
+            {
+                printf("incorrect value for rates parameters\n");
+                usage();
+                break;
+            }
+            setFixRatesCmd->fixRateMask |= 1<<(atoi(argv[index]));
+            printf("wmiconfig:fixRateMask=%d\n",setFixRatesCmd->fixRateMask);
+        }
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SETFIXRATES;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_GET_FIX_RATES:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_GETFIXRATES;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        } else {
+            int i;
+            printf("Fix rate set index:");
+            for (i = 0; i<12; i++) {
+                if (getFixRatesCmd->fixRateMask&(1<<i)) {
+                    printf("%d ",i);
+                }
+            }
+            printf("\n");
+        }
+        break;
+    case WMI_SET_AUTH_MODE:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_AUTHMODE;
+        ifr.ifr_data = buf;
+        index = optind;
+        index--;
+        setAuthMode->mode = atoi(argv[index]);
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_REASSOC_MODE:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_REASSOCMODE;
+        ifr.ifr_data = buf;
+        index = optind;
+        index--;
+        setReassocMode->mode = atoi(argv[index]);
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_LPREAMBLE:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_LPREAMBLE;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_RTS:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_RTS;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_WMM:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_WMM;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_TXOP:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_TXOP;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case DIAG_READ:
+        ((int *)buf)[0] = AR6000_XIOCTL_DIAG_READ;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        printf("diagdata: 0x%x\n", *diagdata);
+        break;
+    case DIAG_WRITE:
+        ((int *)buf)[0] = AR6000_XIOCTL_DIAG_WRITE;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_GET_RD:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_GET_RD;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0)
+        {
+            err(1, ifr.ifr_name);
+        }
+        else
+        {
+            if(REGCODE_IS_CC_BITSET(*rd)) 
+                printf("CountryCode = ");
+            else if(REGCODE_IS_WWR_BITSET(*rd))
+                printf("WWR Roaming code = ");
+            else 
+                printf("Regulatory Domain = ");
+
+            printf("0x%x\n", REGCODE_GET_CODE(*rd));
+        }
+        break;
+    case WMI_SET_KEEPALIVE:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_KEEPALIVE;
+        ifr.ifr_data = buf;
+        index = optind;
+        index--;
+        setKeepAlive->keepaliveInterval = atoi(argv[index]);
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_GET_KEEPALIVE:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_GET_KEEPALIVE;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        printf("Keepalive interval is %d secs and AP is %s\n",
+               getKeepAlive->keepaliveInterval, (getKeepAlive->configured ?
+               "configured" : "not configured"));
+        break;
+    case WMI_SET_APPIE:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_APPIE;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_MGMT_FRM_RX_FILTER:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_MGMT_FRM_RX_FILTER;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_DBGLOG_CFG_MODULE:
+        ((int *)buf)[0] = AR6000_XIOCTL_DBGLOG_CFG_MODULE;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_DBGLOG_GET_DEBUG_LOGS:
+        ((int *)buf)[0] = AR6000_XIOCTL_DBGLOG_GET_DEBUG_LOGS;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_HOST_SLEEP_MODE:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_HOST_SLEEP_MODE;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_WOW_MODE:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_WOW_MODE;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_ADD_WOW_PATTERN:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_ADD_WOW_PATTERN;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_DEL_WOW_PATTERN:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_DEL_WOW_PATTERN;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_GET_WOW_LIST:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_GET_WOW_LIST;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case DIAG_DUMP_CHIP_MEM:
+        for(i = 0; i < 5; i++) {
+            printf("Address range = 0x%x, 0x%x\n",
+                    mercuryAdd[i][0], mercuryAdd[i][1]);
+            for(*diagaddr = mercuryAdd[i][0]; 
+                *diagaddr < mercuryAdd[i][1];
+                *diagaddr += 4) {
+                ((int *)buf)[0] = AR6000_XIOCTL_DIAG_READ;
+                ifr.ifr_data = buf;
+                if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+                    err(1, ifr.ifr_name);
+                }
+                printf("0x%04x:0x%04x\n", *diagaddr, *diagdata);
+            }
+        }
+        break;
+    case WMI_SET_CONNECT_CTRL_FLAGS:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_CONNECT_CTRL_FLAGS;
+        ifr.ifr_data = buf;
+        index = optind - 1;
+        *connectCtrlFlags = strtoul(argv[index], NULL, 0);
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case DUMP_HTC_CREDITS:        
+        ((int *)buf)[0] = AR6000_XIOCTL_DUMP_HTC_CREDIT_STATE;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_AKMP_INFO:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_AKMP_PARAMS;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_PMKID_LIST:
+        if (pmkidUserInfo.pmkidInfo->numPMKID) {
+            ((int *)buf)[0] = AR6000_XIOCTL_WMI_SET_PMKID_LIST;
+            ifr.ifr_data = buf;
+            if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+                err(1, ifr.ifr_name);
+            }
+        } else {
+            printf("No PMKIDs entered\n");
+        }
+        break;
+    case WMI_GET_PMKID_LIST:
+        ((int *)buf)[0] = AR6000_XIOCTL_WMI_GET_PMKID_LIST;
+        ifr.ifr_data = buf;
+        if (ioctl(s, AR6000_IOCTL_EXTENDED, &ifr) < 0) {
+            err(1, ifr.ifr_name);
+        }
+        break;
+    case WMI_SET_BSS_PMKID_INFO:
+        iwr.u.data.pointer = buf;
+        iwr.u.data.length = sizeof(*pi_cmd);
+        if (ioctl(s, IEEE80211_IOCTL_ADDPMKID, &iwr) < 0) {
+            printf("ADDPMKID IOCTL Error\n");
+            err(1, ifr.ifr_name);
+        }
+        break;
+    default:
+        usage();
+    }
+
+    exit (0);
+}
+
+/*
+ * converts ieee channel number to frequency
+ */
+static A_UINT16
+wmic_ieee2freq(int chan)
+{
+    if (chan == 14) {
+        return 2484;
+    }
+    if (chan < 14) {    /* 0-13 */
+        return (2407 + (chan*5));
+    }
+    if (chan < 27) {    /* 15-26 */
+        return (2512 + ((chan-15)*20));
+    }
+    return (5000 + (chan*5));
+}
+
+
+#ifdef NOT_YET
+// Validate a hex character
+static A_BOOL
+_is_hex(char c)
+{
+    return (((c >= '0') && (c <= '9')) ||
+            ((c >= 'A') && (c <= 'F')) ||
+            ((c >= 'a') && (c <= 'f')));
+}
+
+// Validate alpha
+static A_BOOL
+isalpha(int c)
+{
+    return (((c >= 'a') && (c <= 'z')) || 
+            ((c >= 'A') && (c <= 'Z')));
+}
+
+// Validate alphanum
+static A_BOOL
+isalnum(int c)
+{
+    return (isalpha(c) || isdigit(c));
+}
+
+#endif
+
+// Convert a single hex nibble
+static int
+_from_hex(char c) 
+{
+    int ret = 0;
+
+    if ((c >= '0') && (c <= '9')) {
+        ret = (c - '0');
+    } else if ((c >= 'a') && (c <= 'f')) {
+        ret = (c - 'a' + 0x0a);
+    } else if ((c >= 'A') && (c <= 'F')) {
+        ret = (c - 'A' + 0x0A);
+    }
+    return ret;
+}
+
+// Validate digit
+static A_BOOL
+isdigit(int c)
+{
+    return ((c >= '0') && (c <= '9'));
+}
+
+void
+convert_hexstring_bytearray(char *hexStr, A_UINT8 *byteArray, A_UINT8 numBytes)
+{
+    A_UINT8 i;
+
+    for (i = 0; i < numBytes; i++) {
+        byteArray[i] = 16*_from_hex(hexStr[2*i + 0]) + _from_hex(hexStr[2*i +1]);
+    }
+}
+
+/*------------------------------------------------------------------*/
+/*
+ * Input an Ethernet address and convert to binary.
+ */
+static A_STATUS
+wmic_ether_aton(const char *orig, A_UINT8 *eth)
+{
+  const char *bufp;
+  int i;
+
+  i = 0;
+  for(bufp = orig; *bufp != '\0'; ++bufp) {
+	unsigned int val;
+	unsigned char c = *bufp++;
+	if (isdigit(c)) val = c - '0';
+	else if (c >= 'a' && c <= 'f') val = c - 'a' + 10;
+	else if (c >= 'A' && c <= 'F') val = c - 'A' + 10;
+	else break;
+
+	val <<= 4;
+	c = *bufp++;
+	if (isdigit(c)) val |= c - '0';
+	else if (c >= 'a' && c <= 'f') val |= c - 'a' + 10;
+	else if (c >= 'A' && c <= 'F') val |= c - 'A' + 10;
+	else break;
+
+	eth[i] = (unsigned char) (val & 0377);
+	if(++i == ATH_MAC_LEN) {
+		/* That's it.  Any trailing junk? */
+		if (*bufp != '\0') {
+#ifdef DEBUG
+			fprintf(stderr, "iw_ether_aton(%s): trailing junk!\n", orig);
+			return(A_EINVAL);
+#endif
+		}
+		return(A_OK);
+	}
+	if (*bufp != ':')
+		break;
+  }
+
+  return(A_EINVAL);
+}
+
+A_STATUS
+wmic_validate_roam_ctrl(WMI_SET_ROAM_CTRL_CMD *pRoamCtrl, A_UINT8 numArgs,
+                        char **argv)
+{
+    A_STATUS status = A_OK;
+    WMI_BSS_BIAS *pBssBias;
+    A_INT32 bias;
+    A_UINT8 i = 0;
+
+    switch (pRoamCtrl->roamCtrlType) {
+        case WMI_FORCE_ROAM:
+            if (numArgs != 1) {
+                fprintf(stderr, "BSSID to roam not given\n");
+                status = A_EINVAL;
+            } else if (wmic_ether_aton(argv[optind], pRoamCtrl->info.bssid)
+                                       != A_OK) 
+            {
+                fprintf(stderr,"BSSID %s not in correct format\n", 
+                         argv[optind]);
+                status = A_EINVAL;
+            }
+            break;
+        case WMI_SET_ROAM_MODE:
+            if (numArgs != 1) {
+                fprintf(stderr, "roam mode(default, bssbias, lock) not "
+                        " given\n");
+                status = A_EINVAL;
+            } else {
+                if (strcasecmp(argv[optind], "default") == 0) {
+                    pRoamCtrl->info.roamMode = WMI_DEFAULT_ROAM_MODE;
+                } else if (strcasecmp(argv[optind], "bssbias") == 0) {
+                    pRoamCtrl->info.roamMode = WMI_HOST_BIAS_ROAM_MODE;
+                } else if (strcasecmp(argv[optind], "lock") == 0) {
+                    pRoamCtrl->info.roamMode = WMI_LOCK_BSS_MODE;
+                } else {
+                    fprintf(stderr, "roam mode(default, bssbias, lock) not "
+                        " given\n");
+                    status = A_EINVAL;
+                }
+            }
+            break;
+        case WMI_SET_HOST_BIAS:
+            if ((numArgs & 0x01) || (numArgs > 25) ) {
+                fprintf(stderr, "roam bias too many entries or bss bias"
+                        "not input for every BSSID\n");
+                status = A_EINVAL;
+            } else {
+                pRoamCtrl->info.bssBiasInfo.numBss = numArgs >> 1;
+                pBssBias = pRoamCtrl->info.bssBiasInfo.bssBias;
+                while (i < pRoamCtrl->info.bssBiasInfo.numBss) {
+                    if (wmic_ether_aton(argv[optind + 2 * i], 
+                                        pBssBias[i].bssid) 
+                                        != A_OK)
+                    {
+                        fprintf(stderr,"BSSID %s not in correct format\n", 
+                                argv[optind + 2 * i]);
+                        status = A_EINVAL;
+                        pRoamCtrl->info.bssBiasInfo.numBss = 0;
+                        break;
+                    }
+                    bias  = atoi(argv[optind + 2 * i + 1]);
+                    if ((bias < -256) || (bias > 255)) {
+                        fprintf(stderr,"bias value %d is  not in range\n", 
+                                bias);
+                        status = A_EINVAL;
+                        pRoamCtrl->info.bssBiasInfo.numBss = 0;
+                        break;
+                    }
+                    pBssBias[i].bias = bias;
+                    i++;
+                }
+            }
+            break;
+        case WMI_SET_LOWRSSI_SCAN_PARAMS:
+            if (numArgs != 4) {
+                fprintf(stderr, "not enough arguments\n");
+                status = A_EINVAL;
+            } else {
+                pRoamCtrl->info.lrScanParams.lowrssi_scan_period = atoi(argv[optind]);            
+                if (atoi(argv[optind+1]) >= atoi(argv[optind+2])) {
+                    pRoamCtrl->info.lrScanParams.lowrssi_scan_threshold = atoi(argv[optind+1]);            
+                    pRoamCtrl->info.lrScanParams.lowrssi_roam_threshold = atoi(argv[optind+2]);            
+                } else {
+                    fprintf(stderr, "Scan threshold should be greater than \
+                            equal to roam threshold\n");
+                    status = A_EINVAL;
+                }
+                pRoamCtrl->info.lrScanParams.roam_rssi_floor = atoi(argv[optind+3]);
+            }
+
+            break;
+        default:
+            status = A_EINVAL;
+            fprintf(stderr,"roamctrl type %d out if range should be between"
+                       " %d and %d\n", pRoamCtrl->roamCtrlType,
+                        WMI_MIN_ROAM_CTRL_TYPE, WMI_MAX_ROAM_CTRL_TYPE);
+            break; 
+    }
+    return status;
+}
+
+A_STATUS
+wmic_validate_appie(struct ieee80211req_getset_appiebuf *appIEInfo, char **argv)
+{
+    A_STATUS status = A_OK;
+    A_UINT8 index = optind - 1;
+    A_UINT8 ieLen;
+
+    if ((strlen(argv[index]) == strlen("probe")) &&
+        (strcmp(argv[index], "probe") == 0)) 
+    {
+        appIEInfo->app_frmtype = IEEE80211_APPIE_FRAME_PROBE_REQ;
+    } else if ((strlen(argv[index]) == strlen("assoc")) &&
+               (strcmp(argv[index], "assoc") == 0))
+    {
+        appIEInfo->app_frmtype = IEEE80211_APPIE_FRAME_ASSOC_REQ;
+    } else if((strlen(argv[index]) == strlen("beacon")) &&
+        (strcmp(argv[index], "beacon") == 0)) {
+        appIEInfo->app_frmtype = IEEE80211_APPIE_FRAME_BEACON;
+    } else if((strlen(argv[index]) == strlen("respon")) &&
+        (strcmp(argv[index], "respon") == 0)) {
+        appIEInfo->app_frmtype = IEEE80211_APPIE_FRAME_PROBE_RESP;
+    } else {
+        printf("specify one of beacon/probe/respon/assoc\n");
+        return A_EINVAL;
+    }
+    index++;
+
+    ieLen = strlen(argv[index]); 
+    if ((ieLen == 1) && argv[index][0] == '0') {
+        appIEInfo->app_buflen = 0;
+    } else if ((ieLen > 4)  && (ieLen <= 2*IEEE80211_APPIE_FRAME_MAX_LEN) &&
+               _from_hex(argv[index][2])*16 + 
+               _from_hex(argv[index][3]) + 2  == ieLen/2) 
+    {
+        if ((argv[index][0] != 'd') && (argv[index][1] != 'd')) {
+            status = A_EINVAL;
+        } else {
+            convert_hexstring_bytearray(argv[index], appIEInfo->app_buf, ieLen/2);
+            appIEInfo->app_buflen = ieLen/2;
+        }
+    } else {
+        status = A_EINVAL;
+        printf("Invalid IE format should be of format dd04aabbccdd\n");
+    }
+
+    return status;
+}
+
+A_STATUS
+wmic_validate_mgmtfilter(A_UINT32 *pMgmtFilter, char **argv)
+{
+    A_UINT8 index = optind - 1;
+    A_BOOL  setFilter = FALSE;
+    A_UINT32    filterType;
+
+    if ((strlen(argv[index]) == strlen("set")) &&
+        (strcmp(argv[index], "set") == 0))  
+    {
+        setFilter = TRUE;
+    } else if ((strlen(argv[index]) == strlen("clear")) &&
+        (strcmp(argv[index], "clear") == 0))  
+    {
+        setFilter = FALSE;
+    } else {
+        printf("specify one of set/clear\n");
+        return A_EINVAL;
+    }
+    index++;
+    if ((strlen(argv[index]) == strlen("beacon")) &&
+        (strcmp(argv[index], "beacon") == 0))  
+    {
+        filterType = IEEE80211_FILTER_TYPE_BEACON;
+    } else if ((strlen(argv[index]) == strlen("proberesp")) &&
+        (strcmp(argv[index], "proberesp") == 0))  
+    {
+        filterType = IEEE80211_FILTER_TYPE_PROBE_RESP;
+    } else {
+        printf("specify one of beacon/proberesp\n");
+        return A_EINVAL;
+    }
+    *pMgmtFilter = 0;
+
+    if (setFilter) {
+        *pMgmtFilter |= filterType;
+    } else {
+        *pMgmtFilter &= ~filterType;
+    }
+
+    return A_OK;
+}
+
+void
+printTargetStats(TARGET_STATS *pStats)
+{
+    printf("Target stats\n");
+    printf("------------\n");
+    printf("tx_packets = %llu\n"
+           "tx_bytes = %llu\n"
+           "tx_unicast_pkts  = %llu\n"
+           "tx_unicast_bytes = %llu\n"
+           "tx_multicast_pkts = %llu\n"
+           "tx_multicast_bytes = %llu\n"
+           "tx_broadcast_pkts = %llu\n"
+           "tx_broadcast_bytes = %llu\n"
+           "tx_rts_success_cnt = %llu\n"
+           "tx_packet_per_ac[%d] = %llu\n"
+           "tx_packet_per_ac[%d] = %llu\n"
+           "tx_packet_per_ac[%d] = %llu\n"
+           "tx_packet_per_ac[%d] = %llu\n"
+           "tx_errors = %llu\n"
+           "tx_failed_cnt = %llu\n"
+           "tx_retry_cnt = %llu\n"
+           "tx_rts_fail_cnt = %llu\n"
+           "tx_unicast_rate = %d Kbps\n"
+           "rx_packets = %llu\n"
+           "rx_bytes = %llu\n"
+           "rx_unicast_pkts = %llu\n"
+           "rx_unicast_bytes = %llu\n"
+           "rx_multicast_pkts = %llu\n"
+           "rx_multicast_bytes = %llu\n"
+           "rx_broadcast_pkts = %llu\n"
+           "rx_broadcast_bytes = %llu\n"
+           "rx_fragment_pkt = %llu\n"
+           "rx_errors = %llu\n"
+           "rx_crcerr = %llu\n"
+           "rx_key_cache_miss = %llu\n"
+           "rx_decrypt_err = %llu\n"
+           "rx_duplicate_frames = %llu\n"
+           "rx_unicast_rate = %d Kbps\n"
+           "tkip_local_mic_failure = %llu\n"
+           "tkip_counter_measures_invoked = %llu\n"
+           "tkip_replays = %llu\n"
+           "tkip_format_errors = %llu\n"
+           "ccmp_format_errors = %llu\n"
+           "ccmp_replays = %llu\n"
+           "power_save_failure_cnt = %llu\n"
+           "noise_floor_calibation = %d\n"
+           "cs_bmiss_cnt = %llu\n"
+           "cs_lowRssi_cnt = %llu\n" 
+           "cs_connect_cnt = %llu\n" 
+           "cs_disconnect_cnt = %llu\n" 
+           "cs_aveBeacon_snr= %d\n" 
+           "cs_aveBeacon_rssi = %d\n" 
+           "cs_lastRoam_msec = %d\n"
+           "cs_rssi = %d\n"
+           "cs_snr = %d\n"
+           "lqVal = %d\n"
+           "wow_num_pkts_dropped = %d\n"
+           "wow_num_host_pkt_wakeups = %d\n"
+           "wow_num_host_event_wakeups = %d\n"
+           "wow_num_events_discarded = %d\n",
+           pStats->tx_packets,
+           pStats->tx_bytes,
+           pStats->tx_unicast_pkts,
+           pStats->tx_unicast_bytes,
+           pStats->tx_multicast_pkts,
+           pStats->tx_multicast_bytes,
+           pStats->tx_broadcast_pkts,
+           pStats->tx_broadcast_bytes,
+           pStats->tx_rts_success_cnt,
+           0, pStats->tx_packet_per_ac[0],
+           1, pStats->tx_packet_per_ac[1],
+           2, pStats->tx_packet_per_ac[2],
+           3, pStats->tx_packet_per_ac[3],
+           pStats->tx_errors,
+           pStats->tx_failed_cnt,
+           pStats->tx_retry_cnt,
+           pStats->tx_rts_fail_cnt,
+           pStats->tx_unicast_rate,
+           pStats->rx_packets,
+           pStats->rx_bytes,
+           pStats->rx_unicast_pkts,
+           pStats->rx_unicast_bytes,
+           pStats->rx_multicast_pkts,
+           pStats->rx_multicast_bytes,
+           pStats->rx_broadcast_pkts,
+           pStats->rx_broadcast_bytes,
+           pStats->rx_fragment_pkt,
+           pStats->rx_errors,
+           pStats->rx_crcerr,
+           pStats->rx_key_cache_miss,
+           pStats->rx_decrypt_err,
+           pStats->rx_duplicate_frames,
+           pStats->rx_unicast_rate,
+           pStats->tkip_local_mic_failure,
+           pStats->tkip_counter_measures_invoked,
+           pStats->tkip_replays,
+           pStats->tkip_format_errors,
+           pStats->ccmp_format_errors,
+           pStats->ccmp_replays,
+           pStats->power_save_failure_cnt,
+           pStats->noise_floor_calibation,
+           pStats->cs_bmiss_cnt, 
+           pStats->cs_lowRssi_cnt,
+           pStats->cs_connect_cnt,
+           pStats->cs_disconnect_cnt,
+           pStats->cs_aveBeacon_snr,
+           pStats->cs_aveBeacon_rssi,
+           pStats->cs_lastRoam_msec,
+           pStats->cs_rssi,
+           pStats->cs_snr,
+           pStats->lq_val,
+           pStats->wow_num_pkts_dropped,
+           pStats->wow_num_host_pkt_wakeups,
+           pStats->wow_num_host_event_wakeups,
+           pStats->wow_num_events_discarded
+);
+
+}
+
+static A_INT8 getPhyMode(char *pArg)
+{
+    typedef struct {
+                        char * pOption;
+                        WMI_PHY_MODE phyMode;
+                    } PHY_MODE_MAP;
+
+    //note : add options in lower case only
+    PHY_MODE_MAP phyModeMap [] = 
+                    {  
+                     {"ag",WMI_11AG_MODE},
+                     {"a",WMI_11A_MODE},
+                     {"b",WMI_11B_MODE},
+                     {"g",WMI_11G_MODE},
+                     {"gonly",WMI_11GONLY_MODE},
+                     {NULL}
+                    };
+    int i, j;
+    const char *c;
+
+   for (i = 0 ;phyModeMap[i].pOption != NULL ;i++)
+   {
+        c = phyModeMap[i].pOption ;
+                
+        for(j = 0; pArg[j] != '\0';j++)
+        {
+            if(c[j] != TO_LOWER(pArg[j]))
+            {
+                break;
+            }
+
+            if((c[j+1] == '\0') && (pArg[j+1] == '\0'))
+            {
+                return phyModeMap[i].phyMode;
+            }
+        }        
+   }
+   return -1;
+}
+
+
+
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/tools/wmiconfig/wmiconfig.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/tools/wmiconfig/wmiconfig.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/tools/wmiconfig/wmiconfig.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,137 @@
+/*
+ * Copyright (c) 2004-2005 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * This file contains the definitions for wmiconfig utility
+ *
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/tools/wmiconfig/wmiconfig.h#1 $
+ */
+
+#ifndef _WMI_CONFIG_H_
+#define _WMI_CONFIG_H_
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+enum {
+    WMI_GET_VERSION=501,     /* something that doesn't collide with ascii */
+    WMI_SET_POWER_MODE,
+    WMI_SET_IBSS_PM_CAPS,
+    WMI_SET_PM_PARAMS,
+    WMI_SET_SCAN_PARAMS,
+    WMI_SET_LISTEN_INTERVAL,
+    WMI_SET_BMISS_TIME,
+    WMI_SET_BSS_FILTER,
+    WMI_SET_RSSI_THRESHOLDS,
+    WMI_SET_CHANNEL,
+    WMI_SET_SSID,
+    WMI_SET_BADAP,
+    WMI_DELETE_BADAP,
+    WMI_CREATE_QOS,
+    WMI_DELETE_QOS,
+    WMI_GET_QOS_QUEUE,
+    WMI_GET_TARGET_STATS,
+    WMI_SET_TARGET_ERROR_REPORTING_BITMASK,
+    WMI_SET_AC_PARAMS,
+    WMI_SET_ASSOC_IE,
+    WMI_SET_DISC_TIMEOUT,
+    WMI_SET_ADHOC_BSSID,
+    WMI_SET_OPT_MODE,
+    WMI_OPT_SEND_FRAME,
+    WMI_SET_BEACON_INT,
+    WMI_SET_VOICE_PKT_SIZE,
+    WMI_SET_MAX_SP,
+    WMI_GET_ROAM_TBL,
+    WMI_SET_ROAM_CTRL,
+    WMI_SET_POWERSAVE_TIMERS,
+    WMI_SET_POWERSAVE_TIMERS_PSPOLLTIMEOUT,
+    WMI_SET_POWERSAVE_TIMERS_TRIGGERTIMEOUT,
+    WMI_GET_POWER_MODE,
+    WMI_SET_WLAN_STATE,
+    WMI_GET_ROAM_DATA,
+    WMI_SET_BT_STATUS,
+    WMI_SET_BT_PARAMS,
+    WMI_SET_RETRYLIMITS,
+    WMI_START_SCAN,
+    WMI_SET_FIX_RATES,
+    WMI_GET_FIX_RATES,
+    WMI_SET_SNR_THRESHOLDS,
+    WMI_CLR_RSSISNR,
+    WMI_SET_LQ_THRESHOLDS,
+    WMI_SET_AUTH_MODE,
+    WMI_SET_REASSOC_MODE,
+    WMI_SET_LPREAMBLE,
+    WMI_SET_RTS,
+    WMI_SET_WMM,
+#ifdef USER_KEYS
+    USER_SETKEYS,
+#endif
+    WMI_APSD_TIM_POLICY,
+    WMI_SET_ERROR_DETECTION,
+    WMI_GET_HB_CHALLENGE_RESP,
+    WMI_SET_TXOP,
+    DIAG_ADDR,
+    DIAG_DATA,
+    DIAG_READ,
+    DIAG_WRITE,
+    WMI_GET_RD,
+    WMI_SET_KEEPALIVE,
+    WMI_GET_KEEPALIVE,
+    WMI_SET_APPIE,
+    WMI_SET_MGMT_FRM_RX_FILTER,
+    WMI_DBGLOG_CFG_MODULE,
+    WMI_DBGLOG_GET_DEBUG_LOGS,
+    WMI_SET_HOST_SLEEP_MODE,
+    WMI_SET_WOW_MODE,
+    WMI_GET_WOW_LIST,
+    WMI_ADD_WOW_PATTERN,
+    WMI_DEL_WOW_PATTERN,
+    DIAG_DUMP_CHIP_MEM,
+    WMI_SET_CONNECT_CTRL_FLAGS,
+    DUMP_HTC_CREDITS,
+    USER_SETKEYS_INITRSC,
+    WMI_SCAN_DFSCH_ACT_TIME,
+    WMI_SIMULATED_APSD_TIM_POLICY,
+    WMI_SET_AKMP_INFO,
+    WMI_AKMP_MULTI_PMKID,
+    WMI_NUM_PMKID,
+    WMI_PMKID_ENTRY,
+    WMI_SET_PMKID_LIST,
+    WMI_GET_PMKID_LIST,
+    WMI_SET_IEMASK,
+    WMI_SET_BSS_PMKID_INFO,
+    WMI_BSS_PMKID_ENTRY,
+    WMI_BSSID,
+};
+
+/*
+***************************************************************************
+**  How to form a regcode from CountryCode, Regulatory domain or WWR code:
+**
+**  WWR code is nothing but a special case of Regulatory domain.
+**
+**      code is of type U_INT32
+**
+**      Bit-31  Bit-30      Bit11-0
+**        0       0          xxxx    -> Bit11-0 is a Regulatory Domain
+**        0       1          xxxx    -> Bit11-0 is a WWR code
+**        1       X          xxxx    -> Bit11-0 is a Country code
+**  
+***************************************************************************
+*/
+#define REGCODE_IS_CC_BITSET(x)     ((x) & 0x80000000)
+#define REGCODE_GET_CODE(x)         ((x) & 0xFFF)
+#define REGCODE_IS_WWR_BITSET(x)    ((x) & 0x40000000)
+
+
+typedef struct {
+    A_UINT32        numPMKIDUser;          /* PMKIDs user wants to enter */
+    WMI_SET_PMKID_LIST_CMD  *pmkidInfo;
+} pmkidUserInfo_t;
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _WMI_CONFIG_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/wlan/include/ieee80211.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/wlan/include/ieee80211.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/wlan/include/ieee80211.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,342 @@
+/*-
+ * Copyright (c) 2001 Atsushi Onoe
+ * Copyright (c) 2002-2004 Sam Leffler, Errno Consulting
+ * Copyright (c) 2006 Atheros Communications, Inc.
+ * 
+ * Wireless Network driver for Atheros AR6001
+ * All rights reserved.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+#ifndef _NET80211_IEEE80211_H_
+#define _NET80211_IEEE80211_H_
+
+#include "athstartpack.h"
+
+/*
+ * 802.11 protocol definitions.
+ */
+
+#define IEEE80211_ADDR_LEN  6       /* size of 802.11 address */
+/* is 802.11 address multicast/broadcast? */
+#define IEEE80211_IS_MULTICAST(_a)  (*(_a) & 0x01)
+#define IEEE80211_ADDR_EQ(addr1, addr2)     \
+    (A_MEMCMP(addr1, addr2, IEEE80211_ADDR_LEN) == 0)
+
+#define IEEE80211_KEYBUF_SIZE 16
+#define IEEE80211_MICBUF_SIZE (8+8)  /* space for both tx and rx */
+
+/*
+ * NB: these values are ordered carefully; there are lots of
+ * of implications in any reordering.  In particular beware
+ * that 4 is not used to avoid conflicting with IEEE80211_F_PRIVACY.
+ */
+#define IEEE80211_CIPHER_WEP            0
+#define IEEE80211_CIPHER_TKIP           1
+#define IEEE80211_CIPHER_AES_OCB        2
+#define IEEE80211_CIPHER_AES_CCM        3
+#define IEEE80211_CIPHER_CKIP           5
+#define IEEE80211_CIPHER_CCKM_KRK       6
+#define IEEE80211_CIPHER_NONE           7       /* pseudo value */
+
+#define IEEE80211_CIPHER_MAX            (IEEE80211_CIPHER_NONE+1)
+
+#define IEEE80211_IS_VALID_WEP_CIPHER_LEN(len) \
+        (((len) == 5) || ((len) == 13) || ((len) == 16))
+
+
+
+/*
+ * generic definitions for IEEE 802.11 frames
+ */
+PREPACK struct ieee80211_frame {
+    A_UINT8    i_fc[2];
+    A_UINT8    i_dur[2];
+    A_UINT8    i_addr1[IEEE80211_ADDR_LEN];
+    A_UINT8    i_addr2[IEEE80211_ADDR_LEN];
+    A_UINT8    i_addr3[IEEE80211_ADDR_LEN];
+    A_UINT8    i_seq[2];
+    /* possibly followed by addr4[IEEE80211_ADDR_LEN]; */
+    /* see below */
+} POSTPACK;
+
+#define IEEE80211_FC0_VERSION_MASK          0x03
+#define IEEE80211_FC0_VERSION_SHIFT         0
+#define IEEE80211_FC0_VERSION_0             0x00
+#define IEEE80211_FC0_TYPE_MASK             0x0c
+#define IEEE80211_FC0_TYPE_SHIFT            2
+#define IEEE80211_FC0_TYPE_MGT              0x00
+#define IEEE80211_FC0_TYPE_CTL              0x04
+#define IEEE80211_FC0_TYPE_DATA             0x08
+
+#define IEEE80211_FC0_SUBTYPE_MASK          0xf0
+#define IEEE80211_FC0_SUBTYPE_SHIFT         4
+/* for TYPE_MGT */
+#define IEEE80211_FC0_SUBTYPE_ASSOC_REQ     0x00
+#define IEEE80211_FC0_SUBTYPE_ASSOC_RESP    0x10
+#define IEEE80211_FC0_SUBTYPE_REASSOC_REQ   0x20
+#define IEEE80211_FC0_SUBTYPE_REASSOC_RESP  0x30
+#define IEEE80211_FC0_SUBTYPE_PROBE_REQ     0x40
+#define IEEE80211_FC0_SUBTYPE_PROBE_RESP    0x50
+#define IEEE80211_FC0_SUBTYPE_BEACON        0x80
+#define IEEE80211_FC0_SUBTYPE_ATIM          0x90
+#define IEEE80211_FC0_SUBTYPE_DISASSOC      0xa0
+#define IEEE80211_FC0_SUBTYPE_AUTH          0xb0
+#define IEEE80211_FC0_SUBTYPE_DEAUTH        0xc0
+/* for TYPE_CTL */
+#define IEEE80211_FC0_SUBTYPE_PS_POLL       0xa0
+#define IEEE80211_FC0_SUBTYPE_RTS           0xb0
+#define IEEE80211_FC0_SUBTYPE_CTS           0xc0
+#define IEEE80211_FC0_SUBTYPE_ACK           0xd0
+#define IEEE80211_FC0_SUBTYPE_CF_END        0xe0
+#define IEEE80211_FC0_SUBTYPE_CF_END_ACK    0xf0
+/* for TYPE_DATA (bit combination) */
+#define IEEE80211_FC0_SUBTYPE_DATA          0x00
+#define IEEE80211_FC0_SUBTYPE_CF_ACK        0x10
+#define IEEE80211_FC0_SUBTYPE_CF_POLL       0x20
+#define IEEE80211_FC0_SUBTYPE_CF_ACPL       0x30
+#define IEEE80211_FC0_SUBTYPE_NODATA        0x40
+#define IEEE80211_FC0_SUBTYPE_CFACK         0x50
+#define IEEE80211_FC0_SUBTYPE_CFPOLL        0x60
+#define IEEE80211_FC0_SUBTYPE_CF_ACK_CF_ACK 0x70
+#define IEEE80211_FC0_SUBTYPE_QOS           0x80
+#define IEEE80211_FC0_SUBTYPE_QOS_NULL      0xc0
+
+#define IEEE80211_FC1_DIR_MASK              0x03
+#define IEEE80211_FC1_DIR_NODS              0x00    /* STA->STA */
+#define IEEE80211_FC1_DIR_TODS              0x01    /* STA->AP  */
+#define IEEE80211_FC1_DIR_FROMDS            0x02    /* AP ->STA */
+#define IEEE80211_FC1_DIR_DSTODS            0x03    /* AP ->AP  */
+
+#define IEEE80211_FC1_MORE_FRAG             0x04
+#define IEEE80211_FC1_RETRY                 0x08
+#define IEEE80211_FC1_PWR_MGT               0x10
+#define IEEE80211_FC1_MORE_DATA             0x20
+#define IEEE80211_FC1_WEP                   0x40
+#define IEEE80211_FC1_ORDER                 0x80
+
+#define IEEE80211_SEQ_FRAG_MASK             0x000f
+#define IEEE80211_SEQ_FRAG_SHIFT            0
+#define IEEE80211_SEQ_SEQ_MASK              0xfff0
+#define IEEE80211_SEQ_SEQ_SHIFT             4
+
+#define IEEE80211_NWID_LEN                  32
+
+/*
+ * 802.11 rate set.
+ */
+#define IEEE80211_RATE_SIZE     8       /* 802.11 standard */
+#define IEEE80211_RATE_MAXSIZE  15      /* max rates we'll handle */
+
+#define WMM_NUM_AC                  4   /* 4 AC categories */
+
+#define WMM_PARAM_ACI_M         0x60    /* Mask for ACI field */
+#define WMM_PARAM_ACI_S         5   /* Shift for ACI field */
+#define WMM_PARAM_ACM_M         0x10    /* Mask for ACM bit */
+#define WMM_PARAM_ACM_S         4       /* Shift for ACM bit */
+#define WMM_PARAM_AIFSN_M       0x0f    /* Mask for aifsn field */
+#define WMM_PARAM_LOGCWMIN_M    0x0f    /* Mask for CwMin field (in log) */
+#define WMM_PARAM_LOGCWMAX_M    0xf0    /* Mask for CwMax field (in log) */
+#define WMM_PARAM_LOGCWMAX_S    4   /* Shift for CwMax field */
+
+#define WMM_AC_TO_TID(_ac) (       \
+    ((_ac) == WMM_AC_VO) ? 6 : \
+    ((_ac) == WMM_AC_VI) ? 5 : \
+    ((_ac) == WMM_AC_BK) ? 1 : \
+    0)
+
+#define TID_TO_WMM_AC(_tid) (      \
+    ((_tid) < 1) ? WMM_AC_BE : \
+    ((_tid) < 3) ? WMM_AC_BK : \
+    ((_tid) < 6) ? WMM_AC_VI : \
+    WMM_AC_VO)
+/*
+ * Management information element payloads.
+ */
+
+enum {
+    IEEE80211_ELEMID_SSID       = 0,
+    IEEE80211_ELEMID_RATES      = 1,
+    IEEE80211_ELEMID_FHPARMS    = 2,
+    IEEE80211_ELEMID_DSPARMS    = 3,
+    IEEE80211_ELEMID_CFPARMS    = 4,
+    IEEE80211_ELEMID_TIM        = 5,
+    IEEE80211_ELEMID_IBSSPARMS  = 6,
+    IEEE80211_ELEMID_COUNTRY    = 7,
+    IEEE80211_ELEMID_CHALLENGE  = 16,
+    /* 17-31 reserved for challenge text extension */
+    IEEE80211_ELEMID_PWRCNSTR   = 32,
+    IEEE80211_ELEMID_PWRCAP     = 33,
+    IEEE80211_ELEMID_TPCREQ     = 34,
+    IEEE80211_ELEMID_TPCREP     = 35,
+    IEEE80211_ELEMID_SUPPCHAN   = 36,
+    IEEE80211_ELEMID_CHANSWITCH = 37,
+    IEEE80211_ELEMID_MEASREQ    = 38,
+    IEEE80211_ELEMID_MEASREP    = 39,
+    IEEE80211_ELEMID_QUIET      = 40,
+    IEEE80211_ELEMID_IBSSDFS    = 41,
+    IEEE80211_ELEMID_ERP        = 42,
+    IEEE80211_ELEMID_RSN        = 48,
+    IEEE80211_ELEMID_XRATES     = 50,
+    IEEE80211_ELEMID_TPC        = 150,
+    IEEE80211_ELEMID_CCKM       = 156,
+    IEEE80211_ELEMID_VENDOR     = 221,  /* vendor private */
+};
+
+#define ATH_OUI             0x7f0300        /* Atheros OUI */
+#define ATH_OUI_TYPE        0x01
+#define ATH_OUI_SUBTYPE     0x01
+#define ATH_OUI_VERSION     0x00
+
+#define WPA_OUI             0xf25000
+#define WPA_OUI_TYPE        0x01
+#define WPA_VERSION         1          /* current supported version */
+
+#define WPA_CSE_NULL        0x00
+#define WPA_CSE_WEP40       0x01
+#define WPA_CSE_TKIP        0x02
+#define WPA_CSE_CCMP        0x04
+#define WPA_CSE_WEP104      0x05
+
+#define WPA_ASE_NONE        0x00
+#define WPA_ASE_8021X_UNSPEC    0x01
+#define WPA_ASE_8021X_PSK   0x02
+
+#define RSN_OUI         0xac0f00
+#define RSN_VERSION     1       /* current supported version */
+
+#define RSN_CSE_NULL        0x00
+#define RSN_CSE_WEP40       0x01
+#define RSN_CSE_TKIP        0x02
+#define RSN_CSE_WRAP        0x03
+#define RSN_CSE_CCMP        0x04
+#define RSN_CSE_WEP104      0x05
+
+#define RSN_ASE_NONE        0x00
+#define RSN_ASE_8021X_UNSPEC    0x01
+#define RSN_ASE_8021X_PSK   0x02
+
+#define RSN_CAP_PREAUTH     0x01
+
+#define WMM_OUI         0xf25000
+#define WMM_OUI_TYPE        0x02
+#define WMM_INFO_OUI_SUBTYPE    0x00
+#define WMM_PARAM_OUI_SUBTYPE   0x01
+#define WMM_VERSION     1
+
+/* WMM stream classes */
+#define WMM_NUM_AC  4
+#define WMM_AC_BE   0       /* best effort */
+#define WMM_AC_BK   1       /* background */
+#define WMM_AC_VI   2       /* video */
+#define WMM_AC_VO   3       /* voice */
+
+/* TSPEC related */
+#define ACTION_CATEGORY_CODE_TSPEC                 17
+#define ACTION_CODE_TSPEC_ADDTS                    0
+#define ACTION_CODE_TSPEC_ADDTS_RESP               1
+#define ACTION_CODE_TSPEC_DELTS                    2
+
+typedef enum {
+    TSPEC_STATUS_CODE_ADMISSION_ACCEPTED = 0,
+    TSPEC_STATUS_CODE_ADDTS_INVALID_PARAMS = 0x1,
+    TSPEC_STATUS_CODE_ADDTS_REQUEST_REFUSED = 0x3,
+    TSPEC_STATUS_CODE_UNSPECIFIED_QOS_RELATED_FAILURE = 0xC8,
+    TSPEC_STATUS_CODE_REQUESTED_REFUSED_POLICY_CONFIGURATION = 0xC9,
+    TSPEC_STATUS_CODE_INSUFFCIENT_BANDWIDTH = 0xCA,
+    TSPEC_STATUS_CODE_INVALID_PARAMS = 0xCB,
+    TSPEC_STATUS_CODE_DELTS_SENT    = 0x30,
+    TSPEC_STATUS_CODE_DELTS_RECV    = 0x31,
+} TSPEC_STATUS_CODE;
+
+/*
+ * WMM/802.11e Tspec Element
+ */
+typedef PREPACK struct wmm_tspec_ie_t {
+    A_UINT8     elementId;
+    A_UINT8     len;
+    A_UINT8     oui[3];
+    A_UINT8     ouiType;
+    A_UINT8     ouiSubType;
+    A_UINT8     version;
+    A_UINT16    tsInfo_info;
+    A_UINT8     tsInfo_reserved;
+    A_UINT16    nominalMSDU;
+    A_UINT16    maxMSDU;
+    A_UINT32    minServiceInt;
+    A_UINT32    maxServiceInt;
+    A_UINT32    inactivityInt;
+    A_UINT32    suspensionInt;
+    A_UINT32    serviceStartTime;
+    A_UINT32    minDataRate;
+    A_UINT32    meanDataRate;
+    A_UINT32    peakDataRate;
+    A_UINT32    maxBurstSize;
+    A_UINT32    delayBound;
+    A_UINT32    minPhyRate;
+    A_UINT16    sba;
+    A_UINT16    mediumTime;
+} POSTPACK WMM_TSPEC_IE;
+
+
+/*
+ * BEACON management packets
+ *
+ *  octet timestamp[8]
+ *  octet beacon interval[2]
+ *  octet capability information[2]
+ *  information element
+ *      octet elemid
+ *      octet length
+ *      octet information[length]
+ */
+
+#define IEEE80211_BEACON_INTERVAL(beacon) \
+    ((beacon)[8] | ((beacon)[9] << 8))
+#define IEEE80211_BEACON_CAPABILITY(beacon) \
+    ((beacon)[10] | ((beacon)[11] << 8))
+
+#define IEEE80211_CAPINFO_ESS               0x0001
+#define IEEE80211_CAPINFO_IBSS              0x0002
+#define IEEE80211_CAPINFO_CF_POLLABLE       0x0004
+#define IEEE80211_CAPINFO_CF_POLLREQ        0x0008
+#define IEEE80211_CAPINFO_PRIVACY           0x0010
+#define IEEE80211_CAPINFO_SHORT_PREAMBLE    0x0020
+#define IEEE80211_CAPINFO_PBCC              0x0040
+#define IEEE80211_CAPINFO_CHNL_AGILITY      0x0080
+/* bits 8-9 are reserved */
+#define IEEE80211_CAPINFO_SHORT_SLOTTIME    0x0400
+#define IEEE80211_CAPINFO_APSD              0x0800
+/* bit 12 is reserved */
+#define IEEE80211_CAPINFO_DSSSOFDM          0x2000
+/* bits 14-15 are reserved */
+
+/*
+ * Authentication Modes
+ */
+
+enum ieee80211_authmode {
+    IEEE80211_AUTH_NONE     = 0,
+    IEEE80211_AUTH_OPEN     = 1,
+    IEEE80211_AUTH_SHARED   = 2,
+    IEEE80211_AUTH_8021X    = 3,
+    IEEE80211_AUTH_AUTO     = 4,   /* auto-select/accept */
+    /* NB: these are used only for ioctls */
+    IEEE80211_AUTH_WPA      = 5,  /* WPA/RSN  w/ 802.1x */
+    IEEE80211_AUTH_WPA_PSK  = 6,  /* WPA/RSN  w/ PSK */
+    IEEE80211_AUTH_WPA_CCKM = 7,  /* WPA/RSN IE  w/ CCKM */
+};
+
+#include "athendpack.h"
+
+#endif /* _NET80211_IEEE80211_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/wlan/include/ieee80211_node.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/wlan/include/ieee80211_node.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/wlan/include/ieee80211_node.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,77 @@
+/*-
+ * Copyright (c) 2001 Atsushi Onoe
+ * Copyright (c) 2002-2004 Sam Leffler, Errno Consulting
+ * Copyright (c) 2006 Atheros Communications, Inc.
+ * 
+ * Wireless Network driver for Atheros AR6001
+ * All rights reserved.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
+#ifndef _IEEE80211_NODE_H_
+#define _IEEE80211_NODE_H_
+
+/*
+ * Node locking definitions.
+ */
+#define IEEE80211_NODE_LOCK_INIT(_nt)   A_MUTEX_INIT(&(_nt)->nt_nodelock)
+#define IEEE80211_NODE_LOCK_DESTROY(_nt)
+#define IEEE80211_NODE_LOCK(_nt)        A_MUTEX_LOCK(&(_nt)->nt_nodelock)
+#define IEEE80211_NODE_UNLOCK(_nt)      A_MUTEX_UNLOCK(&(_nt)->nt_nodelock)
+#define IEEE80211_NODE_LOCK_BH(_nt)     A_MUTEX_LOCK(&(_nt)->nt_nodelock)
+#define IEEE80211_NODE_UNLOCK_BH(_nt)   A_MUTEX_UNLOCK(&(_nt)->nt_nodelock)
+#define IEEE80211_NODE_LOCK_ASSERT(_nt)
+
+/*
+ * Node reference counting definitions.
+ *
+ * ieee80211_node_initref   initialize the reference count to 1
+ * ieee80211_node_incref    add a reference
+ * ieee80211_node_decref    remove a reference
+ * ieee80211_node_dectestref    remove a reference and return 1 if this
+ *              is the last reference, otherwise 0
+ * ieee80211_node_refcnt    reference count for printing (only)
+ */
+#define ieee80211_node_initref(_ni)     ((_ni)->ni_refcnt = 1)
+#define ieee80211_node_incref(_ni)      ((_ni)->ni_refcnt++)
+#define ieee80211_node_decref(_ni)      ((_ni)->ni_refcnt--)
+#define ieee80211_node_dectestref(_ni)  (((_ni)->ni_refcnt--) == 0)
+#define ieee80211_node_refcnt(_ni)      ((_ni)->ni_refcnt)
+
+#define IEEE80211_NODE_HASHSIZE 32
+/* simple hash is enough for variation of macaddr */
+#define IEEE80211_NODE_HASH(addr)   \
+    (((const A_UINT8 *)(addr))[IEEE80211_ADDR_LEN - 1] % \
+        IEEE80211_NODE_HASHSIZE)
+
+/*
+ * Table of ieee80211_node instances.  Each ieee80211com
+ * has at least one for holding the scan candidates.
+ * When operating as an access point or in ibss mode there
+ * is a second table for associated stations or neighbors.
+ */
+struct ieee80211_node_table {
+    void                   *nt_wmip;       /* back reference */
+    A_MUTEX_T               nt_nodelock;    /* on node table */
+    struct bss              *nt_node_first; /* information of all nodes */
+    struct bss              *nt_node_last;  /* information of all nodes */
+    struct bss              *nt_hash[IEEE80211_NODE_HASHSIZE];
+    const char              *nt_name;   /* for debugging */
+    A_UINT32                nt_scangen; /* gen# for timeout scan */
+    A_TIMER                 nt_inact_timer;
+    A_UINT8                 isTimerArmed;   /* is the node timer armed */
+};
+
+#define WLAN_NODE_INACT_TIMEOUT_MSEC            10000
+
+#endif /* _IEEE80211_NODE_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,4 @@
+# Copyright (c) 2004-2006 Atheros Communications Inc.
+# All rights reserved.
+!INCLUDE $(_MAKEENVROOT)\makefile.def
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/wlan_node.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/wlan_node.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/wlan_node.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,371 @@
+/*-
+ * Copyright (c) 2001 Atsushi Onoe
+ * Copyright (c) 2002-2004 Sam Leffler, Errno Consulting
+ * Copyright (c) 2004-2005 Atheros Communications
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. The name of the author may not be used to endorse or promote products
+ *    derived from this software without specific prior written permission.
+ *
+ * Alternatively, this software may be distributed under the terms of the
+ * GNU General Public License ("GPL") version 2 as published by the Free
+ * Software Foundation.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/wlan/src/wlan_node.c#1 $
+ */
+/*
+ * IEEE 802.11 node handling support.
+ */
+#include <a_config.h>
+#include <athdefs.h>
+#include <a_types.h>
+#include <a_osapi.h>
+#include <a_debug.h>
+#include <ieee80211.h>
+#include <wlan_api.h>
+#include <ieee80211_node.h>
+#include <htc_api.h>
+#include <wmi.h>
+#include <wmi_api.h>
+
+static void wlan_node_timeout(A_ATH_TIMER arg);
+static bss_t * _ieee80211_find_node(struct ieee80211_node_table *nt,
+                                    const A_UINT8 *macaddr);
+
+bss_t *
+wlan_node_alloc(struct ieee80211_node_table *nt, int wh_size)
+{
+    bss_t *ni;
+
+    ni = A_MALLOC_NOWAIT(sizeof(bss_t));
+
+    if (ni != NULL) {
+        ni->ni_buf = A_MALLOC_NOWAIT(wh_size);
+        if (ni->ni_buf == NULL) {
+            A_FREE(ni);
+            ni = NULL;
+            return ni;
+        }
+    } else {
+        return ni;
+    }
+
+    /* Make sure our lists are clean */
+    ni->ni_list_next = NULL;
+    ni->ni_list_prev = NULL;
+    ni->ni_hash_next = NULL;
+    ni->ni_hash_prev = NULL;
+
+    //
+    // ni_scangen never initialized before and during suspend/resume of winmobile, customer (LG/SEMCO) identified
+    // that some junk has been stored in this, due to this scan list didn't properly updated
+    //
+    ni->ni_scangen	 = 0;
+
+    return ni;
+}
+
+void
+wlan_node_free(bss_t *ni)
+{
+    if (ni->ni_buf != NULL) {
+        A_FREE(ni->ni_buf);
+    }
+    A_FREE(ni);
+}
+
+void
+wlan_setup_node(struct ieee80211_node_table *nt, bss_t *ni,
+                const A_UINT8 *macaddr)
+{
+    int hash;
+
+    A_MEMCPY(ni->ni_macaddr, macaddr, IEEE80211_ADDR_LEN);
+    hash = IEEE80211_NODE_HASH(macaddr);
+    ieee80211_node_initref(ni);     /* mark referenced */
+
+    ni->ni_tstamp = A_GET_MS(WLAN_NODE_INACT_TIMEOUT_MSEC);
+    IEEE80211_NODE_LOCK_BH(nt);
+
+    /* Insert at the end of the node list */
+    ni->ni_list_next = NULL;
+    ni->ni_list_prev = nt->nt_node_last;
+    if(nt->nt_node_last != NULL)
+    {
+        nt->nt_node_last->ni_list_next = ni;
+    }
+    nt->nt_node_last = ni;
+    if(nt->nt_node_first == NULL)
+    {
+        nt->nt_node_first = ni;
+    }
+
+    /* Insert into the hash list i.e. the bucket */
+    if((ni->ni_hash_next = nt->nt_hash[hash]) != NULL)
+    {
+        nt->nt_hash[hash]->ni_hash_prev = ni;
+    }
+    ni->ni_hash_prev = NULL;
+    nt->nt_hash[hash] = ni;
+
+    if (!nt->isTimerArmed) {
+        A_TIMEOUT_MS(&nt->nt_inact_timer, WLAN_NODE_INACT_TIMEOUT_MSEC, 0);
+        nt->isTimerArmed = TRUE;
+    }
+
+    IEEE80211_NODE_UNLOCK_BH(nt);
+}
+
+static bss_t *
+_ieee80211_find_node(struct ieee80211_node_table *nt,
+    const A_UINT8 *macaddr)
+{
+    bss_t *ni;
+    int hash;
+
+    IEEE80211_NODE_LOCK_ASSERT(nt);
+
+    hash = IEEE80211_NODE_HASH(macaddr);
+    for(ni = nt->nt_hash[hash]; ni; ni = ni->ni_hash_next) {
+        if (IEEE80211_ADDR_EQ(ni->ni_macaddr, macaddr)) {
+            ieee80211_node_incref(ni);  /* mark referenced */
+            return ni;
+        }
+    }
+    return NULL;
+}
+
+bss_t *
+wlan_find_node(struct ieee80211_node_table *nt, const A_UINT8 *macaddr)
+{
+    bss_t *ni;
+
+    IEEE80211_NODE_LOCK(nt);
+    ni = _ieee80211_find_node(nt, macaddr);
+    IEEE80211_NODE_UNLOCK(nt);
+    return ni;
+}
+
+/*
+ * Reclaim a node.  If this is the last reference count then
+ * do the normal free work.  Otherwise remove it from the node
+ * table and mark it gone by clearing the back-reference.
+ */
+void
+wlan_node_reclaim(struct ieee80211_node_table *nt, bss_t *ni)
+{
+    IEEE80211_NODE_LOCK(nt);
+
+    if(ni->ni_list_prev == NULL)
+    {
+        /* First in list so fix the list head */
+        nt->nt_node_first = ni->ni_list_next;
+    }
+    else
+    {
+        ni->ni_list_prev->ni_list_next = ni->ni_list_next;
+    }
+
+    if(ni->ni_list_next == NULL)
+    {
+        /* Last in list so fix list tail */
+        nt->nt_node_last = ni->ni_list_prev;
+    }
+    else
+    {
+        ni->ni_list_next->ni_list_prev = ni->ni_list_prev;
+    }
+
+    if(ni->ni_hash_prev == NULL)
+    {
+        /* First in list so fix the list head */
+        int hash;
+        hash = IEEE80211_NODE_HASH(ni->ni_macaddr);
+        nt->nt_hash[hash] = ni->ni_hash_next;
+    }
+    else
+    {
+        ni->ni_hash_prev->ni_hash_next = ni->ni_hash_next;
+    }
+
+    if(ni->ni_hash_next != NULL)
+    {
+        ni->ni_hash_next->ni_hash_prev = ni->ni_hash_prev;
+    }
+    wlan_node_free(ni);
+
+    IEEE80211_NODE_UNLOCK(nt);
+}
+
+static void
+wlan_node_dec_free(bss_t *ni)
+{
+    if (ieee80211_node_dectestref(ni)) {
+        wlan_node_free(ni);
+    }
+}
+
+void
+wlan_free_allnodes(struct ieee80211_node_table *nt)
+{
+    bss_t *ni;
+
+    while ((ni = nt->nt_node_first) != NULL) {
+        wlan_node_reclaim(nt, ni);
+    }
+}
+
+void
+wlan_iterate_nodes(struct ieee80211_node_table *nt, wlan_node_iter_func *f,
+                   void *arg)
+{
+    bss_t *ni;
+    A_UINT32 gen;
+
+    gen = ++nt->nt_scangen;
+
+    IEEE80211_NODE_LOCK(nt);
+    for (ni = nt->nt_node_first; ni; ni = ni->ni_list_next) {
+        if (ni->ni_scangen != gen) {
+            ni->ni_scangen = gen;
+            (void) ieee80211_node_incref(ni);
+            (*f)(arg, ni);
+            wlan_node_dec_free(ni);
+        }
+    }
+    IEEE80211_NODE_UNLOCK(nt);
+}
+
+/*
+ * Node table support.
+ */
+void
+wlan_node_table_init(void *wmip, struct ieee80211_node_table *nt)
+{
+    int i;
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_WLAN, ("node table = 0x%x\n", (A_UINT32)nt));
+    IEEE80211_NODE_LOCK_INIT(nt);
+
+    nt->nt_node_first = nt->nt_node_last = NULL;
+    for(i = 0; i < IEEE80211_NODE_HASHSIZE; i++)
+    {
+        nt->nt_hash[i] = NULL;
+    }
+    A_INIT_TIMER(&nt->nt_inact_timer, wlan_node_timeout, nt);
+    nt->isTimerArmed = FALSE;
+    nt->nt_wmip = wmip;
+}
+
+static void
+wlan_node_timeout(A_ATH_TIMER arg)
+{
+    struct ieee80211_node_table *nt = (struct ieee80211_node_table *)arg;
+    bss_t *bss, *nextBss;
+    A_UINT8 myBssid[IEEE80211_ADDR_LEN], reArmTimer = FALSE;
+
+    wmi_get_current_bssid(nt->nt_wmip, myBssid);
+
+    bss = nt->nt_node_first;
+    while (bss != NULL)
+    {
+        nextBss = bss->ni_list_next;
+        if (A_MEMCMP(myBssid, bss->ni_macaddr, sizeof(myBssid)) != 0)
+        {
+
+            if (bss->ni_tstamp <= A_GET_MS(0))
+            {
+               /*
+                * free up all but the current bss - if set
+                */
+                wlan_node_reclaim(nt, bss);
+            }
+            else
+            {
+                /*
+                 * Re-arm timer, only when we have a bss other than
+                 * current bss AND it is not aged-out.
+                 */
+                reArmTimer = TRUE;
+            }
+        }
+        bss = nextBss;
+    }
+
+    if(reArmTimer)
+        A_TIMEOUT_MS(&nt->nt_inact_timer, WLAN_NODE_INACT_TIMEOUT_MSEC, 0);
+
+    nt->isTimerArmed = reArmTimer;
+}
+
+void
+wlan_node_table_cleanup(struct ieee80211_node_table *nt)
+{
+    A_UNTIMEOUT(&nt->nt_inact_timer);
+    A_DELETE_TIMER(&nt->nt_inact_timer);
+    wlan_free_allnodes(nt);
+    IEEE80211_NODE_LOCK_DESTROY(nt);
+}
+
+bss_t *
+wlan_find_Ssidnode (struct ieee80211_node_table *nt, A_UCHAR *pSsid,
+					A_UINT32 ssidLength, A_BOOL bIsWPA2)
+{
+    bss_t   *ni = NULL;
+	A_UCHAR *pIESsid = NULL;
+
+    IEEE80211_NODE_LOCK (nt);
+
+    for (ni = nt->nt_node_first; ni; ni = ni->ni_list_next) {
+		pIESsid = ni->ni_cie.ie_ssid;
+		if (pIESsid[1] <= 32) {
+
+			// Step 1 : Check SSID
+			if (0x00 == memcmp (pSsid, &pIESsid[2], ssidLength)) {
+
+				// Step 2 : if SSID matches, check WPA or WPA2
+				if (TRUE == bIsWPA2 && NULL != ni->ni_cie.ie_rsn) {
+					ieee80211_node_incref (ni);  /* mark referenced */
+					IEEE80211_NODE_UNLOCK (nt);
+					return ni;
+				}
+				if (FALSE == bIsWPA2 && NULL != ni->ni_cie.ie_wpa) {
+					ieee80211_node_incref(ni);  /* mark referenced */
+					IEEE80211_NODE_UNLOCK (nt);
+					return ni;
+				}
+			}
+		}
+    }
+
+    IEEE80211_NODE_UNLOCK (nt);
+
+    return NULL;
+}
+
+void
+wlan_node_return (struct ieee80211_node_table *nt, bss_t *ni)
+{
+	IEEE80211_NODE_LOCK (nt);
+	wlan_node_dec_free (ni);
+	IEEE80211_NODE_UNLOCK (nt);
+}

Added: trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/wlan_recv_beacon.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/wlan_recv_beacon.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/wlan_recv_beacon.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,192 @@
+/*-
+ * Copyright (c) 2001 Atsushi Onoe
+ * Copyright (c) 2002-2004 Sam Leffler, Errno Consulting
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. The name of the author may not be used to endorse or promote products
+ *    derived from this software without specific prior written permission.
+ *
+ * Alternatively, this software may be distributed under the terms of the
+ * GNU General Public License ("GPL") version 2 as published by the Free
+ * Software Foundation.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+/*
+ * IEEE 802.11 input handling.
+ */
+
+#include "a_config.h"
+#include "athdefs.h"
+#include "a_types.h"
+#include "a_osapi.h"
+#include <wmi.h>
+#include <ieee80211.h>
+#include <wlan_api.h>
+
+#define IEEE80211_VERIFY_LENGTH(_len, _minlen) do {         \
+    if ((_len) < (_minlen)) {                   \
+        return A_EINVAL;                         \
+    }                               \
+} while (0)
+
+#define IEEE80211_VERIFY_ELEMENT(__elem, __maxlen) do {         \
+    if ((__elem) == NULL) {                     \
+        return A_EINVAL;                         \
+    }                               \
+    if ((__elem)[1] > (__maxlen)) {                 \
+        return A_EINVAL;                         \
+    }                               \
+} while (0)
+
+
+/* unaligned little endian access */
+#define LE_READ_2(p)                            \
+    ((A_UINT16)                            \
+     ((((A_UINT8 *)(p))[0]      ) | (((A_UINT8 *)(p))[1] <<  8)))
+
+#define LE_READ_4(p)                            \
+    ((A_UINT32)                            \
+     ((((A_UINT8 *)(p))[0]      ) | (((A_UINT8 *)(p))[1] <<  8) | \
+      (((A_UINT8 *)(p))[2] << 16) | (((A_UINT8 *)(p))[3] << 24)))
+
+
+static int __inline
+iswpaoui(const A_UINT8 *frm)
+{
+    return frm[1] > 3 && LE_READ_4(frm+2) == ((WPA_OUI_TYPE<<24)|WPA_OUI);
+}
+
+static int __inline
+iswmmoui(const A_UINT8 *frm)
+{
+    return frm[1] > 3 && LE_READ_4(frm+2) == ((WMM_OUI_TYPE<<24)|WMM_OUI);
+}
+
+static int __inline
+iswmmparam(const A_UINT8 *frm)
+{
+    return frm[1] > 5 && frm[6] == WMM_PARAM_OUI_SUBTYPE;
+}
+
+static int __inline
+iswmminfo(const A_UINT8 *frm)
+{
+    return frm[1] > 5 && frm[6] == WMM_INFO_OUI_SUBTYPE;
+}
+
+static int __inline
+isatherosoui(const A_UINT8 *frm)
+{
+    return frm[1] > 3 && LE_READ_4(frm+2) == ((ATH_OUI_TYPE<<24)|ATH_OUI);
+} 
+
+static int __inline
+iswscoui(const A_UINT8 *frm)
+{
+    return frm[1] > 3 && LE_READ_4(frm+2) == ((0x04<<24)|WPA_OUI);
+}
+
+A_STATUS
+wlan_parse_beacon(A_UINT8 *buf, int framelen, struct ieee80211_common_ie *cie)
+{
+    A_UINT8 *frm, *efrm;
+
+    frm = buf;
+    efrm = (A_UINT8 *) (frm + framelen);
+
+    /*
+     * beacon/probe response frame format
+     *  [8] time stamp
+     *  [2] beacon interval
+     *  [2] capability information
+     *  [tlv] ssid
+     *  [tlv] supported rates
+     *  [tlv] country information
+     *  [tlv] parameter set (FH/DS)
+     *  [tlv] erp information
+     *  [tlv] extended supported rates
+     *  [tlv] WMM
+     *  [tlv] WPA or RSN
+     *  [tlv] Atheros Advanced Capabilities
+     */
+    IEEE80211_VERIFY_LENGTH(efrm - frm, 12);
+    A_MEMZERO(cie, sizeof(*cie));
+
+    cie->ie_tstamp = frm; frm += 8;
+    cie->ie_beaconInt = A_LE2CPU16(*(A_UINT16 *)frm);  frm += 2;
+    cie->ie_capInfo = A_LE2CPU16(*(A_UINT16 *)frm);  frm += 2;
+    cie->ie_chan = 0;
+
+    while (frm < efrm) {
+        switch (*frm) {
+        case IEEE80211_ELEMID_SSID:
+            cie->ie_ssid = frm;
+            break;
+        case IEEE80211_ELEMID_RATES:
+            cie->ie_rates = frm;
+            break;
+        case IEEE80211_ELEMID_COUNTRY:
+            cie->ie_country = frm;
+            break;
+        case IEEE80211_ELEMID_FHPARMS:
+            break;
+        case IEEE80211_ELEMID_DSPARMS:
+            cie->ie_chan = frm[2];
+            break;
+        case IEEE80211_ELEMID_TIM:
+            cie->ie_tim = frm;
+            break;
+        case IEEE80211_ELEMID_IBSSPARMS:
+            break;
+        case IEEE80211_ELEMID_XRATES:
+            cie->ie_xrates = frm;
+            break;
+        case IEEE80211_ELEMID_ERP:
+            if (frm[1] != 1) {
+                //A_PRINTF("Discarding ERP Element - Bad Len\n");
+                return A_EINVAL;
+            }
+            cie->ie_erp = frm[2];
+            break;
+        case IEEE80211_ELEMID_RSN:
+            cie->ie_rsn = frm;
+            break;
+        case IEEE80211_ELEMID_VENDOR:
+            if (iswpaoui(frm)) {
+                cie->ie_wpa = frm;
+            } else if (iswmmoui(frm)) {
+                cie->ie_wmm = frm;
+            } else if (isatherosoui(frm)) {
+                cie->ie_ath = frm;
+            } else if(iswscoui(frm)) {
+                cie->ie_wsc = frm;
+            }
+            break;
+        default:
+            break;
+        }
+        frm += frm[1] + 2;
+    }
+    IEEE80211_VERIFY_ELEMENT(cie->ie_rates, IEEE80211_RATE_MAXSIZE);
+    IEEE80211_VERIFY_ELEMENT(cie->ie_ssid, IEEE80211_NWID_LEN);
+
+    return A_OK;
+}

Added: trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/wlan_utils.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/wlan_utils.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/wlan/src/wlan_utils.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,59 @@
+/*
+ * Copyright (c) 2004-2005 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * This module implements frequently used wlan utilies
+ *
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/wlan/src/wlan_utils.c#1 $
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#include <a_config.h>
+#include <athdefs.h>
+#include <a_types.h>
+#include <a_osapi.h>
+
+/*
+ * converts ieee channel number to frequency
+ */
+A_UINT16
+wlan_ieee2freq(int chan)
+{
+    if (chan == 14) {
+        return 2484;
+    }
+    if (chan < 14) {    /* 0-13 */
+        return (2407 + (chan*5));
+    }
+    if (chan < 27) {    /* 15-26 */
+        return (2512 + ((chan-15)*20));
+    }
+    return (5000 + (chan*5));
+}
+
+/*
+ * Converts MHz frequency to IEEE channel number.
+ */
+A_UINT32
+wlan_freq2ieee(A_UINT16 freq)
+{
+    if (freq == 2484)
+        return 14;
+    if (freq < 2484)
+        return (freq - 2407) / 5;
+    if (freq < 5000)
+        return 15 + ((freq - 2512) / 20);
+    return (freq - 5000) / 5;
+}

Added: trunk/src/target/AR6kSDK.build_sw.18/host/wmi/makefile
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/wmi/makefile	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/wmi/makefile	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,4 @@
+# Copyright (c) 2004-2006 Atheros Communications Inc.
+# All rights reserved.
+!INCLUDE $(_MAKEENVROOT)\makefile.def
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/wmi/wmi.c
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/wmi/wmi.c	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/wmi/wmi.c	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,3918 @@
+/*
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * This module implements the hardware independent layer of the
+ * Wireless Module Interface (WMI) protocol.
+ *
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/wmi/wmi.c#2 $
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#include <a_config.h>
+#include <athdefs.h>
+#include <a_types.h>
+#include <a_osapi.h>
+#include "htc.h"
+#include "htc_api.h"
+#include "wmi.h"
+#include <ieee80211.h>
+#include <ieee80211_node.h>
+#include <wlan_api.h>
+#include <wmi_api.h>
+#include "dset_api.h"
+#include "gpio_api.h"
+#include "wmi_host.h"
+#include "a_drv.h"
+#include "a_drv_api.h"
+#include "a_debug.h"
+#include "dbglog_api.h"
+
+static A_STATUS wmi_ready_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+
+static A_STATUS wmi_connect_event_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                     int len);
+static A_STATUS wmi_disconnect_event_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                        int len);
+static A_STATUS wmi_tkip_micerr_event_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                        int len);
+static A_STATUS wmi_bssInfo_event_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                     int len);
+static A_STATUS wmi_opt_frame_event_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                       int len);
+static A_STATUS wmi_pstream_timeout_event_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                     int len);
+static A_STATUS wmi_sync_point(struct wmi_t *wmip);
+
+static A_STATUS wmi_bitrate_reply_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                     int len);
+static A_STATUS wmi_ratemask_reply_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                     int len);
+static A_STATUS wmi_channelList_reply_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                         int len);
+static A_STATUS wmi_regDomain_event_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                       int len);
+static A_STATUS wmi_txPwr_reply_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+static A_STATUS wmi_neighborReport_event_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                             int len);
+
+static A_STATUS wmi_dset_open_req_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                     int len);
+#ifdef CONFIG_HOST_DSET_SUPPORT
+static A_STATUS wmi_dset_close_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+static A_STATUS wmi_dset_data_req_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                     int len);
+#endif /* CONFIG_HOST_DSET_SUPPORT */
+
+
+static A_STATUS wmi_scanComplete_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                     int len);
+static A_STATUS wmi_errorEvent_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+static A_STATUS wmi_statsEvent_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+static A_STATUS wmi_rssiThresholdEvent_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+static A_STATUS wmi_hbChallengeResp_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+static A_STATUS wmi_reportErrorEvent_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+static A_STATUS wmi_cac_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+static A_STATUS wmi_roam_tbl_event_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                      int len);
+static A_STATUS wmi_roam_data_event_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                      int len);
+static A_STATUS wmi_get_wow_list_event_rx(struct wmi_t *wmip, A_UINT8 *datap,
+                                      int len);
+static A_STATUS
+wmi_get_pmkid_list_event_rx(struct wmi_t *wmip, A_UINT8 *datap, A_UINT32 len);
+
+#ifdef CONFIG_HOST_GPIO_SUPPORT
+static A_STATUS wmi_gpio_intr_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+static A_STATUS wmi_gpio_data_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+static A_STATUS wmi_gpio_ack_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+#endif /* CONFIG_HOST_GPIO_SUPPORT */
+
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+static A_STATUS
+wmi_tcmd_test_report_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+#endif
+
+static A_STATUS
+wmi_txRetryErrEvent_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+
+static A_STATUS
+wmi_snrThresholdEvent_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+
+static A_STATUS
+wmi_lqThresholdEvent_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+
+static A_BOOL
+wmi_is_bitrate_index_valid(struct wmi_t *wmip, A_UINT32 rateIndex);
+
+static A_STATUS
+wmi_aplistEvent_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+
+static A_STATUS
+wmi_dbglog_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+
+static A_STATUS wmi_keepalive_reply_rx(struct wmi_t *wmip, A_UINT8 *datap, int len);
+
+int wps_enable;
+static const A_INT32 wmi_rateTable[] = {
+    1000,
+    2000,
+    5500,
+    11000,
+    6000,
+    9000,
+    12000,
+    18000,
+    24000,
+    36000,
+    48000,
+    54000,
+    0};
+
+#define MODE_A_SUPPORT_RATE_START       4
+#define MODE_A_SUPPORT_RATE_STOP        11
+
+#define MODE_GONLY_SUPPORT_RATE_START   MODE_A_SUPPORT_RATE_START
+#define MODE_GONLY_SUPPORT_RATE_STOP    MODE_A_SUPPORT_RATE_STOP
+
+#define MODE_B_SUPPORT_RATE_START       0
+#define MODE_B_SUPPORT_RATE_STOP        3
+
+#define MODE_G_SUPPORT_RATE_START       0
+#define MODE_G_SUPPORT_RATE_STOP        11
+
+#define MAX_NUMBER_OF_SUPPORT_RATES     (MODE_G_SUPPORT_RATE_STOP + 1)
+
+/* 802.1d to AC mapping. Refer pg 57 of WMM-test-plan-v1.2 */
+const A_UINT8 up_to_ac[]= {
+                WMM_AC_BE,
+                WMM_AC_BK,
+                WMM_AC_BK,
+                WMM_AC_BE,
+                WMM_AC_VI,
+                WMM_AC_VI,
+                WMM_AC_VO,
+                WMM_AC_VO,
+            };
+
+void *
+wmi_init(void *devt)
+{
+    struct wmi_t *wmip;
+
+    wmip = A_MALLOC(sizeof(struct wmi_t));
+    if (wmip == NULL) {
+        return (NULL);
+    }
+    A_MEMZERO(wmip, sizeof(*wmip));
+    A_MUTEX_INIT(&wmip->wmi_lock);
+    wmip->wmi_devt = devt;
+    wlan_node_table_init(wmip, &wmip->wmi_scan_table);
+    wmi_qos_state_init(wmip);
+    wmip->wmi_powerMode = REC_POWER;
+    wmip->wmi_phyMode = WMI_11G_MODE;
+
+    return (wmip);
+}
+
+void
+wmi_qos_state_init(struct wmi_t *wmip)
+{
+    A_UINT8 i;
+
+    if (wmip == NULL) {
+        return;
+    }
+    LOCK_WMI(wmip);
+
+    /* Initialize QoS States */
+    wmip->wmi_numQoSStream = 0;
+
+    wmip->wmi_fatPipeExists = 0;
+
+    for (i=0; i < WMM_NUM_AC; i++) {
+        wmip->wmi_streamExistsForAC[i]=0;
+    }
+
+        /* Initialize the static Wmi stream Pri to WMM AC mappings Arrays */
+    WMI_INIT_WMISTREAM_AC_MAP(wmip);
+
+    UNLOCK_WMI(wmip);
+
+    A_WMI_SET_NUMDATAENDPTS(wmip->wmi_devt, 1);
+}
+
+void
+wmi_shutdown(struct wmi_t *wmip)
+{
+    if (wmip != NULL) {
+        wlan_node_table_cleanup(&wmip->wmi_scan_table);
+        if (A_IS_MUTEX_VALID(&wmip->wmi_lock)) {
+            A_MUTEX_DELETE(&wmip->wmi_lock);
+        }
+        A_FREE(wmip);
+    }
+}
+
+/*
+ *  performs DIX to 802.3 encapsulation for transmit packets.
+ *  uses passed in buffer.  Returns buffer or NULL if failed.
+ *  Assumes the entire DIX header is contigous and that there is
+ *  enough room in the buffer for a 802.3 mac header and LLC+SNAP headers.
+ */
+A_STATUS
+wmi_dix_2_dot3(struct wmi_t *wmip, void *osbuf)
+{
+    A_UINT8          *datap;
+    A_UINT16         typeorlen;
+    ATH_MAC_HDR      macHdr;
+    ATH_LLC_SNAP_HDR *llcHdr;
+
+    A_ASSERT(osbuf != NULL);
+
+    if (A_NETBUF_HEADROOM(osbuf) <
+        (sizeof(ATH_LLC_SNAP_HDR) + sizeof(WMI_DATA_HDR)))
+    {
+        return A_NO_MEMORY;
+    }
+
+    datap = A_NETBUF_DATA(osbuf);
+
+    typeorlen = *(A_UINT16 *)(datap + ATH_MAC_LEN + ATH_MAC_LEN);
+
+    if (!IS_ETHERTYPE(A_BE2CPU16(typeorlen))) {
+        /*
+         * packet is already in 802.3 format - return success
+         */
+        A_DPRINTF(DBG_WMI, (DBGFMT "packet already 802.3\n", DBGARG));
+        return (A_OK);
+    }
+
+    /*
+     * Save mac fields and length to be inserted later
+     */
+    A_MEMCPY(macHdr.dstMac, datap, ATH_MAC_LEN);
+    A_MEMCPY(macHdr.srcMac, datap + ATH_MAC_LEN, ATH_MAC_LEN);
+    macHdr.typeOrLen = A_CPU2BE16(A_NETBUF_LEN(osbuf) - sizeof(ATH_MAC_HDR) +
+                                  sizeof(ATH_LLC_SNAP_HDR));
+
+    /*
+     * Make room for LLC+SNAP headers
+     */
+    if (A_NETBUF_PUSH(osbuf, sizeof(ATH_LLC_SNAP_HDR)) != A_OK) {
+        return A_NO_MEMORY;
+    }
+
+    datap = A_NETBUF_DATA(osbuf);
+
+    A_MEMCPY(datap, &macHdr, sizeof (ATH_MAC_HDR));
+
+    llcHdr = (ATH_LLC_SNAP_HDR *)(datap + sizeof(ATH_MAC_HDR));
+    llcHdr->dsap      = 0xAA;
+    llcHdr->ssap      = 0xAA;
+    llcHdr->cntl      = 0x03;
+    llcHdr->orgCode[0] = 0x0;
+    llcHdr->orgCode[1] = 0x0;
+    llcHdr->orgCode[2] = 0x0;
+    llcHdr->etherType = typeorlen;
+
+    return (A_OK);
+}
+
+/*
+ * Adds a WMI data header
+ * Assumes there is enough room in the buffer to add header.
+ */
+A_STATUS
+wmi_data_hdr_add(struct wmi_t *wmip, void *osbuf, A_UINT8 msgType)
+{
+    WMI_DATA_HDR     *dtHdr;
+
+    A_ASSERT(osbuf != NULL);
+
+    if (A_NETBUF_PUSH(osbuf, sizeof(WMI_DATA_HDR)) != A_OK) {
+        return A_NO_MEMORY;
+    }
+
+    dtHdr = (WMI_DATA_HDR *)A_NETBUF_DATA(osbuf);
+    dtHdr->info = msgType;
+    dtHdr->rssi = 0;
+
+    return (A_OK);
+}
+
+A_UINT8 wmi_implicit_create_pstream(struct wmi_t *wmip, void *osbuf, A_UINT8 dir, A_UINT8 up)
+{
+    A_UINT8         *datap;
+    A_UINT8         trafficClass = WMM_AC_BE, userPriority = up;
+    ATH_LLC_SNAP_HDR *llcHdr;
+    A_UINT16        ipType = IP_ETHERTYPE;
+    WMI_DATA_HDR     *dtHdr;
+    WMI_CREATE_PSTREAM_CMD  cmd;
+    A_BOOL           streamExists = FALSE;
+
+    A_ASSERT(osbuf != NULL);
+
+    datap = A_NETBUF_DATA(osbuf);
+    
+    if (up == UNDEFINED_PRI) {
+    llcHdr = (ATH_LLC_SNAP_HDR *)(datap + sizeof(WMI_DATA_HDR) +
+                                  sizeof(ATH_MAC_HDR));
+
+        if (llcHdr->etherType == A_CPU2BE16(ipType)) {
+        /* Extract the endpoint info from the TOS field in the IP header */
+        userPriority = A_WMI_IPTOS_TO_USERPRIORITY(((A_UINT8 *)llcHdr) + sizeof(ATH_LLC_SNAP_HDR));
+        }
+    }
+
+    if (userPriority < MAX_NUM_PRI) {
+        trafficClass = convert_userPriority_to_trafficClass(userPriority);
+    }
+
+    dtHdr = (WMI_DATA_HDR *)datap;
+    if(dir==UPLINK_TRAFFIC)
+        dtHdr->info |= (userPriority & WMI_DATA_HDR_UP_MASK) << WMI_DATA_HDR_UP_SHIFT;  /* lower 3-bits are 802.1d priority */
+
+    LOCK_WMI(wmip);
+    streamExists = wmip->wmi_fatPipeExists; 
+    UNLOCK_WMI(wmip);
+
+    if (!(streamExists & (1 << trafficClass))) {
+
+        A_MEMZERO(&cmd, sizeof(cmd));
+	    cmd.trafficClass = trafficClass;
+	    cmd.userPriority = userPriority;
+		cmd.inactivityInt = WMI_IMPLICIT_PSTREAM_INACTIVITY_INT;
+            /* Implicit streams are created with TSID 0xFF */
+        cmd.tsid = WMI_IMPLICIT_PSTREAM;
+        wmi_create_pstream_cmd(wmip, &cmd);
+    }
+
+    return trafficClass;
+}
+
+WMI_PRI_STREAM_ID
+wmi_get_stream_id(struct wmi_t *wmip, A_UINT8 trafficClass)
+{
+    return WMI_ACCESSCATEGORY_WMISTREAM(wmip, trafficClass);
+}
+
+/*
+ *  performs 802.3 to DIX encapsulation for received packets.
+ *  Assumes the entire 802.3 header is contigous.
+ */
+A_STATUS
+wmi_dot3_2_dix(struct wmi_t *wmip, void *osbuf)
+{
+    A_UINT8          *datap;
+    ATH_MAC_HDR      macHdr;
+    ATH_LLC_SNAP_HDR *llcHdr;
+
+    A_ASSERT(osbuf != NULL);
+    datap = A_NETBUF_DATA(osbuf);
+
+    A_MEMCPY(&macHdr, datap, sizeof(ATH_MAC_HDR));
+    llcHdr = (ATH_LLC_SNAP_HDR *)(datap + sizeof(ATH_MAC_HDR));
+    macHdr.typeOrLen = llcHdr->etherType;
+
+    if (A_NETBUF_PULL(osbuf, sizeof(ATH_LLC_SNAP_HDR)) != A_OK) {
+        return A_NO_MEMORY;
+    }
+
+    datap = A_NETBUF_DATA(osbuf);
+
+    A_MEMCPY(datap, &macHdr, sizeof (ATH_MAC_HDR));
+
+    return (A_OK);
+}
+
+/*
+ * Removes a WMI data header
+ */
+A_STATUS
+wmi_data_hdr_remove(struct wmi_t *wmip, void *osbuf)
+{
+    A_ASSERT(osbuf != NULL);
+
+    return (A_NETBUF_PULL(osbuf, sizeof(WMI_DATA_HDR)));
+}
+
+void
+wmi_iterate_nodes(struct wmi_t *wmip, wlan_node_iter_func *f, void *arg)
+{
+    wlan_iterate_nodes(&wmip->wmi_scan_table, f, arg);
+}
+
+/*
+ * WMI Extended Event received from Target.
+ */
+A_STATUS
+wmi_control_rx_xtnd(struct wmi_t *wmip, void *osbuf)
+{
+    WMIX_CMD_HDR *cmd;
+    A_UINT16 id;
+    A_UINT8 *datap;
+    A_UINT32 len;
+    A_STATUS status = A_OK;
+
+    if (A_NETBUF_LEN(osbuf) < sizeof(WMIX_CMD_HDR)) {
+        A_DPRINTF(DBG_WMI, (DBGFMT "bad packet 1\n", DBGARG));
+        wmip->wmi_stats.cmd_len_err++;
+        A_NETBUF_FREE(osbuf);
+        return A_ERROR;
+    }
+
+    cmd = (WMIX_CMD_HDR *)A_NETBUF_DATA(osbuf);
+    id = cmd->commandId;
+
+    if (A_NETBUF_PULL(osbuf, sizeof(WMIX_CMD_HDR)) != A_OK) {
+        A_DPRINTF(DBG_WMI, (DBGFMT "bad packet 2\n", DBGARG));
+        wmip->wmi_stats.cmd_len_err++;
+        A_NETBUF_FREE(osbuf);
+        return A_ERROR;
+    }
+
+    datap = A_NETBUF_DATA(osbuf);
+    len = A_NETBUF_LEN(osbuf);
+
+    switch (id) {
+    case (WMIX_DSETOPENREQ_EVENTID):
+        status = wmi_dset_open_req_rx(wmip, datap, len);
+        break;
+#ifdef CONFIG_HOST_DSET_SUPPORT
+    case (WMIX_DSETCLOSE_EVENTID):
+        status = wmi_dset_close_rx(wmip, datap, len);
+        break;
+    case (WMIX_DSETDATAREQ_EVENTID):
+        status = wmi_dset_data_req_rx(wmip, datap, len);
+        break;
+#endif /* CONFIG_HOST_DSET_SUPPORT */
+#ifdef CONFIG_HOST_GPIO_SUPPORT
+    case (WMIX_GPIO_INTR_EVENTID):
+        wmi_gpio_intr_rx(wmip, datap, len);
+        break;
+    case (WMIX_GPIO_DATA_EVENTID):
+        wmi_gpio_data_rx(wmip, datap, len);
+        break;
+    case (WMIX_GPIO_ACK_EVENTID):
+        wmi_gpio_ack_rx(wmip, datap, len);
+        break;
+#endif /* CONFIG_HOST_GPIO_SUPPORT */
+    case (WMIX_HB_CHALLENGE_RESP_EVENTID):
+        wmi_hbChallengeResp_rx(wmip, datap, len);
+        break;
+    case (WMIX_DBGLOG_EVENTID):
+        wmi_dbglog_event_rx(wmip, datap, len);
+        break;
+    default:
+        A_DPRINTF(DBG_WMI|DBG_ERROR,
+            (DBGFMT "Unknown id 0x%x\n", DBGARG, id));
+        wmip->wmi_stats.cmd_id_err++;
+        status = A_ERROR;
+        break;
+    }
+
+    return status;
+}
+
+/*
+ * Control Path
+ */
+A_UINT32 cmdRecvNum;
+
+A_STATUS
+wmi_control_rx(struct wmi_t *wmip, void *osbuf)
+{
+    WMI_CMD_HDR *cmd;
+    A_UINT16 id;
+    A_UINT8 *datap;
+    A_UINT32 len, i, loggingReq;
+    A_STATUS status = A_OK;
+
+    A_ASSERT(osbuf != NULL);
+    if (A_NETBUF_LEN(osbuf) < sizeof(WMI_CMD_HDR)) {
+        A_DPRINTF(DBG_WMI, (DBGFMT "bad packet 1\n", DBGARG));
+        wmip->wmi_stats.cmd_len_err++;
+        A_NETBUF_FREE(osbuf);
+        return A_ERROR;
+    }
+
+    cmd = (WMI_CMD_HDR *)A_NETBUF_DATA(osbuf);
+    id = cmd->commandId;
+
+    if (A_NETBUF_PULL(osbuf, sizeof(WMI_CMD_HDR)) != A_OK) {
+        A_DPRINTF(DBG_WMI, (DBGFMT "bad packet 2\n", DBGARG));
+        wmip->wmi_stats.cmd_len_err++;
+        A_NETBUF_FREE(osbuf);
+        return A_ERROR;
+    }
+
+    datap = A_NETBUF_DATA(osbuf);
+    len = A_NETBUF_LEN(osbuf);
+
+    ar6000_get_driver_cfg(wmip->wmi_devt,
+                    AR6000_DRIVER_CFG_LOG_RAW_WMI_MSGS,
+                    &loggingReq);
+
+    if(loggingReq) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_WMI, ("WMI %d \n",id));
+        AR_DEBUG_PRINTF(ATH_DEBUG_WMI, ("WMI recv, MsgNo %d : ", cmdRecvNum));
+        for(i = 0; i < len; i++)
+            AR_DEBUG_PRINTF(ATH_DEBUG_WMI, ("%x ", datap[i]));
+        AR_DEBUG_PRINTF(ATH_DEBUG_WMI, ("\n"));
+    }
+
+    LOCK_WMI(wmip); 
+    cmdRecvNum++; 
+    UNLOCK_WMI(wmip);
+
+    switch (id) {
+    case (WMI_GET_BITRATE_CMDID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_GET_BITRATE_CMDID\n", DBGARG));
+        status = wmi_bitrate_reply_rx(wmip, datap, len);
+        break;
+    case (WMI_GET_CHANNEL_LIST_CMDID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_GET_CHANNEL_LIST_CMDID\n", DBGARG));
+        status = wmi_channelList_reply_rx(wmip, datap, len);
+        break;
+    case (WMI_GET_TX_PWR_CMDID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_GET_TX_PWR_CMDID\n", DBGARG));
+        status = wmi_txPwr_reply_rx(wmip, datap, len);
+        break;
+    case (WMI_READY_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_READY_EVENTID\n", DBGARG));
+        status = wmi_ready_event_rx(wmip, datap, len);
+        A_WMI_SEND_EVENT_TO_APP(wmip->wmi_devt, id, datap, len);
+        A_WMI_DBGLOG_INIT_DONE(wmip->wmi_devt);
+        break;
+    case (WMI_CONNECT_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_CONNECT_EVENTID\n", DBGARG));
+        status = wmi_connect_event_rx(wmip, datap, len);
+        A_WMI_SEND_EVENT_TO_APP(wmip->wmi_devt, id, datap, len);
+        break;
+    case (WMI_DISCONNECT_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_DISCONNECT_EVENTID\n", DBGARG));
+        status = wmi_disconnect_event_rx(wmip, datap, len);
+        A_WMI_SEND_EVENT_TO_APP(wmip->wmi_devt, id, datap, len);
+        break;
+    case (WMI_TKIP_MICERR_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_TKIP_MICERR_EVENTID\n", DBGARG));
+        status = wmi_tkip_micerr_event_rx(wmip, datap, len);
+        break;
+    case (WMI_BSSINFO_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_BSSINFO_EVENTID\n", DBGARG));
+        status = wmi_bssInfo_event_rx(wmip, datap, len);
+        A_WMI_SEND_EVENT_TO_APP(wmip->wmi_devt, id, datap, len);
+        break;
+    case (WMI_REGDOMAIN_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_REGDOMAIN_EVENTID\n", DBGARG));
+        status = wmi_regDomain_event_rx(wmip, datap, len);
+        break;
+    case (WMI_PSTREAM_TIMEOUT_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_PSTREAM_TIMEOUT_EVENTID\n", DBGARG));
+        status = wmi_pstream_timeout_event_rx(wmip, datap, len);
+            /* pstreams are fatpipe abstractions that get implicitly created.
+             * User apps only deal with thinstreams. creation of a thinstream
+             * by the user or data traffic flow in an AC triggers implicit
+             * pstream creation. Do we need to send this event to App..?
+             * no harm in sending it.
+             */
+        A_WMI_SEND_EVENT_TO_APP(wmip->wmi_devt, id, datap, len);
+        break;
+    case (WMI_NEIGHBOR_REPORT_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_NEIGHBOR_REPORT_EVENTID\n", DBGARG));
+        status = wmi_neighborReport_event_rx(wmip, datap, len);
+        break;
+    case (WMI_SCAN_COMPLETE_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_SCAN_COMPLETE_EVENTID\n", DBGARG));
+        status = wmi_scanComplete_rx(wmip, datap, len);
+        A_WMI_SEND_EVENT_TO_APP(wmip->wmi_devt, id, datap, len);
+        break;
+    case (WMI_CMDERROR_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_CMDERROR_EVENTID\n", DBGARG));
+        status = wmi_errorEvent_rx(wmip, datap, len);
+        break;
+    case (WMI_REPORT_STATISTICS_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_REPORT_STATISTICS_EVENTID\n", DBGARG));
+        status = wmi_statsEvent_rx(wmip, datap, len);
+        break;
+    case (WMI_RSSI_THRESHOLD_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_RSSI_THRESHOLD_EVENTID\n", DBGARG));
+        status = wmi_rssiThresholdEvent_rx(wmip, datap, len);
+        break;
+    case (WMI_ERROR_REPORT_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_ERROR_REPORT_EVENTID\n", DBGARG));
+        status = wmi_reportErrorEvent_rx(wmip, datap, len);
+        A_WMI_SEND_EVENT_TO_APP(wmip->wmi_devt, id, datap, len);
+        break;
+    case (WMI_OPT_RX_FRAME_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_OPT_RX_FRAME_EVENTID\n", DBGARG));
+        status = wmi_opt_frame_event_rx(wmip, datap, len);
+        break;
+    case (WMI_REPORT_ROAM_TBL_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_REPORT_ROAM_TBL_EVENTID\n", DBGARG));
+        status = wmi_roam_tbl_event_rx(wmip, datap, len);
+        break;
+    case (WMI_EXTENSION_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_EXTENSION_EVENTID\n", DBGARG));
+        status = wmi_control_rx_xtnd(wmip, osbuf);
+        break;
+    case (WMI_CAC_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_CAC_EVENTID\n", DBGARG));
+        status = wmi_cac_event_rx(wmip, datap, len);
+        break;
+    case (WMI_REPORT_ROAM_DATA_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_REPORT_ROAM_DATA_EVENTID\n", DBGARG));
+        status = wmi_roam_data_event_rx(wmip, datap, len);
+        break;
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+    case (WMI_TEST_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_TEST_EVENTID\n", DBGARG));
+        status = wmi_tcmd_test_report_rx(wmip, datap, len);
+        break;
+#endif
+    case (WMI_GET_FIXRATES_CMDID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_GET_FIXRATES_CMDID\n", DBGARG));
+        status = wmi_ratemask_reply_rx(wmip, datap, len);
+        break;
+    case (WMI_TX_RETRY_ERR_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_TX_RETRY_ERR_EVENTID\n", DBGARG));
+        status = wmi_txRetryErrEvent_rx(wmip, datap, len);
+        A_WMI_SEND_EVENT_TO_APP(wmip->wmi_devt, id, datap, len);
+        break;
+    case (WMI_SNR_THRESHOLD_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_SNR_THRESHOLD_EVENTID\n", DBGARG));
+        status = wmi_snrThresholdEvent_rx(wmip, datap, len);
+        A_WMI_SEND_EVENT_TO_APP(wmip->wmi_devt, id, datap, len);
+        break;
+    case (WMI_LQ_THRESHOLD_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_LQ_THRESHOLD_EVENTID\n", DBGARG));
+        status = wmi_lqThresholdEvent_rx(wmip, datap, len);
+        A_WMI_SEND_EVENT_TO_APP(wmip->wmi_devt, id, datap, len);
+        break;
+    case (WMI_APLIST_EVENTID):
+        AR_DEBUG_PRINTF(ATH_DEBUG_WMI, ("Received APLIST Event\n"));
+        status = wmi_aplistEvent_rx(wmip, datap, len);
+        break;
+    case (WMI_GET_KEEPALIVE_CMDID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_GET_KEEPALIVE_CMDID\n", DBGARG));
+        status = wmi_keepalive_reply_rx(wmip, datap, len);
+        break;
+    case (WMI_GET_WOW_LIST_EVENTID):
+        status = wmi_get_wow_list_event_rx(wmip, datap, len);
+        break;
+    case (WMI_GET_PMKID_LIST_EVENTID):
+        A_DPRINTF(DBG_WMI, (DBGFMT "WMI_GET_PMKID_LIST Event\n", DBGARG));
+        status = wmi_get_pmkid_list_event_rx(wmip, datap, len);
+        break;
+    default:
+        A_DPRINTF(DBG_WMI|DBG_ERROR,
+            (DBGFMT "Unknown id 0x%x\n", DBGARG, id));
+        wmip->wmi_stats.cmd_id_err++;
+        status = A_ERROR;
+        break;
+    }
+
+    A_NETBUF_FREE(osbuf);
+
+    return status;
+}
+
+static A_STATUS
+wmi_ready_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_READY_EVENT *ev = (WMI_READY_EVENT *)datap;
+
+    if (len < sizeof(WMI_READY_EVENT)) {
+        return A_EINVAL;
+    }
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+    wmip->wmi_ready = TRUE;
+    A_WMI_READY_EVENT(wmip->wmi_devt, ev->macaddr, ev->phyCapability);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_connect_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_CONNECT_EVENT *ev;
+
+    if (len < sizeof(WMI_CONNECT_EVENT)) {
+        return A_EINVAL;
+    }
+    ev = (WMI_CONNECT_EVENT *)datap;
+    A_DPRINTF(DBG_WMI,
+        (DBGFMT "freq %d bssid %2.2x:%2.2x:%2.2x:%2.2x:%2.2x:%2.2x\n",
+        DBGARG, ev->channel,
+        ev->bssid[0], ev->bssid[1], ev->bssid[2],
+        ev->bssid[3], ev->bssid[4], ev->bssid[5]));
+
+    A_MEMCPY(wmip->wmi_bssid, ev->bssid, ATH_MAC_LEN);
+
+    A_WMI_CONNECT_EVENT(wmip->wmi_devt, ev->channel, ev->bssid,
+                         ev->listenInterval, ev->beaconInterval,
+                         ev->networkType, ev->beaconIeLen,
+                         ev->assocReqLen, ev->assocRespLen,
+                         ev->assocInfo);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_regDomain_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_REG_DOMAIN_EVENT *ev;
+
+    if (len < sizeof(*ev)) {
+        return A_EINVAL;
+    }
+    ev = (WMI_REG_DOMAIN_EVENT *)datap;
+
+    A_WMI_REGDOMAIN_EVENT(wmip->wmi_devt, ev->regDomain);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_neighborReport_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_NEIGHBOR_REPORT_EVENT *ev;
+    int numAps;
+
+    if (len < sizeof(*ev)) {
+        return A_EINVAL;
+    }
+    ev = (WMI_NEIGHBOR_REPORT_EVENT *)datap;
+    numAps = ev->numberOfAps;
+
+    if (len < (int)(sizeof(*ev) + ((numAps - 1) * sizeof(WMI_NEIGHBOR_INFO)))) {
+        return A_EINVAL;
+    }
+
+    A_WMI_NEIGHBORREPORT_EVENT(wmip->wmi_devt, numAps, ev->neighbor);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_disconnect_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_DISCONNECT_EVENT *ev;
+
+    if (len < sizeof(WMI_DISCONNECT_EVENT)) {
+        return A_EINVAL;
+    }
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    ev = (WMI_DISCONNECT_EVENT *)datap;
+
+    A_MEMZERO(wmip->wmi_bssid, sizeof(wmip->wmi_bssid));
+
+    A_WMI_DISCONNECT_EVENT(wmip->wmi_devt, ev->disconnectReason, ev->bssid,
+                            ev->assocRespLen, ev->assocInfo, ev->protocolReasonStatus);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_tkip_micerr_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_TKIP_MICERR_EVENT *ev;
+
+    if (len < sizeof(*ev)) {
+        return A_EINVAL;
+    }
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    ev = (WMI_TKIP_MICERR_EVENT *)datap;
+    A_WMI_TKIP_MICERR_EVENT(wmip->wmi_devt, ev->keyid, ev->ismcast);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_bssInfo_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    bss_t *bss;
+    WMI_BSS_INFO_HDR *bih;
+    A_UINT8 *buf;
+    A_UINT32 nodeCachingAllowed;
+
+    if (len <= sizeof(WMI_BSS_INFO_HDR)) {
+        return A_EINVAL;
+    }
+
+    A_WMI_BSSINFO_EVENT_RX(wmip->wmi_devt, datap, len);
+    /* What is driver config for wlan node caching? */
+    if(ar6000_get_driver_cfg(wmip->wmi_devt,
+                    AR6000_DRIVER_CFG_GET_WLANNODECACHING,
+                    &nodeCachingAllowed) != A_OK) {
+        return A_EINVAL;
+    }
+
+    if(!nodeCachingAllowed) {
+        return A_OK;
+    }
+
+    bih = (WMI_BSS_INFO_HDR *)datap;
+    buf = datap + sizeof(WMI_BSS_INFO_HDR);
+    len -= sizeof(WMI_BSS_INFO_HDR);
+
+    A_DPRINTF(DBG_WMI2, (DBGFMT "bssInfo event - ch %u, rssi %02x, "
+              "bssid \"%02x:%02x:%02x:%02x:%02x:%02x\"\n", DBGARG,
+              bih->channel, (unsigned char) bih->rssi, bih->bssid[0],
+              bih->bssid[1], bih->bssid[2], bih->bssid[3], bih->bssid[4],
+              bih->bssid[5]));
+
+	if(wps_enable && (bih->frameType == PROBERESP_FTYPE) )
+		return A_OK;
+
+    bss = wlan_find_node(&wmip->wmi_scan_table, bih->bssid);
+    if (bss != NULL) {
+        /*
+         * Free up the node.  Not the most efficient process given
+         * we are about to allocate a new node but it is simple and should be
+         * adequate.
+         */
+        wlan_node_reclaim(&wmip->wmi_scan_table, bss);
+    }
+
+    bss = wlan_node_alloc(&wmip->wmi_scan_table, len);
+    if (bss == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    bss->ni_snr        = bih->snr;
+    bss->ni_rssi       = bih->rssi;
+    A_ASSERT(bss->ni_buf != NULL);
+    A_MEMCPY(bss->ni_buf, buf, len);
+
+    if (wlan_parse_beacon(bss->ni_buf, len, &bss->ni_cie) != A_OK) {
+        wlan_node_free(bss);
+        return A_EINVAL;
+    }
+
+    /*
+     * Update the frequency in ie_chan, overwriting of channel number
+     * which is done in wlan_parse_beacon
+     */
+    bss->ni_cie.ie_chan = bih->channel;
+    wlan_setup_node(&wmip->wmi_scan_table, bss, bih->bssid);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_opt_frame_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    bss_t *bss;
+    WMI_OPT_RX_INFO_HDR *bih;
+    A_UINT8 *buf;
+
+    if (len <= sizeof(WMI_OPT_RX_INFO_HDR)) {
+        return A_EINVAL;
+    }
+
+    bih = (WMI_OPT_RX_INFO_HDR *)datap;
+    buf = datap + sizeof(WMI_OPT_RX_INFO_HDR);
+    len -= sizeof(WMI_OPT_RX_INFO_HDR);
+
+    A_DPRINTF(DBG_WMI2, (DBGFMT "opt frame event %2.2x:%2.2x\n", DBGARG,
+        bih->bssid[4], bih->bssid[5]));
+
+    bss = wlan_find_node(&wmip->wmi_scan_table, bih->bssid);
+    if (bss != NULL) {
+        /*
+         * Free up the node.  Not the most efficient process given
+         * we are about to allocate a new node but it is simple and should be
+         * adequate.
+         */
+        wlan_node_reclaim(&wmip->wmi_scan_table, bss);
+    }
+
+    bss = wlan_node_alloc(&wmip->wmi_scan_table, len);
+    if (bss == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    bss->ni_snr        = bih->snr;
+    bss->ni_cie.ie_chan = bih->channel;
+    A_ASSERT(bss->ni_buf != NULL);
+    A_MEMCPY(bss->ni_buf, buf, len);
+    wlan_setup_node(&wmip->wmi_scan_table, bss, bih->bssid);
+
+    return A_OK;
+}
+
+    /* This event indicates inactivity timeout of a fatpipe(pstream)
+     * at the target 
+     */
+static A_STATUS
+wmi_pstream_timeout_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_PSTREAM_TIMEOUT_EVENT *ev;
+
+    if (len < sizeof(WMI_PSTREAM_TIMEOUT_EVENT)) {
+        return A_EINVAL;
+    }
+
+    A_DPRINTF(DBG_WMI, (DBGFMT "wmi_pstream_timeout_event_rx\n", DBGARG));
+
+    ev = (WMI_PSTREAM_TIMEOUT_EVENT *)datap;
+
+        /* When the pstream (fat pipe == AC) timesout, it means there were no
+         * thinStreams within this pstream & it got implicitly created due to
+         * data flow on this AC. We start the inactivity timer only for
+         * implicitly created pstream. Just reset the host state.
+         */
+        /* Set the activeTsids for this AC to 0 */
+    LOCK_WMI(wmip);
+    wmip->wmi_streamExistsForAC[ev->trafficClass]=0;
+    wmip->wmi_fatPipeExists &= ~(1 << ev->trafficClass);
+    UNLOCK_WMI(wmip);
+
+        /*Indicate inactivity to driver layer for this fatpipe (pstream)*/
+    A_WMI_STREAM_TX_INACTIVE(wmip->wmi_devt, ev->trafficClass);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_bitrate_reply_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_BIT_RATE_CMD *reply;
+    A_INT32 rate;
+
+    if (len < sizeof(WMI_BIT_RATE_CMD)) {
+        return A_EINVAL;
+    }
+    reply = (WMI_BIT_RATE_CMD *)datap;
+    A_DPRINTF(DBG_WMI,
+        (DBGFMT "Enter - rateindex %d\n", DBGARG, reply->rateIndex));
+
+    if (reply->rateIndex == RATE_AUTO) {
+        rate = RATE_AUTO;
+    } else {
+        rate = wmi_rateTable[(A_UINT32) reply->rateIndex];
+    }
+
+    A_WMI_BITRATE_RX(wmip->wmi_devt, rate);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_ratemask_reply_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_FIX_RATES_CMD *reply;
+
+    if (len < sizeof(WMI_BIT_RATE_CMD)) {
+        return A_EINVAL;
+    }
+    reply = (WMI_FIX_RATES_CMD *)datap;
+    A_DPRINTF(DBG_WMI,
+        (DBGFMT "Enter - fixed rate mask %x\n", DBGARG, reply->fixRateMask));
+
+    A_WMI_RATEMASK_RX(wmip->wmi_devt, reply->fixRateMask);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_channelList_reply_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_CHANNEL_LIST_REPLY *reply;
+
+    if (len < sizeof(WMI_CHANNEL_LIST_REPLY)) {
+        return A_EINVAL;
+    }
+    reply = (WMI_CHANNEL_LIST_REPLY *)datap;
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    A_WMI_CHANNELLIST_RX(wmip->wmi_devt, reply->numChannels,
+                          reply->channelList);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_txPwr_reply_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_TX_PWR_REPLY *reply;
+
+    if (len < sizeof(*reply)) {
+        return A_EINVAL;
+    }
+    reply = (WMI_TX_PWR_REPLY *)datap;
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    A_WMI_TXPWR_RX(wmip->wmi_devt, reply->dbM);
+
+    return A_OK;
+}
+static A_STATUS
+wmi_keepalive_reply_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_GET_KEEPALIVE_CMD *reply;
+
+    if (len < sizeof(*reply)) {
+        return A_EINVAL;
+    }
+    reply = (WMI_GET_KEEPALIVE_CMD *)datap;
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    A_WMI_KEEPALIVE_RX(wmip->wmi_devt, reply->configured);
+
+    return A_OK;
+}
+
+
+static A_STATUS
+wmi_dset_open_req_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMIX_DSETOPENREQ_EVENT *dsetopenreq;
+
+    if (len < sizeof(WMIX_DSETOPENREQ_EVENT)) {
+        return A_EINVAL;
+    }
+    dsetopenreq = (WMIX_DSETOPENREQ_EVENT *)datap;
+    A_DPRINTF(DBG_WMI,
+        (DBGFMT "Enter - dset_id=0x%x\n", DBGARG, dsetopenreq->dset_id));
+    A_WMI_DSET_OPEN_REQ(wmip->wmi_devt,
+                        dsetopenreq->dset_id,
+                        dsetopenreq->targ_dset_handle,
+                        dsetopenreq->targ_reply_fn,
+                        dsetopenreq->targ_reply_arg);
+
+    return A_OK;
+}
+
+#ifdef CONFIG_HOST_DSET_SUPPORT
+static A_STATUS
+wmi_dset_close_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMIX_DSETCLOSE_EVENT *dsetclose;
+
+    if (len < sizeof(WMIX_DSETCLOSE_EVENT)) {
+        return A_EINVAL;
+    }
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    dsetclose = (WMIX_DSETCLOSE_EVENT *)datap;
+    A_WMI_DSET_CLOSE(wmip->wmi_devt, dsetclose->access_cookie);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_dset_data_req_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMIX_DSETDATAREQ_EVENT *dsetdatareq;
+
+    if (len < sizeof(WMIX_DSETDATAREQ_EVENT)) {
+        return A_EINVAL;
+    }
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    dsetdatareq = (WMIX_DSETDATAREQ_EVENT *)datap;
+    A_WMI_DSET_DATA_REQ(wmip->wmi_devt,
+                         dsetdatareq->access_cookie,
+                         dsetdatareq->offset,
+                         dsetdatareq->length,
+                         dsetdatareq->targ_buf,
+                         dsetdatareq->targ_reply_fn,
+                         dsetdatareq->targ_reply_arg);
+
+    return A_OK;
+}
+#endif /* CONFIG_HOST_DSET_SUPPORT */
+
+static A_STATUS
+wmi_scanComplete_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_SCAN_COMPLETE_EVENT *ev;
+
+    ev = (WMI_SCAN_COMPLETE_EVENT *)datap;
+    A_WMI_SCANCOMPLETE_EVENT(wmip->wmi_devt, ev->status);
+
+    return A_OK;
+}
+
+/*
+ * Target is reporting a programming error.  This is for
+ * developer aid only.  Target only checks a few common violations
+ * and it is responsibility of host to do all error checking.
+ * Behavior of target after wmi error event is undefined.
+ * A reset is recommended.
+ */
+static A_STATUS
+wmi_errorEvent_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_CMD_ERROR_EVENT *ev;
+
+    ev = (WMI_CMD_ERROR_EVENT *)datap;
+    AR_DEBUG_PRINTF(ATH_DEBUG_WMI, ("Programming Error: cmd=%d ", ev->commandId));
+    switch (ev->errorCode) {
+    case (INVALID_PARAM):
+        AR_DEBUG_PRINTF(ATH_DEBUG_WMI, ("Illegal Parameter\n"));
+        break;
+    case (ILLEGAL_STATE):
+        AR_DEBUG_PRINTF(ATH_DEBUG_WMI, ("Illegal State\n"));
+        break;
+    case (INTERNAL_ERROR):
+        AR_DEBUG_PRINTF(ATH_DEBUG_WMI, ("Internal Error\n"));
+        break;
+    }
+
+    return A_OK;
+}
+
+
+static A_STATUS
+wmi_statsEvent_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_TARGET_STATS *reply;
+
+    if (len < sizeof(*reply)) {
+        return A_EINVAL;
+    }
+    reply = (WMI_TARGET_STATS *)datap;
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    A_WMI_TARGETSTATS_EVENT(wmip->wmi_devt, reply);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_rssiThresholdEvent_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_RSSI_THRESHOLD_EVENT *reply;
+
+    if (len < sizeof(*reply)) {
+        return A_EINVAL;
+    }
+    reply = (WMI_RSSI_THRESHOLD_EVENT *)datap;
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    A_WMI_RSSI_THRESHOLD_EVENT(wmip->wmi_devt, reply->range, reply->rssi);
+
+    return A_OK;
+}
+
+
+static A_STATUS
+wmi_reportErrorEvent_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_TARGET_ERROR_REPORT_EVENT *reply;
+
+    if (len < sizeof(*reply)) {
+        return A_EINVAL;
+    }
+    reply = (WMI_TARGET_ERROR_REPORT_EVENT *)datap;
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    A_WMI_REPORT_ERROR_EVENT(wmip->wmi_devt, reply->errorVal);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_cac_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_CAC_EVENT *reply;
+
+    if (len < sizeof(*reply)) {
+        return A_EINVAL;
+    }
+    reply = (WMI_CAC_EVENT *)datap;
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    A_WMI_CAC_EVENT(wmip->wmi_devt, reply->ac,
+                reply->cac_indication, reply->statusCode,
+                reply->tspecSuggestion);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_hbChallengeResp_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMIX_HB_CHALLENGE_RESP_EVENT *reply;
+
+    if (len < sizeof(*reply)) {
+        return A_EINVAL;
+    }
+    reply = (WMIX_HB_CHALLENGE_RESP_EVENT *)datap;
+    A_DPRINTF(DBG_WMI, (DBGFMT "wmi: challenge response event\n", DBGARG));
+
+    A_WMI_HBCHALLENGERESP_EVENT(wmip->wmi_devt, reply->cookie, reply->source);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_roam_tbl_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_TARGET_ROAM_TBL *reply;
+
+    if (len < sizeof(*reply)) {
+        return A_EINVAL;
+    }
+    reply = (WMI_TARGET_ROAM_TBL *)datap;
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    A_WMI_ROAM_TABLE_EVENT(wmip->wmi_devt, reply);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_roam_data_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_TARGET_ROAM_DATA *reply;
+
+    if (len < sizeof(*reply)) {
+        return A_EINVAL;
+    }
+    reply = (WMI_TARGET_ROAM_DATA *)datap;
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    A_WMI_ROAM_DATA_EVENT(wmip->wmi_devt, reply);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_txRetryErrEvent_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_TX_RETRY_ERR_EVENT *reply;
+
+    if (len < sizeof(*reply)) {
+        return A_EINVAL;
+    }
+    reply = (WMI_TX_RETRY_ERR_EVENT *)datap;
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    A_WMI_TX_RETRY_ERR_EVENT(wmip->wmi_devt);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_snrThresholdEvent_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_SNR_THRESHOLD_EVENT *reply;
+
+    if (len < sizeof(*reply)) {
+        return A_EINVAL;
+    }
+    reply = (WMI_SNR_THRESHOLD_EVENT *)datap;
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    A_WMI_SNR_THRESHOLD_EVENT_RX(wmip->wmi_devt, reply->range, reply->snr);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_lqThresholdEvent_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_LQ_THRESHOLD_EVENT *reply;
+
+    if (len < sizeof(*reply)) {
+        return A_EINVAL;
+    }
+    reply = (WMI_LQ_THRESHOLD_EVENT *)datap;
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    A_WMI_LQ_THRESHOLD_EVENT_RX(wmip->wmi_devt, reply->range, reply->lq);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_aplistEvent_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    A_UINT16 ap_info_entry_size;
+    WMI_APLIST_EVENT *ev = (WMI_APLIST_EVENT *)datap;
+    WMI_AP_INFO_V1 *ap_info_v1;
+    A_UINT8 i;
+
+    if (len < sizeof(WMI_APLIST_EVENT)) {
+        return A_EINVAL;
+    }
+
+    if (ev->apListVer == APLIST_VER1) {
+        ap_info_entry_size = sizeof(WMI_AP_INFO_V1);
+        ap_info_v1 = (WMI_AP_INFO_V1 *)ev->apList;
+    } else {
+        return A_EINVAL;
+    }
+
+    AR_DEBUG_PRINTF(ATH_DEBUG_WMI, ("Number of APs in APLIST Event is %d\n", ev->numAP));
+    if (len < (int)(sizeof(WMI_APLIST_EVENT) +
+              (ev->numAP - 1) * ap_info_entry_size))
+    {
+        return A_EINVAL;
+    }
+
+    /*
+     * AP List Ver1 Contents
+     */
+    for (i = 0; i < ev->numAP; i++) {
+        AR_DEBUG_PRINTF(ATH_DEBUG_WMI, ("AP#%d BSSID %2.2x %2.2x %2.2x %2.2x %2.2x %2.2x "\
+                    "Channel %d\n", i,
+                   ap_info_v1->bssid[0], ap_info_v1->bssid[1],
+                   ap_info_v1->bssid[2], ap_info_v1->bssid[3],
+                   ap_info_v1->bssid[4], ap_info_v1->bssid[5],
+                   ap_info_v1->channel));
+        ap_info_v1++;
+    }
+    return A_OK;
+}
+
+static A_STATUS
+wmi_dbglog_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    A_UINT32 dropped;
+
+    dropped = *((A_UINT32 *)datap);
+    datap += sizeof(dropped);
+    len -= sizeof(dropped);
+    A_WMI_DBGLOG_EVENT(wmip->wmi_devt, dropped, datap, len);
+    return A_OK;
+}
+
+#ifdef CONFIG_HOST_GPIO_SUPPORT
+static A_STATUS
+wmi_gpio_intr_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMIX_GPIO_INTR_EVENT *gpio_intr = (WMIX_GPIO_INTR_EVENT *)datap;
+
+    A_DPRINTF(DBG_WMI,
+        (DBGFMT "Enter - intrmask=0x%x input=0x%x.\n", DBGARG,
+        gpio_intr->intr_mask, gpio_intr->input_values));
+
+    A_WMI_GPIO_INTR_RX(gpio_intr->intr_mask, gpio_intr->input_values);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_gpio_data_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMIX_GPIO_DATA_EVENT *gpio_data = (WMIX_GPIO_DATA_EVENT *)datap;
+
+    A_DPRINTF(DBG_WMI,
+        (DBGFMT "Enter - reg=%d value=0x%x\n", DBGARG,
+        gpio_data->reg_id, gpio_data->value));
+
+    A_WMI_GPIO_DATA_RX(gpio_data->reg_id, gpio_data->value);
+
+    return A_OK;
+}
+
+static A_STATUS
+wmi_gpio_ack_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    A_WMI_GPIO_ACK_RX();
+
+    return A_OK;
+}
+#endif /* CONFIG_HOST_GPIO_SUPPORT */
+
+/*
+ * Called to send a wmi command. Command specific data is already built
+ * on osbuf and current osbuf->data points to it.
+ */
+A_STATUS
+wmi_cmd_send(struct wmi_t *wmip, void *osbuf, WMI_COMMAND_ID cmdId,
+               WMI_SYNC_FLAG syncflag)
+{
+#define IS_LONG_CMD(cmdId) ((cmdId == WMI_OPT_TX_FRAME_CMDID) || (cmdId == WMI_ADD_WOW_PATTERN_CMDID))
+    WMI_CMD_HDR         *cHdr;
+    WMI_PRI_STREAM_ID   streamID = WMI_CONTROL_PRI;
+
+    A_ASSERT(osbuf != NULL);
+
+    if (syncflag >= END_WMIFLAG) {
+        return A_EINVAL;
+    }
+
+    if ((syncflag == SYNC_BEFORE_WMIFLAG) || (syncflag == SYNC_BOTH_WMIFLAG)) {
+        /*
+         * We want to make sure all data currently queued is transmitted before
+         * the cmd execution.  Establish a new sync point.
+         */
+        wmi_sync_point(wmip);
+    }
+
+    if (A_NETBUF_PUSH(osbuf, sizeof(WMI_CMD_HDR)) != A_OK) {
+        return A_NO_MEMORY;
+    }
+
+    cHdr = (WMI_CMD_HDR *)A_NETBUF_DATA(osbuf);
+    cHdr->commandId = cmdId;
+
+    /*
+     * Send cmd, some via control pipe, others via data pipe
+     */
+    if (IS_LONG_CMD(cmdId)) {
+        wmi_data_hdr_add(wmip, osbuf, CNTL_MSGTYPE);
+        // TODO ... these can now go through the control endpoint via HTC 2.0
+        streamID = WMI_BEST_EFFORT_PRI;
+    }
+    A_WMI_CONTROL_TX(wmip->wmi_devt, osbuf, streamID);
+
+    if ((syncflag == SYNC_AFTER_WMIFLAG) || (syncflag == SYNC_BOTH_WMIFLAG)) {
+        /*
+         * We want to make sure all new data queued waits for the command to
+         * execute. Establish a new sync point.
+         */
+        wmi_sync_point(wmip);
+    }
+    return (A_OK);
+#undef IS_LONG_CMD
+}
+
+A_STATUS
+wmi_cmd_send_xtnd(struct wmi_t *wmip, void *osbuf, WMI_COMMAND_ID cmdId,
+                  WMI_SYNC_FLAG syncflag)
+{
+    WMIX_CMD_HDR     *cHdr;
+
+    if (A_NETBUF_PUSH(osbuf, sizeof(WMIX_CMD_HDR)) != A_OK) {
+        return A_NO_MEMORY;
+    }
+
+    cHdr = (WMIX_CMD_HDR *)A_NETBUF_DATA(osbuf);
+    cHdr->commandId = cmdId;
+
+    return wmi_cmd_send(wmip, osbuf, WMI_EXTENSION_CMDID, syncflag);
+}
+
+A_STATUS
+wmi_connect_cmd(struct wmi_t *wmip, NETWORK_TYPE netType,
+                DOT11_AUTH_MODE dot11AuthMode, AUTH_MODE authMode,
+                CRYPTO_TYPE pairwiseCrypto, A_UINT8 pairwiseCryptoLen,
+                CRYPTO_TYPE groupCrypto,A_UINT8 groupCryptoLen,
+                int ssidLength, A_UCHAR *ssid,
+                A_UINT8 *bssid, A_UINT16 channel, A_UINT32 ctrl_flags)
+{
+    void *osbuf;
+    WMI_CONNECT_CMD *cc;
+
+    if ((pairwiseCrypto == NONE_CRYPT) && (groupCrypto != NONE_CRYPT)) {
+        return A_EINVAL;
+    }
+    if ((pairwiseCrypto != NONE_CRYPT) && (groupCrypto == NONE_CRYPT)) {
+        return A_EINVAL;
+    }
+
+    osbuf = A_NETBUF_ALLOC(sizeof(WMI_CONNECT_CMD));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(WMI_CONNECT_CMD));
+
+    cc = (WMI_CONNECT_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cc, sizeof(*cc));
+
+    A_MEMCPY(cc->ssid, ssid, ssidLength);
+    cc->ssidLength          = ssidLength;
+    cc->networkType         = netType;
+    cc->dot11AuthMode       = dot11AuthMode;
+    cc->authMode            = authMode;
+    cc->pairwiseCryptoType  = pairwiseCrypto;
+    cc->pairwiseCryptoLen   = pairwiseCryptoLen;
+    cc->groupCryptoType     = groupCrypto;
+    cc->groupCryptoLen      = groupCryptoLen;
+    cc->channel             = channel;
+    cc->ctrl_flags          = ctrl_flags;
+
+    if (bssid != NULL) {
+        A_MEMCPY(cc->bssid, bssid, ATH_MAC_LEN);
+    }
+    if (wmi_set_keepalive_cmd(wmip, wmip->wmi_keepaliveInterval) != A_OK) {
+        return(A_ERROR);
+    }
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_CONNECT_CMDID, NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_reconnect_cmd(struct wmi_t *wmip, A_UINT8 *bssid, A_UINT16 channel)
+{
+    void *osbuf;
+    WMI_RECONNECT_CMD *cc;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(WMI_RECONNECT_CMD));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(WMI_RECONNECT_CMD));
+
+    cc = (WMI_RECONNECT_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cc, sizeof(*cc));
+
+    cc->channel = channel;
+
+    if (bssid != NULL) {
+        A_MEMCPY(cc->bssid, bssid, ATH_MAC_LEN);
+    }
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_RECONNECT_CMDID, NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_disconnect_cmd(struct wmi_t *wmip)
+{
+    void *osbuf;
+    A_STATUS status;
+
+    osbuf = A_NETBUF_ALLOC(0);      /* no payload */
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    /* Bug fix for 24817(elevator bug) - the disconnect command does not
+       need to do a SYNC before.*/
+    status = (wmi_cmd_send(wmip, osbuf, WMI_DISCONNECT_CMDID,
+                         NO_SYNC_WMIFLAG));
+    wmi_qos_state_init(wmip);
+    return status;
+}
+
+A_STATUS
+wmi_startscan_cmd(struct wmi_t *wmip, WMI_SCAN_TYPE scanType,
+                  A_BOOL forceFgScan, A_BOOL isLegacy,
+                  A_UINT32 homeDwellTime, A_UINT32 forceScanInterval)
+{
+    void *osbuf;
+    WMI_START_SCAN_CMD *sc;
+
+    if ((scanType != WMI_LONG_SCAN) && (scanType != WMI_SHORT_SCAN)) {
+        return A_EINVAL;
+    }
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*sc));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*sc));
+
+    sc = (WMI_START_SCAN_CMD *)(A_NETBUF_DATA(osbuf));
+    sc->scanType = scanType;
+    sc->forceFgScan = forceFgScan;
+    sc->isLegacy = isLegacy;
+    sc->homeDwellTime = homeDwellTime;
+    sc->forceScanInterval = forceScanInterval;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_START_SCAN_CMDID, NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_scanparams_cmd(struct wmi_t *wmip, A_UINT16 fg_start_sec,
+                   A_UINT16 fg_end_sec, A_UINT16 bg_sec,
+                   A_UINT16 minact_chdw_msec, A_UINT16 maxact_chdw_msec,
+                   A_UINT16 pas_chdw_msec,
+                   A_UINT8 shScanRatio, A_UINT8 scanCtrlFlags, 
+                   A_UINT32 max_dfsch_act_time)
+{
+    void *osbuf;
+    WMI_SCAN_PARAMS_CMD *sc;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*sc));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*sc));
+
+    sc = (WMI_SCAN_PARAMS_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(sc, sizeof(*sc));
+    sc->fg_start_period  = fg_start_sec;
+    sc->fg_end_period    = fg_end_sec;
+    sc->bg_period        = bg_sec;
+    sc->minact_chdwell_time = minact_chdw_msec;
+    sc->maxact_chdwell_time = maxact_chdw_msec;
+    sc->pas_chdwell_time = pas_chdw_msec;
+    sc->shortScanRatio   = shScanRatio;
+    sc->scanCtrlFlags    = scanCtrlFlags;
+    sc->max_dfsch_act_time = max_dfsch_act_time;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_SCAN_PARAMS_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_bssfilter_cmd(struct wmi_t *wmip, A_UINT8 filter, A_UINT32 ieMask)
+{
+    void *osbuf;
+    WMI_BSS_FILTER_CMD *cmd;
+
+    if (filter >= LAST_BSS_FILTER) {
+        return A_EINVAL;
+    }
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_BSS_FILTER_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->bssFilter = filter;
+    cmd->ieMask = ieMask;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_BSS_FILTER_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_probedSsid_cmd(struct wmi_t *wmip, A_UINT8 index, A_UINT8 flag,
+                   A_UINT8 ssidLength, A_UCHAR *ssid)
+{
+    void *osbuf;
+    WMI_PROBED_SSID_CMD *cmd;
+
+    if (index > MAX_PROBED_SSID_INDEX) {
+        return A_EINVAL;
+    }
+    if (ssidLength > sizeof(cmd->ssid)) {
+        return A_EINVAL;
+    }
+    if ((flag & (DISABLE_SSID_FLAG | ANY_SSID_FLAG)) && (ssidLength > 0)) {
+        return A_EINVAL;
+    }
+    if ((flag & SPECIFIC_SSID_FLAG) && !ssidLength) {
+        return A_EINVAL;
+    }
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_PROBED_SSID_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->entryIndex = index;
+    cmd->flag       = flag;
+    cmd->ssidLength = ssidLength;
+    A_MEMCPY(cmd->ssid, ssid, ssidLength);
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_PROBED_SSID_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_listeninterval_cmd(struct wmi_t *wmip, A_UINT16 listenInterval, A_UINT16 listenBeacons)
+{
+    void *osbuf;
+    WMI_LISTEN_INT_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_LISTEN_INT_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->listenInterval = listenInterval;
+    cmd->numBeacons = listenBeacons;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_LISTEN_INT_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_bmisstime_cmd(struct wmi_t *wmip, A_UINT16 bmissTime, A_UINT16 bmissBeacons)
+{
+    void *osbuf;
+    WMI_BMISS_TIME_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_BMISS_TIME_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->bmissTime = bmissTime;
+    cmd->numBeacons =  bmissBeacons;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_BMISS_TIME_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_associnfo_cmd(struct wmi_t *wmip, A_UINT8 ieType,
+                     A_UINT8 ieLen, A_UINT8 *ieInfo)
+{
+    void *osbuf;
+    WMI_SET_ASSOC_INFO_CMD *cmd;
+    A_UINT16 cmdLen;
+
+    cmdLen = sizeof(*cmd) + ieLen - 1;
+    osbuf = A_NETBUF_ALLOC(cmdLen);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, cmdLen);
+
+    cmd = (WMI_SET_ASSOC_INFO_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, cmdLen);
+    cmd->ieType = ieType;
+    cmd->bufferSize = ieLen;
+    A_MEMCPY(cmd->assocInfo, ieInfo, ieLen);
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_ASSOC_INFO_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_powermode_cmd(struct wmi_t *wmip, A_UINT8 powerMode)
+{
+    void *osbuf;
+    WMI_POWER_MODE_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_POWER_MODE_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->powerMode = powerMode;
+    wmip->wmi_powerMode = powerMode;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_POWER_MODE_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_ibsspmcaps_cmd(struct wmi_t *wmip, A_UINT8 pmEnable, A_UINT8 ttl,
+                   A_UINT16 atim_windows, A_UINT16 timeout_value)
+{
+    void *osbuf;
+    WMI_IBSS_PM_CAPS_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_IBSS_PM_CAPS_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->power_saving = pmEnable;
+    cmd->ttl = ttl;
+    cmd->atim_windows = atim_windows;
+    cmd->timeout_value = timeout_value;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_IBSS_PM_CAPS_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_pmparams_cmd(struct wmi_t *wmip, A_UINT16 idlePeriod,
+                 A_UINT16 psPollNum, A_UINT16 dtimPolicy)
+{
+    void *osbuf;
+    WMI_POWER_PARAMS_CMD *pm;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*pm));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*pm));
+
+    pm = (WMI_POWER_PARAMS_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(pm, sizeof(*pm));
+    pm->idle_period   = idlePeriod;
+    pm->pspoll_number = psPollNum;
+    pm->dtim_policy   = dtimPolicy;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_POWER_PARAMS_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_disctimeout_cmd(struct wmi_t *wmip, A_UINT8 timeout)
+{
+    void *osbuf;
+    WMI_DISC_TIMEOUT_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_DISC_TIMEOUT_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->disconnectTimeout = timeout;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_DISC_TIMEOUT_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_addKey_cmd(struct wmi_t *wmip, A_UINT8 keyIndex, CRYPTO_TYPE keyType,
+               A_UINT8 keyUsage, A_UINT8 keyLength, A_UINT8 *keyRSC,
+               A_UINT8 *keyMaterial, A_UINT8 key_op_ctrl,
+               WMI_SYNC_FLAG sync_flag)
+{
+    void *osbuf;
+    WMI_ADD_CIPHER_KEY_CMD *cmd;
+
+    if ((keyIndex > WMI_MAX_KEY_INDEX) || (keyLength > WMI_MAX_KEY_LEN) ||
+        (keyMaterial == NULL))
+    {
+        return A_EINVAL;
+    }
+
+    if ((WEP_CRYPT != keyType) && (NULL == keyRSC)) {
+        return A_EINVAL;
+    }
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_ADD_CIPHER_KEY_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->keyIndex = keyIndex;
+    cmd->keyType  = keyType;
+    cmd->keyUsage = keyUsage;
+    cmd->keyLength = keyLength;
+    A_MEMCPY(cmd->key, keyMaterial, keyLength);
+    if (NULL != keyRSC) {
+        A_MEMCPY(cmd->keyRSC, keyRSC, sizeof(cmd->keyRSC));
+    }
+    cmd->key_op_ctrl = key_op_ctrl;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_ADD_CIPHER_KEY_CMDID, sync_flag));
+}
+
+A_STATUS
+wmi_add_krk_cmd(struct wmi_t *wmip, A_UINT8 *krk)
+{
+    void *osbuf;
+    WMI_ADD_KRK_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_ADD_KRK_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    A_MEMCPY(cmd->krk, krk, WMI_KRK_LEN);
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_ADD_KRK_CMDID, NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_delete_krk_cmd(struct wmi_t *wmip)
+{
+    void *osbuf;
+
+    osbuf = A_NETBUF_ALLOC(0);
+
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_DELETE_KRK_CMDID, NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_deleteKey_cmd(struct wmi_t *wmip, A_UINT8 keyIndex)
+{
+    void *osbuf;
+    WMI_DELETE_CIPHER_KEY_CMD *cmd;
+
+    if (keyIndex > WMI_MAX_KEY_INDEX) {
+        return A_EINVAL;
+    }
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_DELETE_CIPHER_KEY_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->keyIndex = keyIndex;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_DELETE_CIPHER_KEY_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_setPmkid_cmd(struct wmi_t *wmip, A_UINT8 *bssid, A_UINT8 *pmkId,
+                 A_BOOL set)
+{
+    void *osbuf;
+    WMI_SET_PMKID_CMD *cmd;
+
+    if (bssid == NULL) {
+        return A_EINVAL;
+    }
+
+    if ((set == TRUE) && (pmkId == NULL)) {
+        return A_EINVAL;
+    }
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_SET_PMKID_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMCPY(cmd->bssid, bssid, sizeof(cmd->bssid));
+    if (set == TRUE) {
+        A_MEMCPY(cmd->pmkid, pmkId, sizeof(cmd->pmkid));
+        cmd->enable = PMKID_ENABLE;
+    } else {
+        A_MEMZERO(cmd->pmkid, sizeof(cmd->pmkid));
+        cmd->enable = PMKID_DISABLE;
+    }
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_PMKID_CMDID, NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_tkip_countermeasures_cmd(struct wmi_t *wmip, A_BOOL en)
+{
+    void *osbuf;
+    WMI_SET_TKIP_COUNTERMEASURES_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_SET_TKIP_COUNTERMEASURES_CMD *)(A_NETBUF_DATA(osbuf));
+    cmd->cm_en = (en == TRUE)? WMI_TKIP_CM_ENABLE : WMI_TKIP_CM_DISABLE;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_TKIP_COUNTERMEASURES_CMDID,
+            NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_akmp_params_cmd(struct wmi_t *wmip, 
+                        WMI_SET_AKMP_PARAMS_CMD *akmpParams)
+{
+    void *osbuf;
+    WMI_SET_AKMP_PARAMS_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+    cmd = (WMI_SET_AKMP_PARAMS_CMD *)(A_NETBUF_DATA(osbuf));
+    cmd->akmpInfo = akmpParams->akmpInfo;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_AKMP_PARAMS_CMDID,
+            NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_pmkid_list_cmd(struct wmi_t *wmip,
+                       WMI_SET_PMKID_LIST_CMD *pmkInfo)
+{
+    void *osbuf;
+    WMI_SET_PMKID_LIST_CMD *cmd;
+    A_UINT16 cmdLen;
+    A_UINT8 i;
+
+    cmdLen = sizeof(pmkInfo->numPMKID) + 
+             pmkInfo->numPMKID * sizeof(WMI_PMKID);
+    
+    osbuf = A_NETBUF_ALLOC(cmdLen);
+                           
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, cmdLen);
+    cmd = (WMI_SET_PMKID_LIST_CMD *)(A_NETBUF_DATA(osbuf));
+    cmd->numPMKID = pmkInfo->numPMKID;
+
+    for (i = 0; i < cmd->numPMKID; i++) {
+        A_MEMCPY(&cmd->pmkidList[i], &pmkInfo->pmkidList[i],
+                 WMI_PMKID_LEN);
+    }
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_PMKID_LIST_CMDID,
+            NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_get_pmkid_list_cmd(struct wmi_t *wmip)
+{
+    void *osbuf;
+
+    osbuf = A_NETBUF_ALLOC(0);      /* no payload */
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_GET_PMKID_LIST_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_dataSync_send(struct wmi_t *wmip, void *osbuf, WMI_PRI_STREAM_ID streamID)
+{
+    WMI_DATA_HDR     *dtHdr;
+
+    A_ASSERT(streamID != WMI_CONTROL_PRI);
+    A_ASSERT(osbuf != NULL);
+
+    if (A_NETBUF_PUSH(osbuf, sizeof(WMI_DATA_HDR)) != A_OK) {
+        return A_NO_MEMORY;
+    }
+
+    dtHdr = (WMI_DATA_HDR *)A_NETBUF_DATA(osbuf);
+    dtHdr->info =
+      (SYNC_MSGTYPE & WMI_DATA_HDR_MSG_TYPE_MASK) << WMI_DATA_HDR_MSG_TYPE_SHIFT;
+
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter - streamID %d\n", DBGARG, streamID));
+
+    return (A_WMI_CONTROL_TX(wmip->wmi_devt, osbuf, streamID));
+}
+
+typedef struct _WMI_DATA_SYNC_BUFS {
+    A_UINT8            trafficClass;
+    void               *osbuf;
+}WMI_DATA_SYNC_BUFS;
+
+static A_STATUS
+wmi_sync_point(struct wmi_t *wmip)
+{
+	void *cmd_osbuf;
+    WMI_DATA_SYNC_BUFS dataSyncBufs[WMM_NUM_AC];
+	A_UINT8 i,numPriStreams=0;
+	A_STATUS status;
+
+	A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    memset(dataSyncBufs,0,sizeof(dataSyncBufs));
+
+    /* lock out while we walk through the priority list and assemble our local array */
+    LOCK_WMI(wmip);
+
+    for (i=0; i < WMM_NUM_AC ; i++) {
+		if (wmip->wmi_fatPipeExists & (1 << i)) {
+            numPriStreams++;
+            dataSyncBufs[numPriStreams-1].trafficClass = i;        
+        }
+    }
+
+    UNLOCK_WMI(wmip);
+
+    /* dataSyncBufs is now filled with entries (starting at index 0) containing valid streamIDs */
+             
+    do {
+	    /*
+	     * We allocate all network buffers needed so we will be able to
+	     * send all required frames.
+	     */
+	    cmd_osbuf = A_NETBUF_ALLOC(0);      /* no payload */
+	    if (cmd_osbuf == NULL) {
+		    status = A_NO_MEMORY;
+            break;
+	    }
+
+	    for (i=0; i < numPriStreams ; i++) {
+	        dataSyncBufs[i].osbuf = A_NETBUF_ALLOC(0);
+            if (dataSyncBufs[i].osbuf == NULL) {
+                status = A_NO_MEMORY;
+                break;
+            }
+	    } //end for
+
+	    /*
+	     * Send sync cmd followed by sync data messages on all endpoints being
+	     * used
+	     */
+	    status = wmi_cmd_send(wmip, cmd_osbuf, WMI_SYNCHRONIZE_CMDID,
+						  NO_SYNC_WMIFLAG);
+
+        if (A_FAILED(status)) {
+            break;    
+        }
+            /* cmd buffer sent, we no longer own it */
+        cmd_osbuf = NULL;
+
+		for(i=0; i < numPriStreams; i++) {
+            A_ASSERT(dataSyncBufs[i].osbuf != NULL);
+                        
+            status = wmi_dataSync_send(wmip, dataSyncBufs[i].osbuf,
+                        WMI_ACCESSCATEGORY_WMISTREAM(wmip,dataSyncBufs[i].trafficClass));
+            
+            if (A_FAILED(status)) {
+                break;
+            }
+            /* we don't own this buffer anymore, NULL it out of the array so it 
+             * won't get cleaned up */
+            dataSyncBufs[i].osbuf = NULL;
+		} //end for
+
+    } while(FALSE);
+
+    /* free up any resources left over (possibly due to an error) */
+    
+    if (cmd_osbuf != NULL) {
+        A_NETBUF_FREE(cmd_osbuf);
+    }    
+    
+    for (i = 0; i < numPriStreams; i++) {
+        if (dataSyncBufs[i].osbuf != NULL) {
+            A_NETBUF_FREE(dataSyncBufs[i].osbuf);
+        }
+    }  
+        
+	return (status);
+}
+
+A_STATUS
+wmi_create_pstream_cmd(struct wmi_t *wmip, WMI_CREATE_PSTREAM_CMD *params)
+{
+    void *osbuf;
+    WMI_CREATE_PSTREAM_CMD *cmd;
+	A_UINT16 activeTsids=0;
+    A_UINT8 fatPipeExistsForAC=0; 
+
+    /* Validate all the parameters. */
+    if( !((params->userPriority < 8) &&
+         (params->userPriority <= 0x7) &&
+         (convert_userPriority_to_trafficClass(params->userPriority) == params->trafficClass)  &&
+         (params->trafficDirection == UPLINK_TRAFFIC || 
+            params->trafficDirection == DNLINK_TRAFFIC ||
+            params->trafficDirection == BIDIR_TRAFFIC) &&
+         (params->trafficType == TRAFFIC_TYPE_APERIODIC ||
+            params->trafficType == TRAFFIC_TYPE_PERIODIC ) &&
+         (params->voicePSCapability == DISABLE_FOR_THIS_AC  || 
+            params->voicePSCapability == ENABLE_FOR_THIS_AC ||
+            params->voicePSCapability == ENABLE_FOR_ALL_AC) &&
+         (params->tsid == WMI_IMPLICIT_PSTREAM || params->tsid <= WMI_MAX_THINSTREAM)) )
+    {
+        return  A_EINVAL;
+    }
+    
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+    
+    A_DPRINTF(DBG_WMI,
+        (DBGFMT "Sending create_pstream_cmd: ac=%d    tsid:%d\n", DBGARG,
+        params->trafficClass, params->tsid));
+
+    cmd = (WMI_CREATE_PSTREAM_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    A_MEMCPY(cmd, params, sizeof(*cmd));
+
+        /* this is an implicitly created Fat pipe */
+    if (params->tsid == WMI_IMPLICIT_PSTREAM) {
+        LOCK_WMI(wmip);
+        fatPipeExistsForAC = (wmip->wmi_fatPipeExists & (1 << params->trafficClass));
+        wmip->wmi_fatPipeExists |= (1<<params->trafficClass);
+        UNLOCK_WMI(wmip);
+    } else {
+            /* this is an explicitly created thin stream within a fat pipe */
+        LOCK_WMI(wmip);
+        fatPipeExistsForAC = (wmip->wmi_fatPipeExists & (1 << params->trafficClass));
+        activeTsids = wmip->wmi_streamExistsForAC[params->trafficClass];
+        wmip->wmi_streamExistsForAC[params->trafficClass] |= (1<<params->tsid);
+            /* if a thinstream becomes active, the fat pipe automatically
+            * becomes active
+            */
+        wmip->wmi_fatPipeExists |= (1<<params->trafficClass);
+        UNLOCK_WMI(wmip);
+    }
+
+        /* Indicate activty change to driver layer only if this is the 
+         * first TSID to get created in this AC explicitly or an implicit
+         * fat pipe is getting created.
+         */
+    if (!fatPipeExistsForAC) {
+        A_WMI_STREAM_TX_ACTIVE(wmip->wmi_devt, params->trafficClass);
+    }
+
+    /* mike: should be SYNC_BEFORE_WMIFLAG */
+    return (wmi_cmd_send(wmip, osbuf, WMI_CREATE_PSTREAM_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_delete_pstream_cmd(struct wmi_t *wmip, A_UINT8 trafficClass, A_UINT8 tsid)
+{
+    void *osbuf;
+    WMI_DELETE_PSTREAM_CMD *cmd;
+    A_STATUS status;
+	A_UINT16 activeTsids=0;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_DELETE_PSTREAM_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+
+    cmd->trafficClass = trafficClass;
+    cmd->tsid = tsid;
+
+    LOCK_WMI(wmip);
+    activeTsids = wmip->wmi_streamExistsForAC[trafficClass];
+    UNLOCK_WMI(wmip);
+
+        /* Check if the tsid was created & exists */
+    if (!(activeTsids & (1<<tsid))) {
+
+        A_DPRINTF(DBG_WMI,
+        (DBGFMT "TSID %d does'nt exist for trafficClass: %d\n", DBGARG, tsid, trafficClass));
+            /* TODO: return a more appropriate err code */
+        return A_ERROR;
+    }
+
+    A_DPRINTF(DBG_WMI,
+        (DBGFMT "Sending delete_pstream_cmd: trafficClass: %d tsid=%d\n", DBGARG, trafficClass, tsid));
+
+    status = (wmi_cmd_send(wmip, osbuf, WMI_DELETE_PSTREAM_CMDID,
+                         SYNC_BEFORE_WMIFLAG));
+
+    LOCK_WMI(wmip);
+    wmip->wmi_streamExistsForAC[trafficClass] &= ~(1<<tsid);
+    activeTsids = wmip->wmi_streamExistsForAC[trafficClass];
+    UNLOCK_WMI(wmip);
+
+
+        /* Indicate stream inactivity to driver layer only if all tsids
+         * within this AC are deleted.
+         */
+    if(!activeTsids) {
+        A_WMI_STREAM_TX_INACTIVE(wmip->wmi_devt, trafficClass);
+        wmip->wmi_fatPipeExists &= ~(1<<trafficClass);
+    }
+
+    return status;
+}
+
+/*
+ * used to set the bit rate.  rate is in Kbps.  If rate == -1
+ * then auto selection is used.
+ */
+A_STATUS
+wmi_set_bitrate_cmd(struct wmi_t *wmip, A_INT32 rate)
+{
+    void *osbuf;
+    WMI_BIT_RATE_CMD *cmd;
+    A_INT8 index;
+
+    if (rate != -1) {
+        index = wmi_validate_bitrate(wmip, rate);
+        if(index == A_EINVAL){
+            return A_EINVAL;
+        }
+    } else {
+        index = -1;
+    }
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_BIT_RATE_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+
+    cmd->rateIndex = index;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_BITRATE_CMDID, NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_get_bitrate_cmd(struct wmi_t *wmip)
+{
+    void *osbuf;
+
+    osbuf = A_NETBUF_ALLOC(0);      /* no payload */
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_GET_BITRATE_CMDID, NO_SYNC_WMIFLAG));
+}
+
+/*
+ * Returns TRUE iff the given rate index is legal in the current PHY mode.
+ */
+A_BOOL
+wmi_is_bitrate_index_valid(struct wmi_t *wmip, A_UINT32 rateIndex)
+{
+    WMI_PHY_MODE phyMode = wmip->wmi_phyMode;
+    A_BOOL isValid = TRUE;
+    switch(phyMode) {
+        case WMI_11A_MODE:
+            if ((rateIndex < MODE_A_SUPPORT_RATE_START) || (rateIndex > MODE_A_SUPPORT_RATE_STOP)) {
+                isValid = FALSE;
+            }
+            break;
+
+        case WMI_11B_MODE:
+            if ((rateIndex < MODE_B_SUPPORT_RATE_START) || (rateIndex > MODE_B_SUPPORT_RATE_STOP)) {
+                isValid = FALSE;
+            }
+            break;
+
+        case WMI_11GONLY_MODE:
+            if ((rateIndex < MODE_GONLY_SUPPORT_RATE_START) || (rateIndex > MODE_GONLY_SUPPORT_RATE_STOP)) {
+                isValid = FALSE;
+            }
+            break;
+
+        case WMI_11G_MODE:
+        case WMI_11AG_MODE:
+            if ((rateIndex < MODE_G_SUPPORT_RATE_START) || (rateIndex > MODE_G_SUPPORT_RATE_STOP)) {
+                isValid = FALSE;
+            }
+            break;
+
+        default:
+            A_ASSERT(FALSE);
+            break;
+    }
+
+    return isValid;
+}
+
+A_INT8
+wmi_validate_bitrate(struct wmi_t *wmip, A_INT32 rate)
+{
+    A_INT8 i;
+    if (rate != -1)
+    {
+        for (i=0;;i++)
+        {
+            if (wmi_rateTable[(A_UINT32) i] == 0) {
+                return A_EINVAL;
+            }
+            if (wmi_rateTable[(A_UINT32) i] == rate) {
+                break;
+            }
+        }
+    }
+    else{
+     i = -1;
+    }
+
+    if(wmi_is_bitrate_index_valid(wmip, i) != TRUE) {
+        return A_EINVAL;
+    }
+
+    return i;
+}
+
+A_STATUS
+wmi_set_fixrates_cmd(struct wmi_t *wmip, A_INT16 fixRatesMask)
+{
+    void *osbuf;
+    WMI_FIX_RATES_CMD *cmd;
+    A_UINT32 rateIndex;
+
+    /* Make sure all rates in the mask are valid in the current PHY mode */
+    for(rateIndex = 0; rateIndex < MAX_NUMBER_OF_SUPPORT_RATES; rateIndex++) {
+       if((1 << rateIndex) & (A_UINT32)fixRatesMask) {
+            if(wmi_is_bitrate_index_valid(wmip, rateIndex) != TRUE) {
+                A_DPRINTF(DBG_WMI, (DBGFMT "Set Fix Rates command failed: Given rate is illegal in current PHY mode\n", DBGARG));
+                return A_EINVAL;
+            }
+       }
+    }
+
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_FIX_RATES_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+
+    cmd->fixRateMask = fixRatesMask;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_FIXRATES_CMDID, NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_get_ratemask_cmd(struct wmi_t *wmip)
+{
+    void *osbuf;
+
+    osbuf = A_NETBUF_ALLOC(0);      /* no payload */
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_GET_FIXRATES_CMDID, NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_get_channelList_cmd(struct wmi_t *wmip)
+{
+    void *osbuf;
+
+    osbuf = A_NETBUF_ALLOC(0);      /* no payload */
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_GET_CHANNEL_LIST_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+/*
+ * used to generate a wmi sey channel Parameters cmd.
+ * mode should always be specified and corresponds to the phy mode of the
+ * wlan.
+ * numChan should alway sbe specified. If zero indicates that all available
+ * channels should be used.
+ * channelList is an array of channel frequencies (in Mhz) which the radio
+ * should limit its operation to.  It should be NULL if numChan == 0.  Size of
+ * array should correspond to numChan entries.
+ */
+A_STATUS
+wmi_set_channelParams_cmd(struct wmi_t *wmip, A_UINT8 scanParam,
+                          WMI_PHY_MODE mode, A_INT8 numChan,
+                          A_UINT16 *channelList)
+{
+    void *osbuf;
+    WMI_CHANNEL_PARAMS_CMD *cmd;
+    A_INT8 size;
+
+    size = sizeof (*cmd);
+
+    if (numChan) {
+        if (numChan > WMI_MAX_CHANNELS) {
+            return A_EINVAL;
+        }
+        size += sizeof(A_UINT16) * (numChan - 1);
+    }
+
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, size);
+
+    cmd = (WMI_CHANNEL_PARAMS_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, size);
+
+    wmip->wmi_phyMode = mode;
+    cmd->scanParam   = scanParam;
+    cmd->phyMode     = mode;
+    cmd->numChannels = numChan;
+    A_MEMCPY(cmd->channelList, channelList, numChan * sizeof(A_UINT16));
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_CHANNEL_PARAMS_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_rssi_threshold_params(struct wmi_t *wmip,
+                              WMI_RSSI_THRESHOLD_PARAMS_CMD *rssiCmd)
+{
+    void    *osbuf;
+    A_INT8  size;
+    WMI_RSSI_THRESHOLD_PARAMS_CMD *cmd;
+    /* These values are in ascending order */
+    if( rssiCmd->thresholdAbove6_Val <= rssiCmd->thresholdAbove5_Val ||
+        rssiCmd->thresholdAbove5_Val <= rssiCmd->thresholdAbove4_Val ||
+        rssiCmd->thresholdAbove4_Val <= rssiCmd->thresholdAbove3_Val ||
+        rssiCmd->thresholdAbove3_Val <= rssiCmd->thresholdAbove2_Val ||
+        rssiCmd->thresholdAbove2_Val <= rssiCmd->thresholdAbove1_Val ||
+        rssiCmd->thresholdBelow6_Val <= rssiCmd->thresholdBelow5_Val ||
+        rssiCmd->thresholdBelow5_Val <= rssiCmd->thresholdBelow4_Val ||
+        rssiCmd->thresholdBelow4_Val <= rssiCmd->thresholdBelow3_Val ||
+        rssiCmd->thresholdBelow3_Val <= rssiCmd->thresholdBelow2_Val ||
+        rssiCmd->thresholdBelow2_Val <= rssiCmd->thresholdBelow1_Val) {
+
+        return A_EINVAL;
+    }
+
+    size = sizeof (*cmd);
+
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, size);
+
+    cmd = (WMI_RSSI_THRESHOLD_PARAMS_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, size);
+    A_MEMCPY(cmd, rssiCmd, sizeof(WMI_RSSI_THRESHOLD_PARAMS_CMD));
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_RSSI_THRESHOLD_PARAMS_CMDID,
+                            NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_host_sleep_mode_cmd(struct wmi_t *wmip,
+                              WMI_SET_HOST_SLEEP_MODE_CMD *hostModeCmd)
+{
+    void    *osbuf;
+    A_INT8  size;
+    WMI_SET_HOST_SLEEP_MODE_CMD *cmd;
+
+    if( hostModeCmd->awake == hostModeCmd->asleep) {
+        return A_EINVAL;
+    }
+
+    size = sizeof (*cmd);
+
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, size);
+
+    cmd = (WMI_SET_HOST_SLEEP_MODE_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, size);
+    A_MEMCPY(cmd, hostModeCmd, sizeof(WMI_SET_HOST_SLEEP_MODE_CMD));
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_HOST_SLEEP_MODE_CMDID,
+                            NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_wow_mode_cmd(struct wmi_t *wmip,
+                              WMI_SET_WOW_MODE_CMD *wowModeCmd)
+{
+    void    *osbuf;
+    A_INT8  size;
+    WMI_SET_WOW_MODE_CMD *cmd;
+
+    size = sizeof (*cmd);
+
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, size);
+
+    cmd = (WMI_SET_WOW_MODE_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, size);
+    A_MEMCPY(cmd, wowModeCmd, sizeof(WMI_SET_WOW_MODE_CMD));
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_WOW_MODE_CMDID,
+                            NO_SYNC_WMIFLAG));
+
+}
+
+A_STATUS
+wmi_get_wow_list_cmd(struct wmi_t *wmip,
+                              WMI_GET_WOW_LIST_CMD *wowListCmd)
+{
+    void    *osbuf;
+    A_INT8  size;
+    WMI_GET_WOW_LIST_CMD *cmd;
+
+    size = sizeof (*cmd);
+
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, size);
+
+    cmd = (WMI_GET_WOW_LIST_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, size);
+    A_MEMCPY(cmd, wowListCmd, sizeof(WMI_GET_WOW_LIST_CMD));
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_GET_WOW_LIST_CMDID,
+                            NO_SYNC_WMIFLAG));
+
+}
+
+static A_STATUS
+wmi_get_wow_list_event_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+    WMI_GET_WOW_LIST_REPLY *reply;
+
+    if (len < sizeof(WMI_GET_WOW_LIST_REPLY)) {
+        return A_EINVAL;
+    }
+    reply = (WMI_GET_WOW_LIST_REPLY *)datap;
+
+    A_WMI_WOW_LIST_EVENT(wmip->wmi_devt, reply->num_filters,
+                          reply);
+
+    return A_OK;
+}
+
+A_STATUS wmi_add_wow_pattern_cmd(struct wmi_t *wmip,
+                                 WMI_ADD_WOW_PATTERN_CMD *addWowCmd, 
+                                 A_UINT8* pattern, A_UINT8* mask, 
+                                 A_UINT8 pattern_size)
+{
+    void    *osbuf;
+    A_INT8  size;
+    WMI_ADD_WOW_PATTERN_CMD *cmd;
+    A_UINT8 *filter_mask = NULL;
+
+    size = sizeof (*cmd);
+
+    size += ((2 * addWowCmd->filter_size)* sizeof(A_UINT8));
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, size);
+
+    cmd = (WMI_ADD_WOW_PATTERN_CMD *)(A_NETBUF_DATA(osbuf));
+    cmd->filter_list_id = addWowCmd->filter_list_id;
+    cmd->filter_offset = addWowCmd->filter_offset;
+    cmd->filter_size = addWowCmd->filter_size;
+
+    A_MEMCPY(cmd->filter, pattern, addWowCmd->filter_size);
+
+    filter_mask = (A_UINT8*)(cmd->filter + cmd->filter_size);
+    A_MEMCPY(filter_mask, mask, addWowCmd->filter_size);
+
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_ADD_WOW_PATTERN_CMDID,
+                            NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_del_wow_pattern_cmd(struct wmi_t *wmip,
+                              WMI_DEL_WOW_PATTERN_CMD *delWowCmd)
+{
+    void    *osbuf;
+    A_INT8  size;
+    WMI_DEL_WOW_PATTERN_CMD *cmd;
+
+    size = sizeof (*cmd);
+
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, size);
+
+    cmd = (WMI_DEL_WOW_PATTERN_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, size);
+    A_MEMCPY(cmd, delWowCmd, sizeof(WMI_DEL_WOW_PATTERN_CMD));
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_DEL_WOW_PATTERN_CMDID,
+                            NO_SYNC_WMIFLAG));
+
+}
+
+A_STATUS
+wmi_set_snr_threshold_params(struct wmi_t *wmip,
+                             WMI_SNR_THRESHOLD_PARAMS_CMD *snrCmd)
+{
+    void    *osbuf;
+    A_INT8  size;
+    WMI_SNR_THRESHOLD_PARAMS_CMD *cmd;
+    /* These values are in ascending order */
+    if( snrCmd->thresholdAbove4_Val <= snrCmd->thresholdAbove3_Val ||
+        snrCmd->thresholdAbove3_Val <= snrCmd->thresholdAbove2_Val ||
+        snrCmd->thresholdAbove2_Val <= snrCmd->thresholdAbove1_Val ||
+        snrCmd->thresholdBelow4_Val <= snrCmd->thresholdBelow3_Val ||
+        snrCmd->thresholdBelow3_Val <= snrCmd->thresholdBelow2_Val ||
+        snrCmd->thresholdBelow2_Val <= snrCmd->thresholdBelow1_Val) {
+
+        return A_EINVAL;
+    }
+
+    size = sizeof (*cmd);
+
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, size);
+
+    cmd = (WMI_SNR_THRESHOLD_PARAMS_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, size);
+    A_MEMCPY(cmd, snrCmd, sizeof(WMI_SNR_THRESHOLD_PARAMS_CMD));
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SNR_THRESHOLD_PARAMS_CMDID,
+                            NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_clr_rssi_snr(struct wmi_t *wmip)
+{
+    void    *osbuf;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(int));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_CLR_RSSI_SNR_CMDID,
+                            NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_lq_threshold_params(struct wmi_t *wmip,
+                             WMI_LQ_THRESHOLD_PARAMS_CMD *lqCmd)
+{
+    void    *osbuf;
+    A_INT8  size;
+    WMI_LQ_THRESHOLD_PARAMS_CMD *cmd;
+    /* These values are in ascending order */
+    if( lqCmd->thresholdAbove4_Val <= lqCmd->thresholdAbove3_Val ||
+        lqCmd->thresholdAbove3_Val <= lqCmd->thresholdAbove2_Val ||
+        lqCmd->thresholdAbove2_Val <= lqCmd->thresholdAbove1_Val ||
+        lqCmd->thresholdBelow4_Val <= lqCmd->thresholdBelow3_Val ||
+        lqCmd->thresholdBelow3_Val <= lqCmd->thresholdBelow2_Val ||
+        lqCmd->thresholdBelow2_Val <= lqCmd->thresholdBelow1_Val ) {
+
+        return A_EINVAL;
+    }
+
+    size = sizeof (*cmd);
+
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, size);
+
+    cmd = (WMI_LQ_THRESHOLD_PARAMS_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, size);
+    A_MEMCPY(cmd, lqCmd, sizeof(WMI_LQ_THRESHOLD_PARAMS_CMD));
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_LQ_THRESHOLD_PARAMS_CMDID,
+                            NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_error_report_bitmask(struct wmi_t *wmip, A_UINT32 mask)
+{
+    void    *osbuf;
+    A_INT8  size;
+    WMI_TARGET_ERROR_REPORT_BITMASK *cmd;
+
+    size = sizeof (*cmd);
+
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, size);
+
+    cmd = (WMI_TARGET_ERROR_REPORT_BITMASK *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, size);
+
+    cmd->bitmask = mask;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_TARGET_ERROR_REPORT_BITMASK_CMDID,
+                            NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_get_challenge_resp_cmd(struct wmi_t *wmip, A_UINT32 cookie, A_UINT32 source)
+{
+    void *osbuf;
+    WMIX_HB_CHALLENGE_RESP_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMIX_HB_CHALLENGE_RESP_CMD *)(A_NETBUF_DATA(osbuf));
+    cmd->cookie = cookie;
+    cmd->source = source;
+
+    return (wmi_cmd_send_xtnd(wmip, osbuf, WMIX_HB_CHALLENGE_RESP_CMDID,
+                              NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_config_debug_module_cmd(struct wmi_t *wmip, A_UINT16 mmask,
+                            A_UINT16 tsr, A_BOOL rep, A_UINT16 size,
+                            A_UINT32 valid)
+{
+    void *osbuf;
+    WMIX_DBGLOG_CFG_MODULE_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMIX_DBGLOG_CFG_MODULE_CMD *)(A_NETBUF_DATA(osbuf));
+    cmd->config.cfgmmask = mmask;
+    cmd->config.cfgtsr = tsr;
+    cmd->config.cfgrep = rep;
+    cmd->config.cfgsize = size;
+    cmd->config.cfgvalid = valid;
+
+    return (wmi_cmd_send_xtnd(wmip, osbuf, WMIX_DBGLOG_CFG_MODULE_CMDID,
+                              NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_get_stats_cmd(struct wmi_t *wmip)
+{
+    void *osbuf;
+
+    osbuf = A_NETBUF_ALLOC(0);      /* no payload */
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_GET_STATISTICS_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_addBadAp_cmd(struct wmi_t *wmip, A_UINT8 apIndex, A_UINT8 *bssid)
+{
+    void *osbuf;
+    WMI_ADD_BAD_AP_CMD *cmd;
+
+    if ((bssid == NULL) || (apIndex > WMI_MAX_BAD_AP_INDEX)) {
+        return A_EINVAL;
+    }
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_ADD_BAD_AP_CMD *)(A_NETBUF_DATA(osbuf));
+    cmd->badApIndex = apIndex;
+    A_MEMCPY(cmd->bssid, bssid, sizeof(cmd->bssid));
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_ADD_BAD_AP_CMDID, NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_deleteBadAp_cmd(struct wmi_t *wmip, A_UINT8 apIndex)
+{
+    void *osbuf;
+    WMI_DELETE_BAD_AP_CMD *cmd;
+
+    if (apIndex > WMI_MAX_BAD_AP_INDEX) {
+        return A_EINVAL;
+    }
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_DELETE_BAD_AP_CMD *)(A_NETBUF_DATA(osbuf));
+    cmd->badApIndex = apIndex;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_DELETE_BAD_AP_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_txPwr_cmd(struct wmi_t *wmip, A_UINT8 dbM)
+{
+    void *osbuf;
+    WMI_SET_TX_PWR_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_SET_TX_PWR_CMD *)(A_NETBUF_DATA(osbuf));
+    cmd->dbM = dbM;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_TX_PWR_CMDID, NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_get_txPwr_cmd(struct wmi_t *wmip)
+{
+    void *osbuf;
+
+    osbuf = A_NETBUF_ALLOC(0);      /* no payload */
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_GET_TX_PWR_CMDID, NO_SYNC_WMIFLAG));
+}
+
+A_UINT16
+wmi_get_mapped_qos_queue(struct wmi_t *wmip, A_UINT8 trafficClass)
+{
+	A_UINT16 activeTsids=0;
+
+    LOCK_WMI(wmip);
+    activeTsids = wmip->wmi_streamExistsForAC[trafficClass];
+    UNLOCK_WMI(wmip);
+
+    return activeTsids;
+}
+
+A_STATUS
+wmi_get_roam_tbl_cmd(struct wmi_t *wmip)
+{
+    void *osbuf;
+
+    osbuf = A_NETBUF_ALLOC(0);      /* no payload */
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_GET_ROAM_TBL_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_get_roam_data_cmd(struct wmi_t *wmip, A_UINT8 roamDataType)
+{
+    void *osbuf;
+    A_UINT32 size = sizeof(A_UINT8);
+    WMI_TARGET_ROAM_DATA *cmd;
+
+    osbuf = A_NETBUF_ALLOC(size);      /* no payload */
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, size);
+
+    cmd = (WMI_TARGET_ROAM_DATA *)(A_NETBUF_DATA(osbuf));
+    cmd->roamDataType = roamDataType;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_GET_ROAM_DATA_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_roam_ctrl_cmd(struct wmi_t *wmip, WMI_SET_ROAM_CTRL_CMD *p,
+                      A_UINT8 size)
+{
+    void *osbuf;
+    WMI_SET_ROAM_CTRL_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, size);
+
+    cmd = (WMI_SET_ROAM_CTRL_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, size);
+
+    A_MEMCPY(cmd, p, size);
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_ROAM_CTRL_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_powersave_timers_cmd(struct wmi_t *wmip,
+                            WMI_POWERSAVE_TIMERS_POLICY_CMD *pCmd,
+                            A_UINT8 size)
+{
+    void *osbuf;
+    WMI_POWERSAVE_TIMERS_POLICY_CMD *cmd;
+
+    /* These timers can't be zero */
+    if(!pCmd->psPollTimeout || !pCmd->triggerTimeout ||
+       !(pCmd->apsdTimPolicy == IGNORE_TIM_ALL_QUEUES_APSD ||
+         pCmd->apsdTimPolicy == PROCESS_TIM_ALL_QUEUES_APSD) ||
+       !(pCmd->simulatedAPSDTimPolicy == IGNORE_TIM_SIMULATED_APSD ||
+         pCmd->simulatedAPSDTimPolicy == PROCESS_TIM_SIMULATED_APSD))
+        return A_EINVAL;
+
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, size);
+
+    cmd = (WMI_POWERSAVE_TIMERS_POLICY_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, size);
+
+    A_MEMCPY(cmd, pCmd, size);
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_POWERSAVE_TIMERS_POLICY_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+#ifdef CONFIG_HOST_GPIO_SUPPORT
+/* Send a command to Target to change GPIO output pins. */
+A_STATUS
+wmi_gpio_output_set(struct wmi_t *wmip,
+                    A_UINT32 set_mask,
+                    A_UINT32 clear_mask,
+                    A_UINT32 enable_mask,
+                    A_UINT32 disable_mask)
+{
+    void *osbuf;
+    WMIX_GPIO_OUTPUT_SET_CMD *output_set;
+    int size;
+
+    size = sizeof(*output_set);
+
+    A_DPRINTF(DBG_WMI,
+        (DBGFMT "Enter - set=0x%x clear=0x%x enb=0x%x dis=0x%x\n", DBGARG,
+        set_mask, clear_mask, enable_mask, disable_mask));
+
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+    A_NETBUF_PUT(osbuf, size);
+    output_set = (WMIX_GPIO_OUTPUT_SET_CMD *)(A_NETBUF_DATA(osbuf));
+
+    output_set->set_mask                   = set_mask;
+    output_set->clear_mask                 = clear_mask;
+    output_set->enable_mask                = enable_mask;
+    output_set->disable_mask               = disable_mask;
+
+    return (wmi_cmd_send_xtnd(wmip, osbuf, WMIX_GPIO_OUTPUT_SET_CMDID,
+                             NO_SYNC_WMIFLAG));
+}
+
+/* Send a command to the Target requesting state of the GPIO input pins */
+A_STATUS
+wmi_gpio_input_get(struct wmi_t *wmip)
+{
+    void *osbuf;
+
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    osbuf = A_NETBUF_ALLOC(0);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    return (wmi_cmd_send_xtnd(wmip, osbuf, WMIX_GPIO_INPUT_GET_CMDID,
+                             NO_SYNC_WMIFLAG));
+}
+
+/* Send a command to the Target that changes the value of a GPIO register. */
+A_STATUS
+wmi_gpio_register_set(struct wmi_t *wmip,
+                      A_UINT32 gpioreg_id,
+                      A_UINT32 value)
+{
+    void *osbuf;
+    WMIX_GPIO_REGISTER_SET_CMD *register_set;
+    int size;
+
+    size = sizeof(*register_set);
+
+    A_DPRINTF(DBG_WMI,
+        (DBGFMT "Enter - reg=%d value=0x%x\n", DBGARG, gpioreg_id, value));
+
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+    A_NETBUF_PUT(osbuf, size);
+    register_set = (WMIX_GPIO_REGISTER_SET_CMD *)(A_NETBUF_DATA(osbuf));
+
+    register_set->gpioreg_id               = gpioreg_id;
+    register_set->value                    = value;
+
+    return (wmi_cmd_send_xtnd(wmip, osbuf, WMIX_GPIO_REGISTER_SET_CMDID,
+                             NO_SYNC_WMIFLAG));
+}
+
+/* Send a command to the Target to fetch the value of a GPIO register. */
+A_STATUS
+wmi_gpio_register_get(struct wmi_t *wmip,
+                      A_UINT32 gpioreg_id)
+{
+    void *osbuf;
+    WMIX_GPIO_REGISTER_GET_CMD *register_get;
+    int size;
+
+    size = sizeof(*register_get);
+
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter - reg=%d\n", DBGARG, gpioreg_id));
+
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+    A_NETBUF_PUT(osbuf, size);
+    register_get = (WMIX_GPIO_REGISTER_GET_CMD *)(A_NETBUF_DATA(osbuf));
+
+    register_get->gpioreg_id               = gpioreg_id;
+
+    return (wmi_cmd_send_xtnd(wmip, osbuf, WMIX_GPIO_REGISTER_GET_CMDID,
+                             NO_SYNC_WMIFLAG));
+}
+
+/* Send a command to the Target acknowledging some GPIO interrupts. */
+A_STATUS
+wmi_gpio_intr_ack(struct wmi_t *wmip,
+                  A_UINT32 ack_mask)
+{
+    void *osbuf;
+    WMIX_GPIO_INTR_ACK_CMD *intr_ack;
+    int size;
+
+    size = sizeof(*intr_ack);
+
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter ack_mask=0x%x\n", DBGARG, ack_mask));
+
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+    A_NETBUF_PUT(osbuf, size);
+    intr_ack = (WMIX_GPIO_INTR_ACK_CMD *)(A_NETBUF_DATA(osbuf));
+
+    intr_ack->ack_mask               = ack_mask;
+
+    return (wmi_cmd_send_xtnd(wmip, osbuf, WMIX_GPIO_INTR_ACK_CMDID,
+                             NO_SYNC_WMIFLAG));
+}
+#endif /* CONFIG_HOST_GPIO_SUPPORT */
+
+A_STATUS
+wmi_set_access_params_cmd(struct wmi_t *wmip, A_UINT16 txop, A_UINT8 eCWmin,
+                          A_UINT8 eCWmax, A_UINT8 aifsn)
+{
+    void *osbuf;
+    WMI_SET_ACCESS_PARAMS_CMD *cmd;
+
+    if ((eCWmin > WMI_MAX_CW_ACPARAM) || (eCWmax > WMI_MAX_CW_ACPARAM) ||
+        (aifsn > WMI_MAX_AIFSN_ACPARAM))
+    {
+        return A_EINVAL;
+    }
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_SET_ACCESS_PARAMS_CMD *)(A_NETBUF_DATA(osbuf));
+    cmd->txop   = txop;
+    cmd->eCWmin = eCWmin;
+    cmd->eCWmax = eCWmax;
+    cmd->aifsn  = aifsn;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_ACCESS_PARAMS_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_retry_limits_cmd(struct wmi_t *wmip, A_UINT8 frameType,
+                         A_UINT8 trafficClass, A_UINT8 maxRetries,
+                         A_UINT8 enableNotify)
+{
+    void *osbuf;
+    WMI_SET_RETRY_LIMITS_CMD *cmd;
+
+    if ((frameType != MGMT_FRAMETYPE) && (frameType != CONTROL_FRAMETYPE) &&
+        (frameType != DATA_FRAMETYPE))
+    {
+        return A_EINVAL;
+    }
+
+    if (maxRetries > WMI_MAX_RETRIES) {
+        return A_EINVAL;
+    }
+
+    if (frameType != DATA_FRAMETYPE) {
+        trafficClass = 0;
+    }
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_SET_RETRY_LIMITS_CMD *)(A_NETBUF_DATA(osbuf));
+    cmd->frameType    = frameType;
+    cmd->trafficClass = trafficClass;
+    cmd->maxRetries   = maxRetries;
+    cmd->enableNotify = enableNotify;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_RETRY_LIMITS_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+void
+wmi_get_current_bssid(struct wmi_t *wmip, A_UINT8 *bssid)
+{
+    if (bssid != NULL) {
+        A_MEMCPY(bssid, wmip->wmi_bssid, ATH_MAC_LEN);
+    }
+}
+
+A_STATUS
+wmi_set_opt_mode_cmd(struct wmi_t *wmip, A_UINT8 optMode)
+{
+    void *osbuf;
+    WMI_SET_OPT_MODE_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_SET_OPT_MODE_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->optMode = optMode;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_OPT_MODE_CMDID,
+                         SYNC_BOTH_WMIFLAG));
+}
+
+A_STATUS
+wmi_opt_tx_frame_cmd(struct wmi_t *wmip,
+                      A_UINT8 frmType,
+                      A_UINT8 *dstMacAddr,
+                      A_UINT8 *bssid,
+                      A_UINT16 optIEDataLen,
+                      A_UINT8 *optIEData)
+{
+    void *osbuf;
+    WMI_OPT_TX_FRAME_CMD *cmd;
+    osbuf = A_NETBUF_ALLOC(optIEDataLen + sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, (optIEDataLen + sizeof(*cmd)));
+
+    cmd = (WMI_OPT_TX_FRAME_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, (optIEDataLen + sizeof(*cmd)-1));
+
+    cmd->frmType    = frmType;
+    cmd->optIEDataLen   = optIEDataLen;
+    //cmd->optIEData     = (A_UINT8 *)((int)cmd + sizeof(*cmd));
+    A_MEMCPY(cmd->bssid, bssid, sizeof(cmd->bssid));
+    A_MEMCPY(cmd->dstAddr, dstMacAddr, sizeof(cmd->dstAddr));
+    A_MEMCPY(&cmd->optIEData[0], optIEData, optIEDataLen);
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_OPT_TX_FRAME_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_adhoc_bconIntvl_cmd(struct wmi_t *wmip, A_UINT16 intvl)
+{
+    void *osbuf;
+    WMI_BEACON_INT_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_BEACON_INT_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->beaconInterval = intvl;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_BEACON_INT_CMDID,
+            NO_SYNC_WMIFLAG));
+}
+
+
+A_STATUS
+wmi_set_voice_pkt_size_cmd(struct wmi_t *wmip, A_UINT16 voicePktSize)
+{
+    void *osbuf;
+    WMI_SET_VOICE_PKT_SIZE_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_SET_VOICE_PKT_SIZE_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->voicePktSize = voicePktSize;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_VOICE_PKT_SIZE_CMDID,
+            NO_SYNC_WMIFLAG));
+}
+
+
+A_STATUS
+wmi_set_max_sp_len_cmd(struct wmi_t *wmip, A_UINT8 maxSPLen)
+{
+    void *osbuf;
+    WMI_SET_MAX_SP_LEN_CMD *cmd;
+
+    /* maxSPLen is a two-bit value. If user trys to set anything
+     * other than this, then its invalid
+     */
+    if(maxSPLen & ~0x03)
+        return  A_EINVAL;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_SET_MAX_SP_LEN_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->maxSPLen = maxSPLen;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_MAX_SP_LEN_CMDID,
+            NO_SYNC_WMIFLAG));
+}
+
+A_UINT8
+convert_userPriority_to_trafficClass(A_UINT8 userPriority)
+{
+        return  (up_to_ac[userPriority & 0x7]);
+}
+
+A_UINT8
+wmi_get_power_mode_cmd(struct wmi_t *wmip)
+{
+    return wmip->wmi_powerMode;
+}
+
+A_STATUS
+wmi_verify_tspec_params(WMI_CREATE_PSTREAM_CMD *pCmd, A_BOOL tspecCompliance)
+{
+    return A_OK;
+}
+
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+static A_STATUS
+wmi_tcmd_test_report_rx(struct wmi_t *wmip, A_UINT8 *datap, int len)
+{
+
+   A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+   A_WMI_TCMD_RX_REPORT_EVENT(wmip->wmi_devt, datap, len);
+
+   return A_OK;
+}
+
+#endif /* CONFIG_HOST_TCMD_SUPPORT*/
+
+A_STATUS
+wmi_set_authmode_cmd(struct wmi_t *wmip, A_UINT8 mode)
+{
+    void *osbuf;
+    WMI_SET_AUTH_MODE_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_SET_AUTH_MODE_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->mode = mode;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_AUTH_MODE_CMDID,
+            NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_reassocmode_cmd(struct wmi_t *wmip, A_UINT8 mode)
+{
+    void *osbuf;
+    WMI_SET_REASSOC_MODE_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_SET_REASSOC_MODE_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->mode = mode;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_REASSOC_MODE_CMDID,
+            NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_lpreamble_cmd(struct wmi_t *wmip, A_UINT8 status)
+{
+    void *osbuf;
+    WMI_SET_LPREAMBLE_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_SET_LPREAMBLE_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->status = status;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_LPREAMBLE_CMDID,
+            NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_rts_cmd(struct wmi_t *wmip, A_UINT16 threshold)
+{
+    void *osbuf;
+    WMI_SET_RTS_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_SET_RTS_CMD*)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->threshold = threshold;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_RTS_CMDID,
+            NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_wmm_cmd(struct wmi_t *wmip, WMI_WMM_STATUS status)
+{
+    void *osbuf;
+    WMI_SET_WMM_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_SET_WMM_CMD*)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->status = status;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_WMM_CMDID,
+            NO_SYNC_WMIFLAG));
+
+}
+
+A_STATUS
+wmi_set_wmm_txop(struct wmi_t *wmip, WMI_TXOP_CFG cfg)
+{
+    void *osbuf;
+    WMI_SET_WMM_TXOP_CMD *cmd;
+
+    if( !((cfg == WMI_TXOP_DISABLED) || (cfg == WMI_TXOP_ENABLED)) )
+        return A_EINVAL;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_SET_WMM_TXOP_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->txopEnable = cfg;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_WMM_TXOP_CMDID,
+            NO_SYNC_WMIFLAG));
+
+}
+
+#ifdef CONFIG_HOST_TCMD_SUPPORT
+/* WMI  layer doesn't need to know the data type of the test cmd.
+   This would be beneficial for customers like Qualcomm, who might
+   have different test command requirements from differnt manufacturers
+ */
+A_STATUS
+wmi_test_cmd(struct wmi_t *wmip, A_UINT8 *buf, A_UINT32  len)
+{
+    void *osbuf;
+    char *data;
+
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter\n", DBGARG));
+
+    osbuf= A_NETBUF_ALLOC(len);
+    if(osbuf == NULL)
+    {
+        return A_NO_MEMORY;
+    }
+    A_NETBUF_PUT(osbuf, len);
+    data = A_NETBUF_DATA(osbuf);
+    A_MEMCPY(data, buf, len);
+
+    return(wmi_cmd_send(wmip, osbuf, WMI_TEST_CMDID,
+         NO_SYNC_WMIFLAG));
+}
+
+#endif
+
+A_STATUS
+wmi_set_bt_status_cmd(struct wmi_t *wmip, A_UINT8 streamType, A_UINT8 status)
+{
+    void *osbuf;
+    WMI_SET_BT_STATUS_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_SET_BT_STATUS_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->streamType = streamType;
+    cmd->status = status;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_BT_STATUS_CMDID,
+            NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_bt_params_cmd(struct wmi_t *wmip, WMI_SET_BT_PARAMS_CMD* cmd)
+{
+    void *osbuf;
+    WMI_SET_BT_PARAMS_CMD* alloc_cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    alloc_cmd = (WMI_SET_BT_PARAMS_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(alloc_cmd, sizeof(*cmd));
+    A_MEMCPY(alloc_cmd, cmd, sizeof(*cmd));
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_BT_PARAMS_CMDID,
+            NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_get_keepalive_configured(struct wmi_t *wmip)
+{
+    void *osbuf;
+    WMI_GET_KEEPALIVE_CMD *cmd;
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+    cmd = (WMI_GET_KEEPALIVE_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    return (wmi_cmd_send(wmip, osbuf, WMI_GET_KEEPALIVE_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_UINT8
+wmi_get_keepalive_cmd(struct wmi_t *wmip)
+{
+    return wmip->wmi_keepaliveInterval;
+}
+
+A_STATUS
+wmi_set_keepalive_cmd(struct wmi_t *wmip, A_UINT8 keepaliveInterval)
+{
+    void *osbuf;
+    WMI_SET_KEEPALIVE_CMD *cmd;
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*cmd));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*cmd));
+
+    cmd = (WMI_SET_KEEPALIVE_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd->keepaliveInterval = keepaliveInterval;
+    wmip->wmi_keepaliveInterval = keepaliveInterval;
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_KEEPALIVE_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_appie_cmd(struct wmi_t *wmip, A_UINT8 mgmtFrmType, A_UINT8 ieLen,
+                  A_UINT8 *ieInfo)
+{
+    void *osbuf;
+    WMI_SET_APPIE_CMD *cmd;
+    A_UINT16 cmdLen;
+
+    if (ieLen > WMI_MAX_IE_LEN) {
+        return A_ERROR;
+    }
+    cmdLen = sizeof(*cmd) + ieLen - 1;
+    osbuf = A_NETBUF_ALLOC(cmdLen);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, cmdLen);
+
+    cmd = (WMI_SET_APPIE_CMD *)(A_NETBUF_DATA(osbuf));
+    A_MEMZERO(cmd, cmdLen);
+
+    cmd->mgmtFrmType = mgmtFrmType;
+    cmd->ieLen = ieLen;
+    A_MEMCPY(cmd->ieInfo, ieInfo, ieLen);
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_APPIE_CMDID, NO_SYNC_WMIFLAG));
+}
+
+A_STATUS
+wmi_set_halparam_cmd(struct wmi_t *wmip, A_UINT8 *cmd, A_UINT16 dataLen)
+{
+    void *osbuf;
+    A_UINT8 *data;
+
+    osbuf = A_NETBUF_ALLOC(dataLen);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, dataLen);
+
+    data = A_NETBUF_DATA(osbuf);
+
+    A_MEMCPY(data, cmd, dataLen);
+
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_WHALPARAM_CMDID, NO_SYNC_WMIFLAG));
+}
+
+A_INT32
+wmi_get_rate(A_INT8 rateindex)
+{
+    if (rateindex == RATE_AUTO) {
+        return 0;
+    } else {
+        return(wmi_rateTable[(A_UINT32) rateindex]);
+    }
+}
+
+void
+wmi_node_return (struct wmi_t *wmip, bss_t *bss)
+{
+	if (NULL != bss)
+	{
+		wlan_node_return (&wmip->wmi_scan_table, bss);
+	}
+}
+
+bss_t *
+wmi_find_Ssidnode (struct wmi_t *wmip, A_UCHAR *pSsid,
+				   A_UINT32 ssidLength, A_BOOL bIsWPA2)
+{
+	bss_t *node = NULL;
+    node = wlan_find_Ssidnode (&wmip->wmi_scan_table, pSsid,
+							   ssidLength, bIsWPA2);
+	return node;
+}
+
+void
+wmi_free_allnodes(struct wmi_t *wmip)
+{
+	wlan_free_allnodes(&wmip->wmi_scan_table);
+}
+
+bss_t *
+wmi_find_node(struct wmi_t *wmip, const A_UINT8 *macaddr)
+{
+	bss_t *ni=NULL;
+	ni=wlan_find_node(&wmip->wmi_scan_table,macaddr);
+	return ni;
+}
+
+A_STATUS
+wmi_dset_open_reply(struct wmi_t *wmip,
+                    A_UINT32 status,
+                    A_UINT32 access_cookie,
+                    A_UINT32 dset_size,
+                    A_UINT32 dset_version,
+                    A_UINT32 targ_handle,
+                    A_UINT32 targ_reply_fn,
+                    A_UINT32 targ_reply_arg)
+{
+    void *osbuf;
+    WMIX_DSETOPEN_REPLY_CMD *open_reply;
+
+    A_DPRINTF(DBG_WMI, (DBGFMT "Enter - wmip=0x%x\n", DBGARG, (int)wmip));
+
+    osbuf = A_NETBUF_ALLOC(sizeof(*open_reply));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    A_NETBUF_PUT(osbuf, sizeof(*open_reply));
+    open_reply = (WMIX_DSETOPEN_REPLY_CMD *)(A_NETBUF_DATA(osbuf));
+
+    open_reply->status                   = status;
+    open_reply->targ_dset_handle         = targ_handle;
+    open_reply->targ_reply_fn            = targ_reply_fn;
+    open_reply->targ_reply_arg           = targ_reply_arg;
+    open_reply->access_cookie            = access_cookie;
+    open_reply->size                     = dset_size;
+    open_reply->version                  = dset_version;
+
+    return (wmi_cmd_send_xtnd(wmip, osbuf, WMIX_DSETOPEN_REPLY_CMDID,
+                             NO_SYNC_WMIFLAG));
+}
+
+static A_STATUS
+wmi_get_pmkid_list_event_rx(struct wmi_t *wmip, A_UINT8 *datap, A_UINT32 len)
+{
+    WMI_PMKID_LIST_REPLY *reply;
+    A_UINT32 expected_len;
+
+    if (len < sizeof(WMI_PMKID_LIST_REPLY)) {
+        return A_EINVAL;
+    }
+    reply = (WMI_PMKID_LIST_REPLY *)datap;
+    expected_len = sizeof(reply->numPMKID) + reply->numPMKID * WMI_PMKID_LEN;
+
+    if (len < expected_len) { 
+        return A_EINVAL;
+    }
+
+    A_WMI_PMKID_LIST_EVENT(wmip->wmi_devt, reply->numPMKID,
+                           reply->pmkidList);
+
+    return A_OK;
+}
+
+#ifdef CONFIG_HOST_DSET_SUPPORT
+A_STATUS
+wmi_dset_data_reply(struct wmi_t *wmip,
+                    A_UINT32 status,
+                    A_UINT8 *user_buf,
+                    A_UINT32 length,
+                    A_UINT32 targ_buf,
+                    A_UINT32 targ_reply_fn,
+                    A_UINT32 targ_reply_arg)
+{
+    void *osbuf;
+    WMIX_DSETDATA_REPLY_CMD *data_reply;
+    int size;
+
+    size = sizeof(*data_reply) + length;
+
+    A_DPRINTF(DBG_WMI,
+        (DBGFMT "Enter - length=%d status=%d\n", DBGARG, length, status));
+
+    osbuf = A_NETBUF_ALLOC(size);
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+    A_NETBUF_PUT(osbuf, size);
+    data_reply = (WMIX_DSETDATA_REPLY_CMD *)(A_NETBUF_DATA(osbuf));
+
+    data_reply->status                     = status;
+    data_reply->targ_buf                   = targ_buf;
+    data_reply->targ_reply_fn              = targ_reply_fn;
+    data_reply->targ_reply_arg             = targ_reply_arg;
+    data_reply->length                     = length;
+
+    if (status == A_OK) {
+        if (a_copy_from_user(data_reply->buf, user_buf, length)) {
+            return A_ERROR;
+        }
+    }
+
+    return (wmi_cmd_send_xtnd(wmip, osbuf, WMIX_DSETDATA_REPLY_CMDID,
+                             NO_SYNC_WMIFLAG));
+}
+#endif /* CONFIG_HOST_DSET_SUPPORT */
+
+A_STATUS
+wmi_set_wsc_status_cmd(struct wmi_t *wmip, A_UINT32 status)
+{
+    void *osbuf;
+    char *cmd;
+
+	wps_enable = status;
+
+    osbuf = a_netbuf_alloc(sizeof(1));
+    if (osbuf == NULL) {
+        return A_NO_MEMORY;
+    }
+
+    a_netbuf_put(osbuf, sizeof(1));
+
+    cmd = (char *)(a_netbuf_to_data(osbuf));
+
+    A_MEMZERO(cmd, sizeof(*cmd));
+    cmd[0] = (status?1:0);
+    return (wmi_cmd_send(wmip, osbuf, WMI_SET_WSC_STATUS_CMDID,
+                         NO_SYNC_WMIFLAG));
+}
+

Added: trunk/src/target/AR6kSDK.build_sw.18/host/wmi/wmi_doc.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/wmi/wmi_doc.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/wmi/wmi_doc.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,4421 @@
+/*
+ *
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+
+#if 0
+Wireless Module Interface (WMI) Documentaion
+
+   This section describes the format and the usage model for WMI control and
+   data messages between the host and the AR6000-based targets. The header
+   file include/wmi.h contains all command and event manifest constants as
+   well as structure typedefs for each set of command and reply parameters.
+
+Data Frames
+
+   The data payload transmitted and received by the target follows RFC-1042
+   encapsulation and thus starts with an 802.2-style LLC-SNAP header. The
+   WLAN module completes 802.11 encapsulation of the payload, including the
+   MAC header, FCS, and WLAN security related fields. At the interface to the
+   message transport (HTC), a data frame is encapsulated in a WMI message.
+
+WMI Message Structure
+
+   The WMI protocol leverages an 802.3-style Ethernet header in communicating
+   the source and destination information between the host and the AR6000
+   modules using a 14-byte 802.3 header ahead of the 802.2-style payload. In
+   addition, the WMI protocol adds a header to all data messages:
+
+    {
+    INT8    rssi
+                  The RSSI of the received packet and its units are shown in db above the
+                      noise floor, and the noise floor is shown in dbm.
+    UINT8   info
+                      Contains information on message type and user priority. Message type
+                      differentiates between a data packet and a synchronization message.
+    } WMI_DATA_HDR
+
+   User priority contains the 802.1d user priority info from host to target. Host
+   software translates the host Ethernet format to 802.3 format prior to Tx and
+   802.3 format to host format in the Rx direction. The host does not transmit the
+   FCS that follows the data. MsgType differentiates between a regular data
+   packet (msgType=0) and a synchronization message (msgType=1).
+
+Data Endpoints
+
+   The AR6000 chipset provides several data endpoints to support quality of
+   service (QoS) and maintains separate queues and separate DMA engines for
+   each data endpoint. A data endpoint can be bi-directional.
+
+   Best effort (BE) class traffic uses the default data endpoint (2). The host can
+   establish up to two additional data endpoints for other traffic classes. Once
+   such a data endpoint is established, it sends and receives corresponding QoS
+   traffic in a manner similar to the default data endpoint.
+
+   If QoS is desired over the interconnect, host software must classify each data
+   packet and place it on the appropriate data endpoint. The information
+   required to classify data is generally available in-band as an 802.1p/q style
+   tag or as the ToS field in the IP header. The information may also be available
+   out-of-band depending on the host DDI.
+
+Connection States
+
+   Table B-1 describes the AR6000 WLAN connection states:
+
+   Table B-1.  AR6000 Connection States
+
+Connection State
+    Description
+
+   DISCONNECTED
+    In this state, the AR6000 device is not connected to a wireless
+   network. The device is in this state after reset when it sends the
+   WIRELESS MODULE “READY” EVENT, after it processes a
+   DISCONNECT command, and when it loses its link with the
+   access point (AP) that it was connected to. The device signals a
+   transition to the DISCONNECTED state with a “DISCONNECT”
+   event.
+
+CONNECTED
+    In this state, the AR6000 device is connected to wireless networks.
+   The device enters this state after successfully processing a
+   CONNECT, which establishes a connection with a wireless
+   network. The device signals a transition to the CONNECTED state
+   with a “CONNECT” event.
+
+
+Message Types
+
+   WMI uses commands, replies, and events for the control and configuration of
+   the AR6000 device. The control protocol is asynchronous. Table B-2 describes
+   AR6000 message types:
+
+Table B-2.  AR6000 Message Types
+
+Message Type
+    Description
+
+Commands
+    Control messages that flow from the host to the device
+
+Replies/Events
+    Control messages that flow from the device to the host.
+
+   The device issues a reply to some WMI commands, but not to others.
+   The payload in a reply is command-specific, and some commands do
+   not trigger a reply message at all. Events are control messages issued
+   by the device to signal the occurrence of an asynchronous event.
+
+
+WMI Message Format
+
+   All WMI control commands, replies and events use the header format:
+
+   WMI_CMD_HDR Header Format
+   {
+        UINT16 id
+                 This 16-bit constant identifies which WMI command the host is issuing,
+                 which command the target is replying to, or which event has occurred.
+        WMI_CMD_HDR
+   }
+
+
+   A variable-size command-, reply-, or event-specific payload follows the
+   header. Over the interconnect, all fields in control messages (including
+   WMI_CMD_HDR and the command specific payload) use 32-bit little Endian
+   byte ordering and fields are packed. The AR6000 device always executes
+   commands in order, and the host may send multiple commands without
+   waiting for previous commands to complete. A majority of commands are
+   processed to completion once received. Other commands trigger a longer
+   duration activity whose completion is signaled to the host through an event.
+
+Command Restrictions
+
+   Some commands may only be issued when the AR6000 device is in a certain
+   state. The host is required to wait for an event signaling a state transition
+   before such a command can be issued. For example, if a command requires
+   the device to be in the CONNECTED state, then the host is required to wait
+   for a “CONNECT” event before it issues that command.
+
+   The device ignores any commands inappropriate for its current state. If the
+   command triggers a reply, the device generates an error reply. Otherwise, the
+   device silently ignores the inappropriate command.
+
+Command and Data Synchronization
+
+   WMI provides a mechanism for a host to advise the device of necessary
+   synchronization between commands and data. The device implements
+   synchronization; no implicit synchronization exists between endpoints.
+
+   The host controls synchronization using the “SYNCHRONIZE” command
+   over the control channel and synchronization messages over data channels.
+   The device stops each data channel upon receiving a synchronization message
+   on that channel, processing all data packets received prior to that message.
+   After the device receives synchronization messages for each data endpoint
+   and the “SYNCHRONIZE” command, it resumes all channels.
+
+   When the host must guarantee a command executes before processing new
+   data packets, it first issues the command, then issues the “SYNCHRONIZE”
+   command and sends synchronization messages on data channels. When the
+   host must guarantee the device has processed all old data packets before a
+   processing a new command, it issues a “SYNCHRONIZE” command and
+   synchronization messages on all data channels, then issues the desired
+   command.
+
+
+
+WMI Commands
+
+   ADD_BAD_AP
+    Cause the AR6000 device to avoid a particular AP
+   ADD_CIPHER_KEY
+    Add or replace any of the four AR6000 encryption keys
+   ADD_WOW_PATTERN
+    Used to add a pattern to the WoW pattern list
+   CLR_RSSI_SNR
+    Clear the current calculated RSSI and SNR value
+   CONNECT_CMD
+    Request that the AR6000 device establish a wireless connection
+        with the specified SSID
+   CREATE_PSTREAM
+    Create prioritized data endpoint between the host and device
+   DELETE_BAD_AP
+    Clear an entry in the bad AP table
+   DELETE_CIPHER_KEY
+    Delete a previously added cipher key
+   DELETE_PSTREAM
+    Delete a prioritized data endpoint
+   DELETE_WOW_PATTERN
+    Remove a pre-specified pattern from the WoW pattern list
+   EXTENSION
+    WMI message interface command
+   GET_BIT_RATE
+    Retrieve rate most recently used by the AR6000
+   GET_CHANNEL_LIST
+    Retrieve list of channels used by the AR6000
+   GET_FIXRATES
+    Retrieves the rate-mask set via the SET_FIXRATES command.
+   GET_PMKID_LIST_CMD
+    Retrieve the firmware list of PMKIDs
+   GET_ROAM_DATA
+    Internal use for data collection; available in special build only
+   GET_ROAM_TBL
+    Retrieve the roaming table maintained on the target
+   GET_TARGET_STATS
+    Request that the target send the statistics it maintains
+   GET_TX_PWR
+    Retrieve the current AR6000 device Tx power levels
+   GET_WOW_LIST
+    Retrieve the current list of WoW patterns
+   LQ_THRESHOLD_PARAMS
+    Set the link quality thresholds
+   OPT_TX_FRAME
+    Send a special frame (special feature)
+   RECONNECT
+    Request a reconnection to a BSS
+   RSSI_THRESHOLD_PARAMS
+    Configure how the AR6000 device monitors and reports signal
+       strength (RSSI) of the connected BSS
+   SCAN_PARAMS
+    Determine dwell time and changes scanned channels
+   SET_ACCESS_PARAMS
+    Set access parameters for the wireless network
+   SET_ADHOC_BSSID
+    Set the BSSID for an ad hoc network
+   SET_AKMP_PARAMS
+    Set multiPMKID mode
+   SET_APPIE
+    Add application-specified IE to a management frame
+   SET_ASSOC_INFO
+    Specify the IEs the device should add to association or
+        reassociation requests
+   SET_AUTH_MODE
+    Set 802.11 authentication mode of reconnection
+   SET_BEACON_INT
+    Set the beacon interval for an ad hoc network
+   SET_BIT_RATE
+    Set the AR6000 to a specific fixed bit rate
+   SET_BMISS_TIME
+    Set the beacon miss time
+   SET_BSS_FILTER
+    Inform the AR6000 of network types about which it wants to
+        receive information using a “BSSINFO” event
+   SET_BT_PARAMS
+    Set the status of a Bluetooth stream (SCO or A2DP) or set
+        Bluetooth coexistence register parameters
+   SET_BT_STATUS
+    Set the status of a Bluetooth stream (SCO or A2DP)
+   SET_CHANNEL_PARAMETERS
+    Configure WLAN channel parameters
+   SET_DISC_TIMEOUT
+    Set the amount of time the AR6000 spends attempting to
+        reestablish a connection
+   SET_FIXRATES
+    Set the device to a specific fixed PHY rate (supported subset)
+   SET_HALPARAM
+    Internal AR6000 command to set certain hardware parameters
+   SET_HOST_SLEEP_MODE
+    Set the host mode to asleep or awake
+   SET_IBSS_PM_CAPS
+    Support a non-standard power management scheme for an
+        ad hoc network
+   SET_LISTEN_INT
+    Request a listen interval
+   SET_LPREAMBLE
+    Override the short preamble capability of the AR6000 device
+   SET_MAX_SP_LEN
+    Set the maximum service period
+   SET_OPT_MODE
+    Set the special mode on/off (special feature)
+   SET_PMKID
+    Set the pairwise master key ID (PMKID)
+   SET_PMKID_LIST_CMD
+    Configure the firmware list of PMKIDs
+   SET_POWER_MODE
+    Set guidelines on trade-off between power utilization
+   SET_POWER_PARAMS
+    Configure power parameters
+   SET_POWERSAVE_PARAMS
+    Set the two AR6000 power save timers
+   SET_PROBED_SSID
+    Provide list of SSIDs the device should seek
+   SET_REASSOC_MODE
+    Specify whether the disassociated frame should be sent upon
+        reassociation
+   SET_RETRY_LIMITS
+    Limit how many times the device tries to send a frame
+   SET_ROAM_CTRL
+    Control roaming behavior
+   SET_RTS
+    Determine when RTS should be sent
+   SET_SCAN_PARAMS
+    Set the AR6000 scan parameters
+   SET_TKIP_COUNTERMEASURES
+    Enable/disable reports of TKIP MIC errors
+   SET_TX_PWR
+    Specify the AR6000 device Tx power levels
+   SET_VOICE_PKT_SIZE
+    Set voice packet size
+   SET_WMM
+    Override the AR6000 WMM capability
+   SET_WMM_TXOP
+    Configure TxOP bursting when sending traffic to a WMM-
+    capable AP
+   SET_WOW_MODE
+    Enable/disable WoW mode
+   SET_WSC_STATUS
+    Enable/disable profile check in cserv when the WPS protocol
+    is in progress
+   SNR_THRESHOLD_PARAMS
+    Configure how the device monitors and reports SNR of BSS
+   START_SCAN
+    Start a long or short channel scan
+   SYNCHRONIZE
+    Force a synchronization point between command and data
+    paths
+   TARGET_REPORT_ERROR_BITMASK
+    Control “ERROR_REPORT” events from the AR6000
+
+
+
+
+Name
+    ADD_BAD_AP
+
+Synopsis
+    The host uses this command to cause the AR6000 to avoid a particular AP. The
+    AR6000 maintain a table with up to two APs to avoid. An ADD_BAD_AP command
+    adds or replaces the specified entry in this bad AP table.
+
+    If the AR6000 are currently connected to the AP specified in this command, they
+    disassociate.
+
+Command
+    wmiconfig eth1 --badap <bssid> <badApIndex>
+
+Command Parameters
+    UINT8 badApIndex    Index [0...1] that identifies which entry in the
+                        bad AP table to use
+
+
+    UINT8 bssid[6]  MAC address of the AP to avoid
+
+Command Values
+    badApIndex = 0, 1    Entry in the bad AP table to use
+
+Reset Value
+    The bad AP table is cleared
+
+Restrictions
+    None
+
+See Also
+    “DELETE_BAD_AP” on page B-13
+
+=====================================================================
+Name
+    ADD_CIPHER_KEY
+
+Synopsis
+    The host uses this command to add/replace any of four encryption keys on the
+    AR6000. The ADD_CIPHER_KEY command is issued after the CONNECT event
+    has been received by the host for all dot11Auth modes except for SHARED_AUTH.
+    When the dot11AuthMode is SHARED_AUTH, then the ADD_CIPHER_KEY
+    command should be issued before the “CONNECT” command.
+
+Command
+    wmiconfig eth1 --cipherkey <keyIndex> <keyType> <keyUsage>
+                            <keyLength> <keyopctrl> <keyRSC> <key>
+
+Command Parameters
+    UINT8 keyIndex      Index (0...3) of the key to add/replace;
+                        uniquely identifies the key
+    UINT8 keyType    CRYPTO_TYPE
+    UINT8 keyUsage   Specifies usage parameters of the key when
+                     keyType = WEP_CRYPT
+    UINT8 keyLength  Length of the key in bytes
+    UINT8 keyOpCtrl  bit[0] = Initialize TSC (default),
+                     bit[1] = Initialize RSC
+    UINT8 keyRSC[8]  Key replay sequence counter (RSC) initial
+                     value the device should use
+    UINT8 key[32]    Key material used for this connection
+    Command Values
+    {
+        NONE_CRYPT = 1
+        WEP_CRYPT  = 2
+        TKIP_CRYPT = 3
+        AES_CRYPT  = 4
+        KEY_OP_INIT_TSC   0x01
+        KEY_OP_INIT_RSC   0x02
+        KEY_OP_INIT_VAL   0x03
+                Default is to Initialize the TSC
+        KEY_OP_VALID_MASK 0x04
+                Two operations defined
+    } CRYPTO_TYPE
+
+    {
+        PAIRWISE_USAGE  = 0  Set if the key is used for unicast traffic only
+        GROUP_USAGE     = 1  Set if the key is used to receive multicast
+                              traffic (also set for static WEP keys)
+        TX_USAGE        = 2  Set for the GROUP key used to transmit frames
+                All others are reserved
+    } KEY_USAGE
+
+Reset Value
+    The four available keys are disabled.
+
+Restrictions
+    The cipher should correspond to the encryption mode specified in the “CONNECT”
+    command.
+
+See Also
+    “DELETE_CIPHER_KEY”
+
+=====================================================================
+
+
+Name
+    ADD_WOW_PATTERN
+
+Synopsis
+    The host uses this command to add a pattern to the WoW pattern list; used for
+    pattern-matching for host wakeups by the WoW module. If the host mode is asleep
+    and WoW is enabled, all packets are matched against the existing WoW patterns. If a
+    packet matches any of the patterns specified, the target will wake up the host. All
+    non-matching packets are discarded by the target without being sent up to the host.
+
+Command
+    wmiconfig –addwowpattern <list-id> <filter-size> <filter-offset>
+    <pattern> <mask>
+
+Command Parameters
+    A_UINT8  filter_list_id    ID of the list that is to include the new pattern
+    A_UINT8  filter_size       Size of the new pattern
+    A_UINT8  filter_offset     Offset at which the pattern matching for this
+                                new pattern should begin at
+    A_UINT8  filter[1]         Byte stream that contains both the pattern and
+                                the mask of the new WoW wake-up pattern
+
+Reply Parameters
+    None
+
+Reset Value
+    None defined (default host mode is awake)
+
+Restrictions
+    None
+
+See Also
+    “DELETE_WOW_PATTERN”
+
+=====================================================================
+
+
+Name
+    CLR_RSSI_SNR
+
+Synopsis
+    Clears the current calculated RSSI and SNR value. RSSI and SNR are reported by
+    running-average value. This command will clear the history and have a fresh start
+    for the running-average mechanism.
+
+Command
+    wmiconfig eth1 --cleanRssiSnr
+
+Command Parameters
+    None
+
+Reply Parameters
+    None
+
+Reset Value
+    None defined
+
+Restrictions
+    None
+
+=====================================================================
+
+Name
+    CONNECT_CMD
+
+Synopsis
+    New connect control information (connectCtrl) is added, with 32 possible modifiers.
+
+    CONNECT_SEND_REASSOC
+        Valid only for a host-controlled connection to a
+        particular AP. If this bit is set, a reassociation frame is
+        sent. If this bit is clear, an association request frame is
+        sent to the AP.
+
+    CONNECT_IGNORE_WPAx_GROUP_CIPHER
+        No group key is issued in the CONNECT command,
+        so use the group key advertised by the AP. In a target-
+        initiated roaming situation this allows a STA to roam
+        between APs that support different multicast ciphers.
+
+    CONNECT_PROFILE_MATCH_DONE
+        In a host-controlled connection case, it is possible that
+        during connect, firmware may not have the
+        information for a profile match (e.g, when the AP
+        supports hidden SSIDs and the device may not
+        transmit probe requests during connect). By setting
+        this bit in the connection control information, the
+        firmware waits for a beacon from the AP with the
+        BSSID supplied in the CONNECT command. No
+        additional profile checks are done.
+
+    CONNECT_IGNORE_AAC_BEACON
+        Ignore the Admission Capacity information in the
+        beacon of the AP
+
+    CONNECT_ASSOC_POLICY_USER
+        When set, the CONNECT_SEND_REASSOC setting
+        determines if an Assoc or Reassoc is sent to an AP
+
+Command
+    wmiconfig --setconnectctrl <ctrl flags bitmask>
+
+Command Parameters
+    typedef struct{
+    A_UINT8 networktype;
+    A_UINT8 dot11authmode;
+    A_UINT8 authmode;
+    A_UINT8 pairwiseCryptoType; /*CRYPTO_TYPE*/
+    A_UINT8 pairwiseCryptoLen;
+    A_UINT8 groupCryptoType; /*CRYPTO_TYPE*/
+    A_UINT8 groupCryptoLen;
+    A_UINT8 ssidLength;
+    A_UCHAR ssid[WMI_MAX_SSID_LEN];
+    A_UINT16 channel;
+    A_UINT8 bssid[AUTH_MAC_LEN];
+    A_UINT8 ctrl_flags; /*WMI_CONNECT_CTRL_FLAGS_BITS*/
+    } WMI_CONNECT_CMD;
+
+    ctrl flags bitmask
+        = 0x0001 CONNECT_ASSOC_POLICY_USER
+            Assoc frames are sent using the policy specified by
+            the flag
+        = 0x0002 CONNECT_SEND_REASSOC
+            Send Reassoc frame while connecting, otherwise send
+            assoc frames
+        = 0x0004 CONNECT_IGNORE_WPAx_GROUP_CIPHER
+            Ignore WPAx group cipher for WPA/WPA2
+        = 0x0008 CONNECT_PROFILE_MATCH_DONE
+            Ignore any profile check
+        = 0x0010 CONNECT_IGNORE_AAC_BEACON
+            Ignore the admission control information in the
+            beacon
+        ... CONNECT_CMD, continued
+        Command Values
+        typedef enum {
+            INFRA_NETWORK       = 0x01,
+            ADHOC_NETWORK       = 0x02,
+            ADHOC_CREATOR       = 0x04,
+        } NETWORK_TYPE;
+
+        typedef enum {
+            OPEN_AUTH           = 0x01,
+            SHARED_AUTH         = 0x02,
+            LEAP_AUTH           = 0x04,
+        } DOT11_AUTH_MODE;
+        typedef enum {
+            NONE_AUTH           = 0x01,
+            WPA_AUTH            = 0x02,
+            WPA_PSK_AUTH        = 0x03,
+            WPA2_AUTH           = 0x04,
+            WPA2_PSK_AUTH       = 0x05,
+            WPA_AUTH_CCKM       = 0x06,
+            WPA2_AUTH_CCKM      = 0x07,
+        } AUTH_MODE;
+        typedef enum {
+            NONE_CRYPT          = 0x01,
+            WEP_CRYPT           = 0x02,
+            TKIP_CRYPT          = 0x03,
+            AES_CRYPT           = 0x04,
+        } CRYPTO_TYPE;
+        typedef enum {
+            CONNECT_ASSOC_POLICY_USER = 0x0001,
+            CONNECT_SEND_REASSOC = 0x0002,
+            CONNECT_IGNORE_WPAx_GROUP_CIPHER = 0x0004,
+            CONNECT_PROFILE_MATCH_DONE = 0x0008,
+            CONNECT_IGNORE_AAC_BEACON = 0x0010,
+        } WMI_CONNECT_CTRL_FLAGS_BITS;
+
+    pairwiseCryptoLen and groupCryptoLen are valid when the respective
+    CryptoTypesis WEP_CRYPT, otherwise this value should be 0. This is the length in
+    bytes.
+
+Reset Value
+    None defined
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    CREATE_PSTREAM
+
+Synopsis
+    The host uses this command to create a new prioritized data endpoint between the
+    host and the AR6000 device that carries a prioritized stream of data. If the AP that the
+    device connects to requires TSPEC stream establishment, the device requests the
+    corresponding TSPEC with the AP. The maximum and minimum service interval
+    ranges from 0 – 0x7FFFFFFF (ms), where 0 = disabled. The device does not send a
+    reply event for this command, as it is always assumed the command has succeeded.
+    An AP admission control response comes to the host via a WMI_CAC_INDICATION
+    event, once the response for the ADDTS frame comes.
+
+    Examples of cases where reassociation is generated (when WMM) and cases where
+    ADDTS is generated (when WMM and enabling ACM) are when:
+        Changing UAPSD flags in WMM mode, reassociation is generated
+        Changing the interval of sending auto QoS Null frame in WMM mode;
+            reassociation is not generated
+        Issuing a command with same previous parameters in WMM mode and enabling
+            ACM, an ADDTS request is generated
+        Changing the interval of a QoS null frame sending in WMM mode and enabling
+            ACM, an ADDTS request is generated
+        Issuing the command in disconnected state, reassociation or ADDTS is not
+            generated but the parameters are available after (re)association
+
+Command
+    --createqos <user priority> <direction> <traffic class>
+<trafficType> <voice PS capability> <min service interval> <max
+service interval> <inactivity interval> <suspension interval>
+<service start time> <tsid> <nominal MSDU> <max MSDU> <min data
+rate> <mean data rate> <peak data rate> <max burst size> <delay
+bound> <min phy rate> <sba> <medium time> where:
+
+    <user priority>
+    802.1D user priority range (0–7)
+    <direction>
+        = 0    Tx (uplink) traffic
+        = 1    Rx (downlink) traffic
+        = 2    Bi-directional traffic
+    <traffic class>
+        = 1    BK
+        = 2    VI
+        = 3    VO
+    <trafficType>
+        = 0    Aperiodic
+        = 1    Periodic
+    <voice PS capability>
+        Specifies whether the voice power save mechanism
+    (APSD if AP supports it or legacy/simulated APSD
+    [using PS-Poll]) should be used
+        = 0    Disable voice power save for traffic class
+        = 1    Enable APSD voice power save for traffic class
+        = 2    Enable voice power save for all traffic classes
+    <min service interval>
+        (In ms)
+    <max service interval>
+        Inactivity interval (in ms) (0 = Infinite)
+    <suspension interval>
+        (In ms)
+    <service start time>
+        Service start time
+    <tsid>
+        TSID range (0–15)
+    <nominal MSDU>
+        Nominal MAC SDU size
+    <max MSDU>
+        Maximum MAC SDU size
+    <min data rate>
+        Minimum data rate (in bps)
+    <mean data rate>
+        Mean data rate (in bps)
+    <peak data rate>
+        Peak data rate (in bps)
+    <max burst size>
+        Maximum burst size (in bps)
+    <delay bound>
+        Delay bound
+    <min phy rate>
+        Minimum PHY rate (in bps)
+    <sba>
+        Surplus bandwidth allowance
+    <medium time>
+        Medium time in TU of 32-ms periods per sec
+    ... CREATE_PSTREAM (continued)
+
+Command Parameters
+    UINT8 trafficClass    TRAFFIC_CLASS value
+    UINT8 traffic
+    Direction
+    DIR_TYPE value
+    UINT8    rxQueueNum
+        AR6000 device mailbox index (2 or 3)
+        corresponding to the endpoint the host
+        wishes to use to receive packets for the
+        prioritized stream
+    UINT8 trafficType  TRAFFIC_TYPE value
+    UINT8 voicePS
+Capability
+    VOICEPS_CAP_TYPE value
+    UINT8 tsid          Traffic stream ID
+    UINT8 userPriority  802.1D user priority
+    UINT16 nominalMSDU  Nominal MSDU in octets
+    UINT16 maxMSDU      Maximum MSDU in octets
+    UINT32 minServiceInt Minimum service interval: the min.
+                            period of traffic specified (in ms)
+    UINT32 maxServiceInt  Maximum service interval: the max.
+                        period of traffic specified (in ms)
+    UINT32 inactivityInt Indicates how many ms an established
+                        stream is inactive before the prioritized
+                        data endpoint is taken down and the
+                        corresponding T-SPEC deleted
+    UINT32 suspensionInt  Suspension interval (in ms)
+    UINT32 service       StartTime Service start time
+    UINT32 minDataRate  Minimum data rate (in bps)
+    UINT32 meanDataRate Mean data rate (in bps)
+    UINT32 peakDataRate Peak data rate (in bps)
+    UINT32 maxBurstSize
+    UINT32 delayBound
+    UINT32 minPhyRate   Minimum PHY rate for TSPEC (in bps)
+    UINT32 sba          Surplus bandwidth allowance
+    UINT32 mediumTime   Medium TSPEC time (in units of 32 ms)
+Command Values
+    {
+        WMM_AC_BE = 0   Best Effort
+        WMM_AC_BK = 1   Background
+        WMM_AC_VI = 2   Video
+        WMM_AC_VO = 3   Voice
+        All other values reserved
+    } TRAFFIC_CLASS
+    {
+        UPLINK_TRAFFIC   = 0  From the AR6000 device to the AP
+        DOWNLINK_TRAFFIC = 1  From the AP to the AR6000 device
+        BIDIR_TRAFFIC    = 2  Bi-directional traffic
+        All other values reserved
+    } DIR_TYPE
+    {
+        DISABLE_FOR_THIS_AC = 0
+        ENABLE_FOR_THIS_AC  = 1
+        ENABLE_FOR_ALL_AC   = 2
+        All other values reserved
+    } VOICEPS_CAP_TYPE
+
+    ... CREATE_PSTREAM (continued)
+
+
+        VI  BE   BK    Supported, Y/N?
+   0    0    0    0    Y
+   0    0    0    1    Y
+   0    0    1    0    N
+   0    0    1    1    N
+   0    1    0    0    Y
+   0    1    0    1    Y
+   0    1    1    0    N
+   0    1    1    1    N
+   1    0    0    0    Y
+   1    0    0    1    Y
+   1    0    1    0    N
+   1    1    0    0    N
+   1    1    0    1    Y
+   1    1    0    0    N
+   1    1    1    0    N
+   1    1    1    1    Y
+
+Reset Value
+    No pstream is present after reset; each of the BE, BK, VI,VO pstreams must be created
+    (either implicitly by data flow or explicitly by user)
+
+Restrictions
+    This command can only be issued when the device is in the CONNECTED state. If
+    the device receives the command while in DISCONNECTED state, it replies with a
+    failure indication. At most four prioritized data endpoints can be created, one for
+    each AC.
+
+See Also
+    “DELETE_PSTREAM”
+=====================================================================
+
+Name
+    DELETE_BAD_AP
+
+Synopsis
+    The host uses this command to clear a particular entry in the bad AP table
+
+Command
+    wmiconfig eth1 --rmAP [--num=<index>] // used to clear a badAP
+    entry. num is index from 0-3
+
+Command Parameters
+    UINT8  badApIndex   Index [0...n] that identifies the entry in the bad
+                        AP table to delete
+
+Command Values
+    badApIndex   = 0, 1, 2, 3
+            Entry in the bad AP table
+
+Reset Value
+    None defined
+
+Restrictions
+    None
+
+See Also
+    “ADD_BAD_AP”
+
+=====================================================================
+
+
+Name
+    DELETE_CIPHER_KEY
+
+Synopsis
+    The host uses this command to delete a key that was previously added with the
+    “ADD_CIPHER_KEY” command.
+
+Command
+    TBD
+
+Command Parameters
+    UINT8   keyIndex    Index (0...3) of the key to be deleted
+
+Command Values
+    keyIndex    = 0, 1,2, 3    Key to delete
+
+Reset Value
+    None
+
+Restrictions
+    The host should not delete a key that is currently in use by the AR6000.
+
+See Also
+    “ADD_CIPHER_KEY”
+
+=====================================================================
+
+Name
+    DELETE_PSTREAM
+
+Synopsis
+    The host uses this command to delete a prioritized data endpoint created by a
+    previous “CREATE_PSTREAM” command
+
+Command
+    --deleteqos <trafficClass> <tsid>, where:
+
+    <traffic class>
+        = 0    BE
+        = 1    BK
+        = 2    VI
+        = 3    VO
+    <tsid>
+        The TSpec ID; use the -qosqueue option
+        to get the active TSpec IDs for each traffic class
+
+Command Parameters
+    A_UINT8    trafficClass    Indicate the traffic class of the stream
+                            being deleted
+
+Command Values
+    {
+        WMM_AC_BE = 0    Best effort
+        WMM_AC_BK = 1    Background
+        WMM_AC_VI = 2    Video
+        WMM_AC_VO = 3    Voice
+    } TRAFFIC CLASS
+
+    0-15 for TSID
+
+Reply Values
+    N/A
+
+Restrictions
+    This command should only be issued after a “CREATE_PSTREAM” command has
+    successfully created a prioritized stream
+
+See Also
+    “CREATE_PSTREAM”
+
+=====================================================================
+
+
+Name
+    DELETE_WOW_PATTERN
+
+Synopsis
+    The host uses this command to remove a pre-specified pattern from the
+    WoW pattern list.
+
+Command
+    wmiconfig –delwowpattern <list-id> <pattern-id>
+
+Command Parameters
+    A_UINT8    filter_list_id    ID of the list that contains the WoW filter
+                                 pattern to delete
+    A_UINT8    filter_id    ID of the WoW filter pattern to delete
+
+Reply Parameters
+    None
+
+
+
+Reset Value
+    None defined
+
+Restrictions
+    None
+
+See Also
+    “ADD_WOW_PATTERN”
+
+=====================================================================
+
+
+Name
+    EXTENSION
+
+Synopsis
+    The WMI message interface is used mostly for wireless control messages to a wireless
+    module applicable to wireless module management regardless of the target platform
+    implementation. However, some commands only peripherally related to wireless
+    management are desired during operation. These wireless extension commands may
+    be platform-specific or implementation-dependent.
+
+Command
+    N/A
+
+Command Parameters
+    Command-specific
+
+Command Values
+    Command-specific
+
+Reply Parameters
+    Command-specific
+
+Reset Values
+    None defined
+
+Restrictions
+    None defined
+
+=====================================================================
+
+
+Name
+    GET_BIT_RATE
+
+Synopsis
+    Used by the host to obtain the rate most recently used by the AR6000 device
+
+Command
+    wmiconfig eth1 --getfixrates
+
+Command Parameters
+    None
+
+
+
+Reply Parameters
+    INT8
+    rateIndex
+    See the “SET_BIT_RATE” command
+
+Reset Values
+    None
+
+Restrictions
+    This command should only be used during development/debug; it is not intended
+for use in production. It is only valid when the device is in the CONNECTED state
+
+See Also
+    “SET_BIT_RATE”
+
+=====================================================================
+
+
+Name
+    GET_CHANNEL_LIST
+
+Synopsis
+    Used by the host uses to retrieve the list of channels that can be used by the device
+    while in the current wireless mode and in the current regulatory domain.
+
+Command
+    TBD
+
+Command Parameters
+    None
+
+Reply Parameters
+    UINT8    reserved    Reserved
+    UINT8    numberOfChannels    Number of channels the reply contains
+    UINT16    channelList[numberOfChannels]  Array of channel frequencies (in MHz)
+
+Reset Values
+    None defined
+
+Restrictions
+    The maximum number of channels that can be reported are 32
+
+=====================================================================
+
+
+Name
+    GET_FIXRATES
+
+Synopsis
+    Clears the current calculated RSSI and SNR value. RSSI and SNR are reported by
+    running-average value. This command will clear the history and have a fresh start for
+    the running-average mechanism.
+
+Synopsis
+    This returns rate-mask set via WMI_SET_FIXRATES to retrieve the current fixed rate
+    that the AR6001 or AR6001 is using. See “SET_FIXRATES”.
+
+Command
+    wmiconfig eth1 --getfixrates
+
+Command Parameters
+    A_UINT16    fixRateMask;    Note: if this command is used prior to
+                using WMI_SET_FIXRATES, AR6000
+                returns 0xffff as fixRateMask, indicating
+                all the rates are enabled
+
+Reply Parameters
+    None
+
+Reset Value
+    None defined
+
+Restrictions
+    None
+
+See Also
+    “SET_FIXRATES”
+
+=====================================================================
+
+
+
+Name
+    GET_PMKID_LIST_CMD
+
+Synopsis
+    Retrieves the list of PMKIDs on the firmware. The
+    WMI_GET_PMKID_LIST_EVENT is generated by the firmware.
+
+Command
+    TBD
+
+Command Parameters
+
+Reset Values
+    None
+
+Restrictions
+    None
+
+See Also
+    SET_PMKID_LIST_CMD GET_PMKID_LIST_EVENT
+
+=====================================================================
+
+
+Name
+    GET_ROAM_TBL
+
+Synopsis
+    Retrieve the roaming table maintained on the target. The response is reported
+    asynchronously through the ROAM_TBL_EVENT.
+
+Command
+    wmiconfig --getroamtable <roamctrl> <info>
+
+Command Parameters
+    A_UINT8    roamCtrlType;
+    A_UINT16   roamMode
+    A_UINT16   numEntries
+    WMI_BSS_ROAM_INFO bssRoamInfo[1]
+
+Reply Value
+    Reported asynchronously through the ROAM_TBL_EVENT
+
+Reset Value
+    None defined
+
+Restrictions
+    None
+
+See Also
+    SET_KEEPALIVE
+
+=====================================================================
+
+
+Name
+    GET_TARGET_STATS
+
+Synopsis
+    The host uses this command to request that the target send the statistics that it
+    maintains. The statistics obtained from the target are accrued in the host every time
+    the GET_TARGET_STATS command is issued. The --clearStats option is added to
+    clear the target statistics maintained in the host.
+
+Command
+    wmiconfig --getTargetStats --clearStats
+
+Command Parameters
+    TARGET_STATS    targetStats
+    WMI_TARGET_STATS
+    UINT8   clearStats
+
+
+Reply Value
+    RSSI return value (0–100)
+
+Reset Values
+    All statistics are cleared (zeroed)
+
+Restrictions
+    The --getTargetStats option must be used; the --clearStats option is also available also
+
+
+=====================================================================
+
+Name
+    GET_TX_PWR
+
+Synopsis
+    The host uses this command to retrieve the current Tx power level
+
+Command
+    wmiconfig -i eth1 --getpower
+
+Command Parameters
+    None
+
+Reply Parameters
+    UINT16 dbM    The current Tx power level specified in dbM
+
+Reset Values
+    The maximum permitted by the regulatory domain
+
+Restrictions
+    None
+
+See Also
+    “SET_TX_PWR”
+
+=====================================================================
+
+
+Name
+    GET_WOW_LIST
+
+Synopsis
+    The host uses this command to retrieve the current list of WoW patterns.
+
+Command
+    wmiconfig –getwowlist <list-id>
+
+Command Parameters
+    A_UINT8 filter_list_id    ID of the list of WoW patterns to retrieve
+
+Reply Value(s)
+    A_UINT16  num_filters    Number of WoW patterns contained in the list
+    A_UINT8   wow_mode    Current mode of WoW (enabled or disabled)
+    A_UINT8    host_mode    Current host mode (asleep or awake)
+    WOW_FILTER    wow_filters[1]
+        Contents of the WoW filter pattern list
+        (contains mask, pattern, offset and size
+    information for each of the patterns)
+
+Reset Value
+    None defined
+
+Restrictions
+    None
+
+See Also
+    “SET_WSC_STATUS”
+
+=====================================================================
+
+
+Name
+    LQ_THRESHOLD_PARAMS
+
+Synopsis
+    Sets Link Quality thresholds, the sampling will happen at every unicast data frame
+    Tx if a certain threshold is met, and the corresponding event will be sent to the host.
+
+Command
+    --lqThreshold <enable> <upper_threshold_1> ...
+    <upper_threshold_4> <lower_threshold_1> ... <lower_threshold_4>
+
+Command Parameters
+    <enable>    = 0    Disable link quality sampling
+                = 1    Enable link quality sampling
+    <upper_threshold_x>  Above thresholds (value in [0,100]), in
+                    ascending order
+    <lower_threshold_x> Below thresholds (value in [0,100]), in
+                    ascending order
+
+Command Values
+    See command parameters
+
+Reset Value
+    None defined
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    OPT_TX_FRAME
+
+Synopsis
+    Special feature, sends a special frame.
+
+Command
+    wmiconfig --sendframe <frmType> <dstaddr> <bssid> <optIEDatalen>
+    <optIEData>
+
+Command Parameters
+    {
+        A_UINT16    optIEDataLen;
+        A_UINT8    frmType;
+        A_UINT8    dstAddr[ATH_MAC_LEN];
+        A_UINT8    bssid[ATH_MAC_LEN];
+        A_UINT8    optIEData[1];
+    } WMI_OPT_TX_FRAME_CMD;
+
+Command Values
+    <frmtype>   = 1    Probe request frame
+                = 2    Probe response frame
+                = 3    CPPP start
+                = 4    CPPP stop
+
+Reset Value
+    None defined
+
+Restrictions
+    Send a special frame only when special mode is on.
+
+=====================================================================
+
+
+Name
+    RECONNECT
+
+Synopsis
+    This command requests a reconnection to a BSS to which the AR6000 device was
+    formerly connected
+
+Command
+    TBD
+
+Command Parameters
+    UINT16    channel    Provides a hint as to which channel was
+                        used for a previous connection
+    UINT8    bssid[6]    If set, indicates which BSSID to connect to
+
+Command Values
+    None
+
+Reset Values
+    None
+
+Restrictions
+    None
+
+See Also
+    “CONNECT_CMD”
+
+=====================================================================
+
+
+Name
+    RSSI_THRESHOLD_PARAMS
+
+Synopsis
+    Configures how the AR6000 device monitors and reports signal strength (RSSI) of the
+    connected BSS, which is used as a link quality metric. The four RSSI threshold sets (in
+    dbM) of the host specification divide the signal strength range into six segments.
+    When signal strength increases or decreases across one of the boundaries, an
+    RSSI_THRESHOLD event is signaled to the host. The host may then choose to take
+    action (such as influencing roaming).
+
+Command
+    wmiconfig eth1 --rssiThreshold <weight> <pollTime>
+        <above_threshold_val_1> ... <above_threshold_tag_6>
+        <above_threshold_val_6>
+        <below_threshold_tag_1> <below_threshold_val_1> ...
+        <below_threshold_tag_6> <below_threshold_val_6>
+
+Command Parameters
+    UINT8    weight    Range in [1, 16] used to calculate average RSSI
+    UINT32   pollTime   RSSI (signal strength) sampling frequency in
+                seconds (if pollTime = 0, single strength
+        sampling is disabled)
+    USER_RSS__THOLD tholds[12]  Thresholds (6 x 2)
+
+Command Values
+    None defined
+
+Reset Values
+    pollTime is 0, and sampling is disabled
+
+Restrictions
+    Can only be issued if the AR6000 device is connected
+
+
+=====================================================================
+
+Name
+    SCAN_PARAMS
+
+Synopsis
+    The minact parameter determines the minimum active channel dwell time, within
+    which if the STA receives any beacon, it remains on that channel until the maxact
+    channel dwell time. If the STA does not receive a beacon within the minact dwell
+    time, it switches to scan the next channel.
+
+Command
+    wmiconfig -scan -minact=<ms> --maxact=<ms>
+
+Command Parameters
+    UINT16    maxact    Channel dwell time (in ms), default = 0
+    UINT16    minact    Channel dwell time (in ms), default = 105
+
+Command Values
+    See channel parameters
+
+Reset Values
+    None defined
+
+Restrictions
+    The minact value should be greater than 0; maxact should be between 5–65535 ms
+    and greater than minact
+
+=====================================================================
+
+
+Name
+    SET_ACCESS_PARAMS
+
+Synopsis
+    Allows the host to set access parameters for the wireless network. A thorough
+    understanding of IEEE 802.11 is required to properly manipulate these parameters.
+
+Command
+    wmiconfig eth1 --acparams --txop <limit> --cwmin <0-15>
+    --cwmax <0-15> --aifsn<0-15>
+
+Command Parameters
+    UINT16    txop    The maximum time (expressed in units of
+                        32 ms) the device can spend transmitting
+                        after acquiring the right to transmit
+    UINT8    eCWmin    Minimum contention window
+    UINT8    eCWmax    Maximum contention window
+    UINT8    aifsn    The arbitration inter-frame space number
+
+Command Values
+    None
+
+Reset Values
+    Reasonable defaults that vary, between endpoints (prioritized streams)
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    SET_ADHOC_BSSID
+
+Synopsis
+    Allows the host to set the BSSID for an ad hoc network. If a network with this BSSID
+    is not found, the target creates an ad hoc network with this BSSID after the connect
+    WMI command is triggered (e.g., by the SIOCSIWESSID IOCTL).
+
+Command
+    wmiconfig eth1 --adhocbssid <bssid>
+
+Command Parameters
+    A_UINT8     bssid[ATH_MAC_LEN]    BSSID is specified in xx:xx:xx:xx:xx:xx format
+
+Command Values
+    None
+
+Reset Values
+    None
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    SET_AKMP_PARAMS
+
+Synopsis
+    Enables or disables multi PMKID mode.
+
+Command
+    wmiconfig eth1 --setakmp --multipmkid=<on/off>
+
+Command Parameters
+    typedef struct {
+      A_UINT32    akmpInfo;
+    } WMI_SET_AKMP_PARAMS_CMD;
+
+Command Values
+    akmpInfo;
+    bit[0] = 0
+        MultiPMKID mode is disabled and PMKIDs that
+        were set using the WMI_SET_PMKID_CMD are
+        used in the [Re]AssocRequest frame.
+     bit[0] = 1
+        MultiPMKID mode is enabled and PMKIDs issued
+        by the WMI_SET_PMKID_LIST_CMD are used in
+        the next [Re]AssocRequest sent to the AP.
+
+Reset Values
+    MultiPMKID mode is disabled
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    SET_APPIE
+
+Synopsis
+    Add an application-specified IE to a management frame. The maximum length is
+    76 bytes. Including the length and the element ID, this translates to 78 bytes.
+
+Command
+    wmiconfig --setappie <frame> <IE>, where:
+
+    frame
+        One of beacon, probe, respon, assoc
+
+    IE
+        A hex string beginning with DD (if = 0, no
+        IE is sent in the management frame)
+
+Command Parameters
+    mgmtFrmType;
+        A WMI_MGMT_FRAME_TYPE
+
+    ieLen;
+        Length of the IE to add to the GMT frame
+
+Command Values
+    None
+
+Reset Value
+    None defined
+
+Restrictions
+    Supported only for the probe request and association request management frame
+types. Also, only one IE can be added per management frame type.
+
+=====================================================================
+
+
+Name
+    SET_ASSOC_INFO
+
+Synopsis
+    The host uses this command to specify any information elements (IEs) it wishes the
+    AR6000 device to add to all future association and reassociation requests. IEs must be
+    correct and are used as is by the device. IEs specified through this command are
+    cleared with a DISCONNECT.
+
+Command
+    wmiconfig eth1 --setAssocIe <IE>
+
+Command Parameters
+    UINT8    ieType    Used directly in 802.11 frames
+    UINT8    bufferSize    Size of assocInfo (in bytes) ranging from
+                        0–240. If = 0, previously set IEs are cleared.
+    UINT8    assocInfo[bufferSize]    Used directly in 802.11 frames
+
+Command Values
+    None
+
+Reset Values
+    IEs are cleared
+
+Restrictions
+    This command can only be issued in the DISCONNECTED state
+
+=====================================================================
+
+
+Name
+    SET_AUTHMODE
+
+Synopsis
+    Sets the 802.11 authentication mode of reconnection
+
+Command
+    wmiconfig eth1 --setauthmode <mode>
+
+Command Parameters
+    UINT8    mode
+
+Command Values
+    mode    = 0x00    Proceed with authentication during reconnect
+            = 0x01    Do not proceed with authentication during reconnect
+
+Reset Values
+    Authentication
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    SET_BEACON_INT
+
+Synopsis
+    Sets the beacon interval for an ad hoc network. Beacon interval selection may have an
+    impact on power savings. To some degree, a longer interval reduces power
+    consumption but also decreases throughput. A thorough understanding of IEEE
+    802.11 ad hoc networks is required to use this command effectively.
+
+Command
+    wmiconfig eth1 --ibssconintv
+
+Command Parameters
+    UINT16    beaconInterval    Specifies the beacon interval in TU units (1024 ms)
+
+Command Values
+    None
+
+Reset Values
+    The default beacon interval is 100 TUs (102.4 ms)
+
+Restrictions
+    This command can only be issued before the AR6000 device starts an ad hoc network
+
+See Also
+    “SET_IBSS_PM_CAPS”
+
+=====================================================================
+
+
+Name
+    SET_BIT_RATE
+
+Synopsis
+    The host uses this command to set the AR6000 device to a specific fixed rate.
+
+Command
+    wmiconfig eth1 --setfixrates <rate_0> ... <rate_n>
+
+Command Parameters
+    INT8    rateIndex
+    A WMI_BIT_RATE value
+    {
+        RATE_AUTO    = -1
+        RATE_1Mb     = 0
+        RATE_2Mb     = 1
+        RATE_5_5M    = 2
+        RATE_11Mb    = 3
+        RATE_6Mb     = 4
+        RATE_9Mb     = 5
+        RATE_12Mb    = 6
+        RATE_18Mb    = 7
+        RATE_24Mb    = 8
+        RATE_36Mb    = 9
+        RATE_48Mb    = 10
+        RATE_54Mb    = 11
+      } WMI_BIT_RATE
+
+
+Command Values
+    See command parameters
+
+Reset Values
+    The dynamic rate is determined by the AR6000 device
+
+Restrictions
+    This command is intended for use only during development/debug; it is not
+intended for use in production
+
+See Also
+    “GET_BIT_RATE”
+
+=====================================================================
+
+
+Name
+    SET_BMISS_TIME
+
+Synopsis
+    This command sets the beacon miss (BMISS) time, which the AR6000 hardware use
+    to recognize missed beacons. When an excessive number (15) of consecutive beacons
+    are missed, the AR6000 consider switching to a different BSS. The time can be
+    specified in number of beacons or in TUs.
+
+Command(s)
+    wmiconfig eth1 --setbmissbeacons=<val>
+    wmiconfig eth1 --setbmisstime=<val>
+
+Command Parameters
+    UINT16    bmissTime    Specifies the beacon miss time
+                            [1000...5000] in TUs (1024 ms)
+    UINT16    bmissbeacons  Specifies the number of beacons [5...50]
+
+Command Values
+    None
+
+Reset Values
+    bmissTime is 1500 TUs (1536 ms)
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    SET_BSS_FILTER
+
+Synopsis
+    The host uses this to inform the AR6000 device of the types of networks about which
+    it wants to receive information from the “BSSINFO” event. As the device performs
+    either foreground or background scans, it applies the filter and sends “BSSINFO”
+    events only for the networks that pass the filter. If any of the  bssFilter or the ieMask
+    filter matches, a BSS Info is sent to the host. The ieMask currently is used as a match
+    for the IEs in the beacons, probe reponses and channel switch action management
+    frame. See also “Scan and Roam” on page C-1.
+
+    The BSS filter command has been enhanced to support IE based filtering. The IEs can
+    be specified as a bitmask through this command using this enum.
+
+Command
+    wmiconfig eth1 –filter = <filter> --ieMask 0x<mask>
+
+Command Parameters
+    UINT8    BssFilter
+
+ Command Values
+    typedef struct {
+        A_UINT8    bssFilter;    See WMI_BSS_FILTER
+        A_UINT32    ieMask;
+    } __ATTRIB_PACK WMI_BSS_FILTER_CMD;
+
+    The ieMask can take this combination of values:
+
+    enum {
+        BSS_ELEMID_CHANSWITCH   = 0x01
+        BSS_ELEMID_ATHEROS      = 0x02,
+    }
+
+Reply Value
+    None
+
+Reset Value
+    BssFilter = NONE_BSS_FILTER (0)
+
+Restrictions
+    None
+
+See Also
+    “CONNECT_CMD”
+
+=====================================================================
+
+
+Name
+    SET_BT_PARAMS
+
+Synopsis
+    This command is used to set the status of a Bluetooth stream or set Bluetooth
+    coexistence register parameters. The stream may be an SCO or an A2DP stream and
+    its status can be started/stopped/suspended/resumed.
+
+Command
+    wmiconfig –setBTparams <paramType> <params>
+
+Command Parameters
+    struct {
+       union {
+            BT_PARAMS_SCO    scoParams;
+            BT_PARAMS_A2DP   a2dpParams;
+            BT_PARAMS_MISC   miscParams;
+            BT_COEX_REGS     regs;
+        } info;
+         A_UINT8 paramType;
+        struct {
+            A_UINT8 noSCOPkts;    Number of SCO packets between consecutive PS-POLLs
+            A_UINT8 pspollTimeout;
+            A_UINT8 stompbt;
+        } BT_PARAMS_SCO;
+        struct {
+            A2DP BT stream parameters
+            A_UINT32   period;
+            A_UINT32   dutycycle;
+            A_UINT8    stompbt;
+        } BT_PARAMS_A2DP;
+        struct {
+            union {
+               WLAN_PROTECT_POLICY_TYPE   protectParams;
+               A_UINT16    wlanCtrlFlags;
+            }info;
+        A_UINT8 paramType;
+        } BT_PARAMS_MISC;
+        struct {
+            BT coexistence registers values
+            A_UINT32    mode;     Coexistence mode
+            A_UINT32    scoWghts; WLAN and BT weights
+            A_UINT32    a2dpWghts;
+            A_UINT32    genWghts;
+            A_UINT32    mode2;    Coexistence mode2
+            A_UINT8    setVal;
+        } BT_COEX_REGS;
+
+Command Values
+    None defined
+
+Reset Value
+    None
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    SET_BT_STATUS
+
+Synopsis
+    Sets the status of a Bluetooth stream. The stream may be a SCO or an A2DP stream
+    and its status can be started/stopped/suspended/resumed.
+
+Command
+    wmiconfig –setBTstatus <streamType> <status>
+
+Command Parameters
+    {
+        A_UINT8        streamType;    Stream type
+        A_UINT8        status;    Stream status
+    }WMI_SET_BT_STATUS_CMD;
+
+Command Values
+    {
+        BT_STREAM_UNDEF    = 0
+        BT_STREAM_SCO
+        SCO stream
+        BT_STREAM_A2DP
+        A2DP stream
+        BT_STREAM_MAX
+    } BT_STREAM_TYPE;
+
+    {
+        BT_STATUS_UNDEF    = 0
+        BT_STATUS_START
+        BT_STATUS_STOP
+        BT_STATUS_RESUME
+        BT_STATUS_SUSPEND
+        BT_STATUS_MAX
+    } BT_STREAM_STATUS;
+
+Reset Value
+    None defined
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    SET_CHANNEL_PARAMETERS
+
+Synopsis
+    Configures various WLAN parameters related to channels, sets the wireless mode,
+    and can restrict the AR6000 device to a subset of available channels. The list of
+    available channels varies depending on the wireless mode and the regulatory
+    domain. The device never operates on a channel outside of its regulatory domain. The
+    device starts to scan the list of channels right after this command.
+
+Command
+    wmiconfig eth1 --wmode <mode> <list>
+
+Command Parameters
+    UINT8    phyMode    See Values below.
+    UINT8    numberOfChannels
+        Number of channels in the channel array that
+        follows. If = 0, then the device uses all of the
+        channels permitted by the regulatory domain
+        and by the specified phyMode.
+    UINT16    channel[numberOfChannels]
+        Array listing the subset of channels (expressed
+        as frequencies in MHz) the host wants the
+        device to use. Any channel not permitted by
+        the specified phyMode or by the specified
+        regulatory domain is ignored by the device.
+
+Command Values
+    phyMode = {
+        Wireless mode
+        11a    = 0x01
+        11g    = 0x02
+        11ag   = 0x03
+        11b    = 0x04
+        11g only    = 0x05
+        }
+
+Reset Values
+    phyMode
+    11ag
+    802.11a/g modules
+        11g
+    802.11g module
+    channels
+        Defaults to all channels permitted by the
+        current regulatory domain.
+
+Restrictions
+    This command, if issued, should be issued soon after reset and prior to the first
+    connection. This command should only be issued in the DISCONNECTED state.
+
+=====================================================================
+
+
+Name
+    SET_DISC_TIMEOUT
+
+Synopsis
+    The host uses this command to configure the amount of time that the AR6000 should
+    spend when it attempts to reestablish a connection after losing link with its current
+    BSS. If this time limit is exceeded, the AR6000 send a “DISCONNECT” event. After
+    sending the “DISCONNECT” event the AR6000 continues to attempt to reestablish a
+    connection, but they do so at the interval corresponding to a foreground scan as
+    established by the “SET_SCAN_PARAMS” command.
+
+    A timeout value of 0 indicates that the AR6000 will disable all autonomous roaming,
+    so that the AR6000 will not perform any scans after sending a “DISCONNECT”
+    event to the host. The state is maintained until a shutdown or host sets different
+    timeout value from 0.
+
+Command
+    wmiconfig eth1 --disc=<timeout in seconds>
+
+Command Parameters
+    UINT8    disconnectTimeout
+        Specifies the time limit (in seconds) after
+        which a failure to reestablish a connection
+        results in a “DISCONNECT” event
+
+Command Values
+    None
+
+Reset Values
+    disconnectTimeout is 10 seconds
+
+Restrictions
+    This command can only be issued while in a DISCONNECTED state
+
+=====================================================================
+
+
+Name
+    SET_FIXRATES
+
+Synopsis
+    By default, the AR6000 device uses all PHY rates based on mode of operation. If the
+    host application requires the device to use subset of supported rates, it can set those
+    rates with this command. In 802.11g mode, the AR6000 device takes the entire
+    802.11g basic rate set and the rates specified with this command and uses it as the
+    supported rate set.
+
+    This rate set is advertised in the probe request and the assoc/re-assoc request as
+    supported rates. Upon successful association, the device modifies the rate set pool
+    using the: intersection of AP-supported rates with the union of the 802.11g basic rate
+    set and rates set using this command. The device picks transmission rates from this
+    pool based on a rate control algorithm.
+
+Command
+    TBD
+
+Command Parameters
+    A_UINT16    fixRateMask;
+        The individual bit is an index for rate table,
+        and setting the that index to 1 would set that
+        corresponding rate. E.g., fixRateMask = 9
+        (1001) sets 1 Mbps and 11 Mbps.
+
+Command Values
+    None
+
+Reset Value
+    None defined
+
+Restrictions
+    None
+
+See Also
+    “GET_FIXRATES”
+
+=====================================================================
+
+
+Name
+    SET_WHAL_PARAM
+
+Synopsis
+    An internal AR6000 command that is used to set certain hardware parameters. The
+    description of this command is in $WORKAREA/include/halapi.h.
+
+Command
+    TBD
+
+Command Parameters
+    ATH_HAL_SETCABTO_CMDID
+        Sets the timeout waiting for the multicast
+        traffic after a DTIM beacon (in TUs).
+
+Command Values
+    None
+
+Reset Value
+    Default = 10 TUs
+
+Restrictions
+    This command should be executed before issuing a connect command.
+
+=====================================================================
+
+
+Name
+    SET_HOST_SLEEP_MODE
+
+Synopsis
+    The host uses this command to set the host mode to asleep or awake. All packets are
+    delivered to the host when the host mode is awake. When host mode is asleep, only if
+    WoW is enabled and the incoming packet matches one of the specified WoW
+    patterns, will the packet be delivered to the host. The host will also be woken up by
+    the target for pattern-matching packets and important events.
+
+Command
+    wmiconfig –sethostmode=<asleep/awake>
+
+Command Parameters
+    A_BOOL    awake    Set the host mode to awake
+    A_BOOL    asleep   Set the host mode to asleep
+
+Command Values
+    1 = awake, 0 = asleep
+
+Reset Value
+    None defined (default host mode is awake)
+
+Restrictions
+    None
+
+
+=====================================================================
+
+Name
+    SET_IBSS_PM_CAPS
+
+Synopsis
+    Used to support a non-standard power management scheme for an ad hoc wireless
+    network consisting of up to eight stations (STAs) that support this form of power
+    saving (e.g., Atheros-based STAs). A thorough understanding of IEEE 802.11 ad hoc
+    networks is required to use this command effectively.
+
+Command
+    wmiconfig eth1 --ibsspmcaps --ps=<enable/disable>
+        --aw=<ATIM Windows in ms>
+        --ttl=<Time to live in number of beacon periods>
+        --to=<timeout in ms>
+
+Command Parameters
+    UINT8    power_saving
+        = 0
+        The non-standard power saving scheme is
+        disabled and maximum throughput (with no
+        power saving) is obtained.
+
+        = 1
+        Ad hoc power saving scheme is enabled (but
+        throughput may be decreased)
+
+    UINT16    atim_windows
+        Specifies the length (in ms) of the ad hoc traffic
+        indication message (ATIM) windows used in an ad
+        hoc network. All Atheros-based STAs that join the
+        network use this duration ATIM window.
+
+    The duration is communicated between wireless
+    STAs through an IE in beacons and probe responses.
+
+    The host sets atim_windows to control trade-offs
+    between power use and throughput. The value
+    chosen should be based on the beacon interval (see
+    the “SET_BEACON_INT” command) on the
+    expected number of STAs in the IBSS, and on the
+    amount of traffic and traffic patterns between STAs.
+
+    UINT16    timeout_value
+        Specifies the timeout (in ms). The value is the same
+        for all ad hoc connections, but tracks separately for
+        each.
+
+        Applicable only for a beacon period and used to
+        derive actual timeout values on the Tx and Rx sides.
+        On the Tx side, the value defines a window during
+        which the STA accepts the frame(s) from the host for a
+        particular connection. Until closed, the window
+        restarts with every frame received from the host. On
+        the Rx side, indicates the time until which the STA
+        continues accepting frames from a particular
+        connection. The value resets with every frame
+        received. The value can be used to determine the
+        trade off between throughput and power.
+        Default = 10 ms
+
+    UINT8    ttl
+        Specifies the value in number of beacon periods. The
+        value is used to set a limit on the time until which a
+        frame is kept alive in the AR6001 before being
+        discarded. Default = 5
+
+Command Values
+    None
+
+Reset Values
+    By default, power_saving is enabled with atim_window = 20 ms
+
+Restrictions
+    Can only be issued before the AR6000 starts an ad hoc network
+
+See Also
+    “SET_BEACON_INT”
+
+=====================================================================
+
+
+
+Name
+    SET_LISTEN_INT
+
+Synopsis
+    The host uses this command to request a listen interval, which determines how often
+    the AR6000 device should wake up and listen for traffic. The listen interval can be set
+    by the TUs or by the number of beacons. The device may not be able to comply with
+    the request (e.g., if the beacon interval is greater than the requested listen interval, the
+    device sets the listen interval to the beacon interval). The actual listen interval used
+    by the device is available in the “CONNECT” event.
+
+Command
+    wmiconfig eth1 --listen=<#of TUs, can range from 15 to 3000>
+
+    --listenbeacons=<#of beacons, can range from 1 to 50>
+
+Command Parameters
+    UINT16    listenInterval
+        Specifies the listen interval in Kms
+        (1024 ms), ranging from 100 to 1000
+
+    UINT16    listenbeacons
+        Specifies the listen interval in beacons,
+        ranging from 1 to 50
+
+Command Values
+    None
+
+Reset Values
+    The device sets the listen interval equal to the beacon interval of the AP it associates
+    to.
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    SET_LPREAMBLE
+
+Synopsis
+    Overrides the short preamble capability of the AR6000 device
+
+Command
+    TBD
+
+Command Parameters
+    WMI_LPREAMBLE_DISABLED
+        The device is short-preamble capable
+
+    WMI_LPREAMBLE_ENABLED
+        The device supports only the long-
+    preamble mode
+
+Command Values
+    None
+
+Reset Value
+    None defined
+
+Restrictions
+    None
+
+
+=====================================================================
+
+Name
+    SET_MAX_SP_LEN
+
+Synopsis
+    Set the maximum service period; indicates the number of packets the AR6001 can
+    receive from the AP when triggered
+
+Command
+    wmiconfig eth1 --setMaxSPLength <maxSPLen>
+
+Command Parameters
+    UINT8    maxSPLen
+        An APSD_SP_LEN_TYPE value
+
+Command Values
+    {
+        DELIVER_ALL_PKT  = 0x0
+        DELIVER_2_PKT    = 0x1
+        DELIVER_4_PKT    = 0x2
+        DELIVER_6_PKT    = 0x3
+    }APSD_SP_LEN_TYPE
+
+
+Reset Values
+    maxSPLen is DELIVER_ALL_PKT
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    SET_OPT_MODE
+
+Synopsis
+    Special feature, sets the special mode on/off
+
+Command
+    wmiconfig eth1 --mode <mode>
+    Set the optional mode, where mode is special or off
+
+Command Parameters
+    enum {
+        SPECIAL_OFF
+        SPECIAL_ON
+    } OPT_MODE_TYPE;
+
+Command Values
+
+Reset Value
+    Mode = Off
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    SET_PMKID
+
+Synopsis
+    The host uses this command to enable or disable a pairwise master key ID (PMKID)
+    in the AR6000 PMKID cache. The AR6000 clears its PMKID cache on receipt of a
+    DISCONNECT command from the host. Individual entries in the cache might be
+    deleted as the AR6000 detect new APs and decides to remove old ones.
+
+Command
+    wmiconfig eth1 --setbsspmkid --bssid=<aabbccddeeff>
+    --bsspmkid=<pmkid>
+
+Command Parameters
+    UINT8    bssid[6]
+        The MAC address of the AP that the
+        PMKID corresponds to (6 bytes in hex
+        format)
+
+    UINT8    enable
+        Either PMKID_DISABLE (0) to disable
+        the PMKID or PMKID_ENABLE (1) to
+        enable it (16 bytes in hex format)
+
+    UINT8    pmkid[16]
+        Meaningful only if enable is
+        PMKID_ENABLE, when it is the PMKID
+        that the AR6000 should use on the next
+        reassociation with the specified AP
+
+Command Values
+    enable
+    = 0 (disable), 1 (enable)
+    PKMID enabled/disabled
+
+Reset Values
+    None defined
+
+Restrictions
+    Only supported in infrastructure networks
+
+=====================================================================
+
+
+Name
+    SET_PMKID_LIST_CMD
+
+Synopsis
+    Configures the list of PMKIDs on the firmware.
+
+Command
+    wmiconfig --setpmkidlist --numpmkid=<n> --pmkid=<pmkid_1>
+    ... --pmkid=<pmkid_n>
+
+    Where n is the number of pmkids (maximum = 8) and pmkid_i is the ith pmkid (16
+    bytes in hex format)
+
+Command Parameters
+    {
+        A_UINT8 pmkid[WMI_PMKID_LEN];
+    } __ATTRIB_PACK WMI_PMKID;
+
+    {
+        A_UINT32 numPMKID;
+        WMI_PMKID pmkidList[WMI_MAX_PMKID_CACHE];
+    } __ATTRIB_PACK WMI_SET_PMKID_LIST_CMD;
+
+Command Values
+    None
+
+Reset Values
+    None
+
+Restrictions
+    Supported only in infrastructure modes
+
+=====================================================================
+
+
+Name
+    SET_POWER_MODE
+
+Synopsis
+    The host uses this command to provide the AR6000 device with guidelines on the
+    desired trade-off between power utilization and performance.
+
+        In normal power mode, the device enters a sleep state if they have nothing to do,
+        which conserves power but may cost performance as it can take up to 2 ms to
+        resume operation after leaving sleep state.
+
+        In maximum performance mode, the device never enters sleep state, thus no time
+        is spent waking up, resulting in higher power consumption and better
+        performance.
+
+Command
+    TBD
+
+Command Parameters
+    UINT8    powerMode
+        WMI_POWER_MODE value
+    {
+        REC_POWER   = 1
+            (Recommended setting) Tries to conserve
+            power without sacrificing performance
+        MAX_PERF_POWER    = 2
+            Setting that maximizes performance at
+            the expense of power
+
+            All other values are reserved
+    } WMI_POWER_MODE
+
+Command Values
+    See command parameters
+
+Reset Values
+    powerMode is REC_POWER
+
+Restrictions
+    This command should only be issued in the DISCONNECTED state for the
+    infrastructure network.
+
+            For a PM-disabled ad hoc network, the power mode should remain in
+            MAX_PERF_POWER.
+
+            For a PM-enabled ad hoc network, the device can have REC_POWER or
+            MAX_PERF_POWER set, but either way it must follow the power save ad hoc
+            protocol. The host can change power modes in the CONNECTED state.
+
+    Host changes to the PS setting when the STA is off the home channel take no effect
+    and cause a TARGET_PM_FAIL event.
+
+=====================================================================
+
+
+Name
+    SET_POWER_PARAMS
+
+Synopsis
+    The host uses this command to configure power parameters
+
+Command
+    wmiconfig eth1 --pmparams --it=<ms> --np=<number of PS POLL>
+    --dp=<DTIM policy: ignore/normal/stick>
+
+Command Parameters
+    UINT16    idle_period
+        Length of time (in ms) the AR6000 device
+        remains awake after frame Rx/Tx before going
+        to SLEEP state
+
+    UINT16    pspoll_number
+            The number of PowerSavePoll (PS-poll)
+            messages the device should send before
+            notifying the AP it is awake
+
+    UINT16    dtim_policy
+            A WMI_POWER_PARAMS_CMD value
+
+    {
+        IGNORE_DTIM    =1
+            The device does not listen to any content after
+            beacon (CAB) traffic
+        NORMAL_DTIM    = 2
+            DTIM period follows the listen interval (e.g., if
+            the listen interval is 4 and the DTIM period is 2,
+            the device wakes up every fourth beacon)
+        STICK_DTIM    = 3
+            Device attempt to receive all CAB traffic (e.g., if
+            the DTIM period is 2 and the listen interval is 4,
+            the device wakes up every second beacon)
+    } WMI_POWER_PARAMS_CMD
+
+Command Parameters
+    See command parameters
+
+Reset Values
+    idle_period
+        200 ms
+
+    pspoll_number
+    = 1
+
+    dtim_policy
+    = NORMAL_DTIM
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    SET_POWERSAVE_PARAMS
+
+Synopsis
+    Set the two AR6000 power save timers (PS-POLL timer and APSD trigger timer) and
+    the two ASPD TIM policies
+
+Command
+    wmiconfig eth1--psparams --psPollTimer=<psPollTimeout in ms>
+    --triggerTimer=<triggerTimeout in ms> --apsdTimPolicy=<ignore/
+    adhere> --simulatedAPSDTimPolicy=<ignore/adhere>
+
+Command Parameters
+    typedef struct {
+        A_UINT16    psPollTimeout;
+            Timeout (in ms) after sending PS-POLL; the
+            AR6000 device sleeps if it does not receive a
+            data packet from the AP
+
+        A_UINT16    triggerTimeout;
+            Timeout (in ms) after sending a trigger; the
+            device sleeps if it does not receive any data
+            or null frame from the AP
+
+        APSD_TIM_POLICY    apsdTimPolicy;
+            TIM behavior with queue APSD enabled
+
+        APSD_TIM_POLICY    simulatedAPSD
+
+        TimPolicy;
+            TIM behavior with simulated APSD
+            enabled
+
+    typedef enum {
+        IGNORE_TIM_ALL_QUEUES_APSD = 0,
+        PROCESS_TIM_ALL_QUEUES_APSD = 1,
+        IGNORE_TIM_SIMULATED_APSD = 2,
+        POWERSAVE_TIMERS_POLICY = 3,
+    } APSD_TIM_POLICY;
+
+Command Values
+    None
+
+Reset Values
+    psPollTimeout is 50 ms; triggerTimeout is 10 ms;
+    apsdTimPolicy = IGNORE_TIM_ALL_QUEUES_APSD;
+    simulatedAPSDTimPolicy = POWERSAVE_TIMERS_POLICY
+
+Restrictions
+    When this command is used, all parameters must be set; this command does not
+    allow setting only one parameter.
+
+=====================================================================
+
+
+Name
+    SET_PROBED_SSID
+
+Synopsis
+    The host uses this command to provide a list of up to MAX_PROBED_SSID_INDEX
+    (six) SSIDs that the AR6000 device should actively look for. It lists the active SSID
+    table. By default, the device actively looks for only the SSID specified in the
+    “CONNECT_CMD” command, and only when the regulatory domain allows active
+    probing. With this command, specified SSIDs are probed for, even if they are hidden.
+
+Command
+    wmiconfig eth1 --ssid=<ssid> [--num=<index>]
+
+Command Parameters
+    {
+        A_UINT8    numSsids
+            A number from 0 to
+            MAX_PROBED_SSID_INDEX indicating
+            the active SSID table entry index for this
+            command (if the specified entry index
+            already has an SSID, the SSID specified in
+            this command replaces it)
+
+        WMI_PROBED_SSID_INFO    probedSSID[1]
+    } WMI_PROBED_SSID_CMD
+
+    {
+        A_UINT8    flag
+            WMI_SSID_FLAG indicates the current
+            entry in the active SSID table
+        A_UINT8    ssidLength
+            Length of the specified SSID in bytes.
+            If = 0, the entry corresponding to the
+            index is erased
+        A_UINT8    ssid[32]
+            SSID string actively probed for when
+            permitted by the regulatory domain
+    } WMI_PROBED_SSID_INFO
+
+Command Values
+    WMI_SSID_FLAG
+    {
+         DISABLE_SSID_FLAG    = 0
+            Disables entry
+        SPECIFIC_SSID_FLAG    = 1
+            Probes specified SSID
+        ANY_SSID_FLAG    = 2
+            Probes for any SSID
+    } WMI_SSID_FLAG
+
+Reset Value
+    The entries are unused.
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    SET_REASSOC_MODE
+
+Synopsis
+    Specify whether the disassociated frame should be sent or not upon reassociation.
+
+Command
+    wmiconfig eth1 --setreassocmode <mode>
+
+Command Parameters
+    UINT8    mode
+
+Command Values
+    mode
+        = 0x00
+        Send disassoc to a previously connected AP
+        upon reassociation
+        = 0x01
+        Do not send disassoc to previously connected
+        AP upon reassociation
+
+Reset Values
+    None defined
+
+Restrictions
+    None
+
+
+=====================================================================
+
+Name
+    SET_RETRY_LIMITS
+
+Synopsis
+    Allows the host to influence the number of times that the AR6000 device should
+    attempt to send a frame before they give up.
+
+Command
+    wmiconfig --setretrylimits <frameType> <trafficClass> <maxRetries>
+    <enableNotify>
+
+Command Parameters
+    {
+        UINT8    frameType
+            A WMI_FRAMETYPE specifying
+            which type of frame is of interest.
+        UINT8    trafficClass
+            Specifies a traffic class (see
+            “CREATE_PSTREAM”). This
+            parameter is only significant when
+            frameType = DATA_FRAMETYPE.
+        UINT8    maxRetries
+            Maximum number of times the
+            device attempts to retry a frame Tx,
+            ranging from WMI_MIN_RETRIES
+            (2) to WMI_MAX_RETRIES (15). If
+            the special value 0 is used,
+            maxRetries is set to 15.
+        A_UINT8    enableNotify
+            Notify when enabled
+    } WMI_RETRY_LIMIT_INFO
+
+    {
+        A_UINT8    numEntries
+        WMI_RETRY_LIMIT_INFO  retryLimitInfo[1]
+    } WMI_SET_RETRY_LIMITS_CMD
+
+Command Values
+    {
+        MGMT_FRAMETYPE    = 0    Management frame
+        CONTROL_FRAMETYPE = 1    Control frame
+        DATA_FRAMETYPE    = 2    Data frame
+    } WMI_FRAMETYPE
+
+Reset Values
+    Retries are set to 15
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    SET_ROAM_CTRL
+
+Synopsis
+    Affects how the AR6000 device selects a BSS. The host uses this command to set and
+    enable low RSSI scan parameters. The time period of low RSSI background scan is
+    mentioned in scan period. Low RSSI scan is triggered when the current RSSI
+    threshold (75% of current RSSI) is equal to or less than scan threshold.
+
+    Low RSSI roam is triggered when the current RSSI threshold falls below the roam
+    threshold and roams to a better AP by the end of the scan cycle. During Low RSSI
+    roam, if the STA finds a new AP with an RSSI greater than roam RSSI to floor, during
+    scan, it roams immediately to it instead of waiting for the end of the scan cycle. See
+    also “Scan and Roam” on page C-1.
+
+Command
+    wmiconfig --roam <roamctrl> <info>, where info is <scan period>
+    <scan threshold> <roam threshold> <roam rssi floor>
+
+Command Parameters
+    A_UINT8    roamCtrlType;
+
+Command Values
+    WMI_FORCE_ROAM     = 1
+    Roam to the specified BSSID
+
+    WMI_SET_ROAM_MODE  = 2
+    Default, progd bias, no roam
+
+    WMI_SET_HOST_BIAS  = 3
+    Set the host bias
+
+    WMI_SET_LOWRSSI_SCAN_PARAMS  = 4
+    Info parameters
+
+    A_UINT8    bssid[ATH_MAC_LEN];
+    WMI_FORCE_ROAM
+
+    A_UINT8    roamMode;
+    WMI_SET_ROAM_MODE
+
+    A_UINT8    bssBiasInfo;
+    WMI_SET_HOST_BIAS
+
+    A_UINT16    lowrssi_scan_period;
+    WMI_SET_LOWRSSI_SCAN_PARAMS
+
+    A_INT16
+    lowrssi_scan_threshold;
+    WMI_SET_LOWRSSI_SCAN_PARAMS
+
+    A_INT16    lowrssi_roam_threshold;
+    WMI_SET_LOWRSSI_SCAN_PARAMS
+
+    A_UINT8    roam_rssi_floor;
+    WMI_SET_LOWRSSI_SCAN_PARAMS
+
+Reset Value
+    None defined (default lowrssi scan is disabled. Enabled only when scan period is set.)
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    SET_RTS
+
+Synopsis
+    Decides when RTS should be sent.
+
+Command
+    wmiconfig eth1 --setRTS <pkt length threshold>
+
+Command Parameters
+    A_UINT16
+    threshold;
+    Command parameter threshold in bytes. An RTS is
+    sent if the data length is more than this threshold.
+    The default is to NOT send RTS.
+
+Command Values
+    None
+
+Reset Value
+    Not to send RTS.
+
+Restrictions
+    None
+
+
+=====================================================================
+
+Name
+    SET_SCAN_PARAMS
+
+Synopsis
+    The host uses this command to set the AR6000 scan parameters, including the duty
+    cycle for both foreground and background scanning. Foreground scanning takes
+    place when the AR6000 device is not connected, and discovers all available wireless
+    networks to find the best BSS to join. Background scanning takes place when the
+    device is already connected to a network and scans for potential roaming candidates
+    and maintains them in order of best to worst. A second priority of background
+    scanning is to find new wireless networks.
+
+    The device initiates a scan when necessary. For example, a foreground scan is always
+    started on receipt of a “CONNECT_CMD” command or when the device cannot find
+    a BSS to connect to. Foreground scanning is disabled by default until receipt of a
+    CONNECT command. Background scanning is enabled by default and occurs every
+    60 seconds after the device is connected.
+
+    The device implements a binary backoff interval for foreground scanning when it
+    enters the DISCONNECTED state after losing connectivity with an AP or when a
+    CONNECT command is received. The first interval is ForegroundScanStartPeriod,
+    which doubles after each scan until the interval reaches ForegroundScanEndPeriod.
+    If the host terminates a connection with DISCONNECT, the foreground scan period
+    is ForegroundScanEndPeriod. All scan intervals are measured from the time a full
+    scan ends to the time the next full scan starts. The host starts a scan by issuing a
+    “START_SCAN” command. See also “Scan and Roam” on page C-1.
+
+Command
+    wmiconfig eth1 --scan --fgstart=<sec> --fgend=<sec> --bg=<sec> --
+    act=<msec> --pas=<msec> --sr=<short scan ratio> --scanctrlflags
+    <connScan> <scanConnected> <activeScan> <reportBSSINFO>
+
+Command Parameters
+    UINT16    fgStartPeriod
+        First interval used by the device when it
+        disconnects from an AP or receives a
+        CONNECT command, specified in seconds (0–
+        65535). If = 0, the device uses the reset value.
+        If = 65535, the device disables foreground
+        scanning.
+
+    UINT16    fgEndPeriod
+        The maximum interval the device waits between
+        foreground scans specified in seconds (from
+        ForegroundScanStartPeriod to 65535). If = 0, the
+        device uses the reset value.
+
+    UINT16    bgScanPeriod
+        The period of background scan specified in
+        seconds (0–65535). By default, it is set to the reset
+        value of 60 seconds. If 0 or 65535 is specified, the
+        device disables background scanning.
+
+    UINT16    maxactChDwellTime
+        The period of time the device stays on a
+        particular channel while active scanning. It is
+        specified in ms (10–65535). If the special value of
+        0 is specified, the device uses the reset value.
+
+    UINT16    PasChDwellTime
+        The period of time the device remains on a
+        particular channel while passive scanning. It is
+        specified in ms (10–65535). If the special value of
+        0 is specified, the device uses the reset value.
+
+    UINT8    shortScanRatio
+        Number of short scans to perform for each
+        long scan.
+
+    UINT8    scanCtrlFlasgs
+
+    UINT16    minactChDwellTime
+        Specified in ms
+
+    UINT32    maxDFSchActTime
+        The maximum time a DFS channel can stay
+        active before being marked passive, specified in
+        ms.
+
+Command Values
+    None
+
+Reset Values
+    ForegroundScanStart
+Period
+        1 sec
+
+    ForegroundScanEndPeriod
+        60 sec
+
+    BackgroundScanPeriod
+        60 sec
+
+    ActiveChannelDwellTime
+        105 ms
+
+=====================================================================
+
+
+Name
+    SET_TKIP_COUNTERMEASURES
+
+Synopsis
+    The host issues this command to tell the target whether to enable or disable TKIP
+    countermeasures.
+
+Command
+    TBD
+
+Command Parameters
+    UINT8    WMI_TKIP_CM_ENABLE
+        Enables the countermeasures
+
+
+    UINT8    TKIP_CM_DISABLE
+        Disables the countermeasures
+
+Command Values
+    None
+
+Reset Values
+    By default, TKIP MIC reporting is disabled
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    SET_TX_PWR
+
+Synopsis
+    The host uses this command to specify the Tx power level of the AR6000. Cannot be
+    used to exceed the power limit permitted by the regulatory domain. The maximum
+    output power is limited in the chip to 31.5 dBm; the range is 0 – 31.5 dbm.
+
+Command
+    wmiconfig --power <dbM>
+
+Command Parameters
+    UINT8    dbM
+        The desired Tx power specified in dbM.
+        If = 0, the device chooses the maximum
+        permitted by the regulatory domain.
+
+Command Values
+    None
+
+Reset Values
+    The maximum permitted by the regulatory domain
+
+Restrictions
+    None
+
+See Also
+    “GET_TX_PWR”
+
+
+=====================================================================
+
+Name
+    SET_VOICE_PKT_SIZE
+
+Synopsis
+    If an AP does not support WMM, it has no way to differentiate voice from data.
+    Because the voice packet is typically small, packet in size less than voicePktSize are
+    assumed to be voice, otherwise it is treated as data.
+
+Command
+    wmiconfig eth1 --setVoicePktSize <size-in-bytes>
+
+Command Parameters
+    UINT16    voicePktSize
+        Packet size in octets
+
+Command Values
+    None
+
+Reset Values
+    voicePktSize default is 400 bytes
+
+Restrictions
+    No effect if WMM is unavailable
+
+
+=====================================================================
+
+Name
+    SET_WMM
+
+Synopsis
+    Overrides the AR6000 device WMM capability
+
+Command
+    wmiconfig eth1 --setwmm <enable>
+
+Command Parameters
+    WMI_WMM_ENABLED
+        Enables WMM
+
+    WMI_WMM_DISABLED
+        Disables WMM support
+
+Command Values
+    0 = disabled
+    1 = enabled
+
+Reset Value
+    WMM Disabled
+
+Restrictions
+    None
+
+
+=====================================================================
+
+Name
+    SET_WMM_TXOP
+
+Synopsis
+    Configures TxOP Bursting when sending traffic to a WMM capable AP
+
+Command
+    wmiconfig eth1 --txopbursting <burstEnable>
+
+    <burstEnable>
+        = 0
+    Disallow TxOp bursting
+
+        = 1
+    Allow TxOp bursting
+
+Command Parameters
+    txopEnable
+        = WMI_TXOP_DISABLED
+        Disabled
+
+        = WMI_TXOP_ENABLED
+        Enabled
+
+Command Values
+    txopEnable
+        = 0    Disabled
+
+        = 1    Enabled
+
+Reset Value
+    Bursting is off by default
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    SET_WOW_MODE
+
+Synopsis
+    The host uses this command to enable or disable the WoW mode. When WoW mode
+    is enabled and the host is asleep, pattern matching takes place at the target level.
+    Only packets that match any of the pre-specified WoW filter patterns, will be passed
+    up to the host. The host will also be woken up by the target. Packets which do not
+    match any of the WoW patterns are discarded.
+
+Command
+    wmiconfig –setwowmode <enable/disable>
+
+Command Parameters
+    A_BOOL    enable_wow
+        Enable or disable WoW:
+
+Command Values
+        = 0
+    Disable WoW
+
+        = 1
+    Enable WoW
+
+Reset Value
+    None defined (default WoW mode is disabled).
+
+Restrictions
+    None
+
+See Also
+    “GET_WOW_LIST”
+
+
+=====================================================================
+
+Name
+    SET_WSC_STATUS
+
+Synopsis
+    The supplicant uses this command to inform the target about the status of the WSC
+    registration protocol. During the WSC registration protocol, a flag is set so the target
+    bypasses some of the checks in the CSERV module. At the end of the registration, this
+    flag is reset.
+
+Command
+    N/A
+
+Command Parameters
+    A_BOOL status
+        = 1    WSC registration in progress
+        = 0    WSC protocol not running
+
+Reply Parameters
+    None
+
+Reset Value
+    None defined (default = 0)
+
+Restrictions
+    None
+
+
+=====================================================================
+
+Name
+    SNR_THRESHOLD_PARAMS
+
+Synopsis
+    Configures how the AR6000 device monitors and reports SNR of the connected BSS,
+    used as a link quality metric.
+
+Command
+    --snrThreshold <weight> <upper_threshold_1> ...
+    <upper_threshold_4> <lower_threshold_1> ... <lower_threshold_4>
+    <pollTimer>
+
+Command Parameters
+    <weight>
+        Share with rssiThreshold. Range in [1, 16], used
+        in the formula to calculate average RSSI
+
+    <upper_threshold_x>
+        Above thresholds expressed in db, in ascending
+        order
+
+    <lower_threshold_x>
+        Below thresholds expressed in db, in ascending
+        order
+
+    <pollTimer>
+        The signal strength sampling frequency in
+        seconds. If polltime = 0, signal strength
+        sampling is disabled
+
+Command Values
+    None
+
+Reset Value
+    None defined
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    START_SCAN
+
+Synopsis
+    The host uses this command to start a long or short channel scan. All future scans are
+    relative to the time the AR6000 device processes this command. The device performs
+    a channel scan on receipt of this command, even if a scan was already in progress.
+    The host uses this command when it wishes to refresh its cached database of wireless
+    networks. The isLegacy field will be removed (0 for now) because it is achieved by
+    setting CONNECT_PROFILE_MATCH_DONE in the CONNECT command. See also
+    “Scan and Roam”
+
+Command
+    wmiconfig eth1 --startscan <scan type> <forcefgscan> 0
+    <homeDwellTime> <forceScanInterval>
+
+Command Parameters
+    UINT8    scanType
+        WMI_SCAN_TYPE
+
+Command Values
+    {
+        WMI_LONG_SCAN    =0x0
+            Requests a full scan
+        WMI_SHORT_SCAN   =0x1
+            Requests a short scan
+    } WMI_SCAN_TYPE
+
+    A_BOOL    forceFgScan
+        forceFgScan
+        = 0
+        Disable the foreground scan
+
+        forceFgScan
+        = 1
+        Forces a foreground scan
+
+    A_UINT32    homeDwellTime
+        Maximum duration in the home
+        channel (in ms)
+
+    A_UINT32     forceScanInterval
+        Time interval between scans (in ms)
+
+    A_UINT32     scanType
+        WMI_SCAN_TYPE
+
+Reset Value
+    Disable forcing foreground scan
+
+Restrictions
+    isLegacy field will no longer be supported (pass as 0 for now)
+
+
+=====================================================================
+
+Name
+    SYNCHRONIZE
+
+Synopsis
+    The host uses this command to force a synchronization point between the command
+    and data paths
+
+Command
+    TBD
+
+Command Parameters
+    None
+
+
+
+Command Values
+    None
+
+
+
+Reset Values
+    None
+
+
+
+Restrictions
+    None
+
+
+=====================================================================
+
+Name
+    TARGET_ERROR_REPORT_BITMASK
+
+Synopsis
+    Allows the host to control “ERROR_REPORT” events from the AR6000 device.
+
+        If error reporting is disabled for an error type, a count of errors of that type is
+        maintained by the device.
+
+        If error reporting is enabled for an error type, an “ERROR_REPORT” event is
+        sent when an error occurs and the error report bit is cleared.
+
+    Error counts for each error type are available through the “GET_TARGET_STATS”
+    command.
+
+Command
+    wmiconfig eth1 --setErrorReportingBitmask
+
+Command Parameters
+    UINT32    bitmask
+        Represents the set of
+        WMI_TARGET_ERROR_VAL error types
+        enabled for reporting
+
+Command Values
+    {
+        WMI_TARGET_PM_ERR_FAIL    = 0x00000001
+            Power save fails (only two cases):
+               Retry out of null function/QoS null
+               function to associated AP for PS
+               indication'
+               Host changes the PS setting when
+               STA is off home channel
+
+        WMI_TARGET_KEY_NOT_FOUND    = 0x00000002
+            No cipher key
+        WMI_TARGET_DECRYPTION_ERR   = 0x00000004
+            Decryption error
+        WMI_TARGET_BMISS            = 0x00000008
+            Beacon miss
+        WMI_PSDISABLE_NODE_JOIN     = 0x00000010
+            A non-PS-enabled STA joined the
+            PS-enabled network
+        WMI_TARGET_COM_ERR          = 0x00000020
+            Host/target communication error
+        WMI_TARGET_FATAL_ERR        = 0x00000040
+            Fatal error
+    } WMI_TARGET_ERROR_VAL
+
+Reset Values
+    Bitmask is 0, and all error reporting is disabled
+
+Restrictions
+    None
+
+
+=====================================================================
+WMI Events
+
+Event
+    Description
+    Page
+
+
+BSSINFO
+    Contains information describing BSSs collected during a scan
+
+CAC_EVENTID
+    Indicates signalling events in admission control
+
+CMDERROR
+    The AR6000 device encounters an error while attempting to process
+    a command
+
+CONNECT
+    The device has connected to a wireless network
+
+DISCONNECT
+    The device lost connectivity with a wireless network
+
+ERROR_REPORT
+    An error has occurred for which the host previously requested
+    notification with the command
+    “TARGET_ERROR_REPORT_BITMASK”
+
+EXTENSION
+    WMI extension event
+
+GET_PMKID_LIST_EVENT
+    Created in response to a “GET_PMKID_LIST_CMD” command
+
+GET_WOW_LIST_EVENT
+    Response to the wmiconfig “GET_WOW_LIST” command to
+    retrieve the configured WoW patterns
+
+NEIGHBOR_REPORT
+    Neighbor APs that match the current profile were detected
+
+OPT_RX_FRAME_EVENT
+    (Special feature) informs the host of the reception of a special frame
+
+PSTREAM_TIMEOUT
+    A prioritized stream has been idle for a specified interval
+
+READY
+    The AR6000 device is ready to accept commands
+
+REGDOMAIN
+    The regulatory domain has changed
+
+REPORT_ROAM_DATA_EVENT
+    Reports the roam time calculations made by the device
+    (generated with a special build)
+    —
+
+REPORT_STATISTICS
+    Reply to a “GET_TARGET_STATS” command
+
+ROAM_TBL_EVENT
+    Reports the roam table
+
+RSSI_THRESHOLD
+    Signal strength from the connected AP has crossed the threshold
+    defined in the “RSSI_THRESHOLD_PARAMS” command
+
+SCAN_COMPLETE_EVENT
+    A scan has completed (added status SCAN_ABORTED in release 2.0)
+
+TEST_EVENT
+    Event generated by the TCMD
+
+TKIP_MICERROR
+    TKIP MIC errors were detected
+
+=====================================================================
+
+Name
+    BSSINFO
+
+Synopsis
+    Contains information describing one or more BSSs as collected during a scan.
+    Information includes the BSSID, SSID, RSSI, network type, channel, supported rates,
+    and IEs. BSSINFO events are sent only after the device receives a beacon or probe-
+    response frame that pass the filter specified in the “SET_BSS_FILTER” command.
+    BSSINFO events consist of a small header followed by a copy of the beacon or probe
+    response frame. The 802.11 header is not present. For formats of beacon and probe-
+    response frames please consult the IEEE 802.11 specification.
+
+    The beacons or probe responses containing the IE specified by the
+    WMI_BSS_FILTER_CMD are passed to the host through the
+    WMI_BSSINFO_EVENT. The event carries a 32-bit bitmask that indicates the IEs that
+    were detected in the management frame. The frame type field has been extended to
+    indicate action management frames. This would be helpful to route these frames
+    through the same event mechanism as used by the beacon processing function.
+
+    If the bssFilter in the SET_BSS_FILTER matches, then the ieMask is not relevant
+    because the BSSINFO event is sent to the host. If the bssFilter doesnot match in the
+    beacons/probe respones, then the ieMask match dictates whether the BSSINFO
+    event is sent to the host. In the case of action management frames, the ieMask is the
+    filter that is applied.
+
+Event ID
+    0x1004
+
+Event Parameters
+    typedef struct {
+        A_UINT16    channel;
+            Specifies the frequency (in MHz) where the
+            frame was received
+        A_UINT8    frameType;
+            A WMI_BI_FTYPE value
+        A_UINT8    snr;
+        A_INT16    rssi;
+            Indicates signal strength
+        A_UINT8    bssid[ATH_MAC_LEN];
+        A_UINT32    ieMask;
+    } _ATTRIB_PACK_WMI_BSS_INFO_HDR;
+
+    Beacon or Probe Response Frame
+
+Event Values
+    {
+        BEACON_FTYPE    = 0x1
+            Indicates a beacon frame
+        PROBERESP_FTYPE
+            Indicates a probe response frame
+        ACTION_MGMT_FTYPE
+     } WMI_BI_FTYPE
+
+=====================================================================
+
+Name
+    CAC_EVENTID
+
+Synopsis
+    Indicates signalling events in admission control. Events are generated when
+    admission is accepted, rejected, or deleted by either the host or the AP. If the AP does
+    not respond to an admission request within a timeout of 500 ms, an event is
+    generated to the host.
+
+Event ID
+    0x1011
+
+Event Parameters
+    UINT8
+    ac
+    Access class pertaining to the
+signalling
+
+    UINT8    cac_indication
+        Type of indication; indications are
+        listed in WMI_CAC_INDICATION
+
+    UINT8    statusCode
+        AP response status code for a
+        request
+
+    UINT8    tspecSuggestion[63]
+        Suggested TSPEC from AP
+
+Event Values
+    {
+        CAC_INDICATION_ADMISSION = 0x00
+        CAC_INDICATION_ADMISSION_RESP    = 0x01
+        CAC_INDICATION_DELETE    = 0x02
+        CAC_INDICATION_NO_RESP   = 0x03
+    } WMI_CAC_INDICATION
+
+
+=====================================================================
+
+
+Name
+    CMDERROR
+
+Synopsis
+    Indicates that the AR6000 device encountered an error while attempting to process a
+    command. This error is fatal and indicates that the device requires a reset.
+
+Event ID
+    0x1005
+
+Event Parameters
+    UINT16    commandId
+        Corresponds to the command which generated
+        the error
+    UINT8    errorCode
+        A WMI_ERROR_CODE value
+
+Event Values
+    {
+        INVALID_PARAM    = 1
+            Invalid parameter
+        ILLEGAL_STATE    = 2
+            Illegal state
+        INTERNAL_ERROR   = 3
+            Internal Error
+        All other values reserved
+    } WMI_ERROR_CODE
+
+
+=====================================================================
+
+
+Name
+    CONNECT
+
+Synopsis
+    Signals that the AR6000 connected to a wireless network. Connection occurs due to a
+    “CONNECT” command or roaming to a new AP. For infrastructure networks, shows
+    that the AR6000 successfully performed 802.11 authentication and AP association.
+
+Event ID
+    0x1002
+
+Event Parameters
+    UINT16    channel
+        Channel frequency (in MHz) of the network the
+        AR6000 are connected to
+
+    UINT8    bssid[6]
+        MAC address of the AP the AR6000 are
+        connected to or the BSSID of the ad hoc
+        network
+
+    UINT16    listenInterval
+        Listen interval (in Kms) that the AR6000 are
+        using
+
+    UINT 8    beaconIeLen
+        Length (in bytes) of the beacon IEs
+
+    UINT8    assocInfo
+        Pointer to an array containing beacon IEs,
+        followed first by association request IEs then by
+        association response IEs
+
+    UINT8    assocReqLen
+        Length (in bytes) of the assocReqIEs array
+
+    UINT8    assocRespLen
+        Length (in bytes) of the assocRespIEs array
+
+Event Values
+    None defined
+
+=====================================================================
+
+
+Name
+    DISCONNECT
+
+Synopsis
+    Signals that the AR6000 device lost connectivity with the wireless network.
+    DISCONENCT is generated when the device fails to complete a “CONNECT”
+    command or as a result of a transition from a connected state to disconnected state.
+
+    After sending the “DISCONNECT” event the device continually tries to re-establish
+    a connection. A LOST_LINK occurs when STA cannot receive beacons within the
+    specified time for the SET_BMISS_TIME command.
+
+Event ID
+    0x1003
+
+Event Parameters
+    UINT8    disconnect
+        Reason
+        A WMI_DISCONNECT_REASON value
+
+    UINT8    bssid[6]
+        Indicates which BSS the device was connected to
+
+    UINT8    assocRespLen
+        Length of the 802.11 association response frame
+        that triggered this event, or 0 if not applicable
+
+    UINT8    assocInfo[assocRespLen]
+        Copy of the 802.11 association response frame
+
+Event Values
+    {
+        NO_NETWORK_AVAIL    =0x01
+            Indicates that the device was unable to
+            establish or find the desired network
+        LOST_LINK    =0x02
+            Indicates the devices is no longer receiving
+            beacons from the BSS it was previously
+            connected to
+
+        DISCONNECT_CMD  =0x03
+            Indicates a “DISCONNECT” command was
+            processed
+        BSS_DISCONNECTED =0x04
+            Indicates the BSS explicitly disconnected the
+            device. Possible mechanisms include the AP
+            sending 802.11 management frames
+            (e.g., disassociate or deauthentication
+            messages).
+        AUTH_FAILED    =0x05
+            Indicates that the device failed 802.11
+            authentication with the BSS
+        ASSOC_FAILED    =0x06
+            Indicates that the device failed 802.11
+            association with the BSS
+        NO_RESOURCES_AVAIL    =0x07
+            Indicates that a connection failed because the
+            AP had insufficient resources to complete the
+            connection
+        CSERV_DISCONNECT    =0x08
+            Indicates that the device’s connection services
+            module decided to disconnect from a BSS,
+            which can happen for a variety of reasons (e.g.,
+            the host marks the current connected AP as a
+            bad AP).
+        INVALID_PROFILE    =0x0A
+            Indicates that an attempt was made to
+            reconnect to a BSS that no longer matches the
+            current profile
+        All other values are reserved
+    } WMI_DISCONNECT_REASON
+
+
+=====================================================================
+
+
+Name
+    ERROR_REPORT
+
+Synopsis
+    Signals that a type of error has occurred for which the host previously requested
+    notification through the “TARGET_ERROR_REPORT_BITMASK” command.
+
+Event ID
+    0x100D
+
+Event Parameters
+    UINT32    errorVal
+            WMI_TARGET_ERROR_VAL value. See
+            “TARGET_ERROR_REPORT_BITMASK”.
+
+Event Values
+    errorVal
+    = 0x00000001
+    Power save fails
+
+        = 0x00000002
+    No cipher key
+
+        = 0x00000004
+    Decryption error
+
+        = 0x00000008
+    Beacon miss
+
+        = 0x00000010
+    A non-power save disabled node has joined
+    the PS-enabled network
+
+
+=====================================================================
+
+
+Name
+    EXTENSION
+
+Synopsis
+    The WMI is used mostly for wireless control messages to a wireless module that
+    apply to wireless module management regardless of the target platform
+    implementation. However, some events peripherally related to wireless management
+    are desired during operation. These wireless extension events may be platform-
+    specific or implementation-dependent. See “WMI Extension Commands”
+
+
+Event ID
+    0x1010
+
+
+=====================================================================
+
+
+Name
+    GET_PMKID_LIST_EVENT
+
+Synopsis
+    Generated by firmware in response to a “GET_PMKID_LIST_CMD” command.
+
+Event Parameters
+    typedef struct {
+        A_UINT32    numPMKID;
+            Contains the number of PMKIDs in the reply
+        WMI_PMKID   pmkidList[1];
+    } __ATTRIB_PACK WMI_PMKID_LIST_REPLY;
+
+Event Values
+    None
+
+
+=====================================================================
+
+
+Name
+    GET_WOW_LIST_EVENT
+
+Synopsis
+    Response to the wmiconfig –getwowlist command to retrieve the configured Wake on
+    Wireless patterns
+
+Event ID
+    0x10018
+
+Event Parameters
+    {
+
+    A_UINT8    num_filters
+        Total number of patterns in the list
+    A_UINT8    this_filter_num
+        The filter number
+    A_UINT8    wow_mode
+        Shows whether WoW is enabled or disabled
+    A_UINT8    host_mode
+        Shows whether the host is asleep or awake
+    WOW_FILTER    wow_filters[1]
+        List of WoW filters (pattern and mask data bytes)
+    } WMI_GET_WOW_LIST_REPLY;
+
+    {
+        Each wow_filter_list element shows:
+    A_UINT8    wow_valid_filter
+        Whether the filter is valid
+    A_UINT8    wow_filter_list_id
+        Filter List ID (23 = default)
+    A_UINT8    wow_filter_size
+        Size in bytes of the filter
+    A_UINT8    wow_filter_offset
+        Offset of the pattern to search in the data packet
+    A_UINT8    wow_filter_mask[MASK_SIZE]
+        The mask to be applied to the pattern
+    A_UINT8    wow_filter_pattern[WOW_PATTERN_SIZE]
+        The pattern that to match to wake up the host
+    } WOW_FILTER
+
+Event Values
+    None
+
+=====================================================================
+
+
+
+Name
+    NEIGHBOR_REPORT
+
+Synopsis
+    Indicates the existence of neighbor APs that match the current profile. The host uses
+    this event to populate the PMKID cache on the AR6000 and/or to perform
+    preauthentication. This event is only generated in infrastructure mode.
+
+    A total of numberOfAps pairs of bssid/bssFlags exist, one pair for each AP.
+
+Event ID
+    0x1008
+
+Event Parameters
+    UINT8    numberOfAps
+        The number of APs reported about in
+        this event
+    {
+        UINT8    bssid[6]
+            MAC address of a neighbor AP
+        UINT8    bssFlags
+            A WMI_BSS_FLAGS value
+    }[numberOfAps]
+
+
+Event Values
+    {
+        WMI_DEFAULT_BSS_FLAGS    = 0
+            Logical OR of 1 or more
+        WMI_BSS_FLAGS
+        WMI_PREAUTH_CAPABLE_BSS
+            = 1
+            Indicates that this AP is capable of
+            preauthentication
+        WMI_PMKID_VALID_BSS
+            = 2
+            Indicates that the AR6000 have a
+            valid pairwise master key for this AP
+    } WMI_BSS_FLAGS
+
+
+=====================================================================
+
+
+
+Name
+    OPT_RX_FRAME_EVENT
+
+Synopsis
+    Special feature, informs host of the reception of a special frame.
+
+Event ID
+    0x100E
+
+Event Parameters
+    {
+        A_UINT16    channel;
+        A_UINT8    frameType;
+        A_INT8    snr;
+        A_UINT8    srcAddr[ATH_MAC_LEN];
+        A_UINT8    bssid[ATH_MAC_LEN];
+        }WMI_OPT_RX_INFO_HDR
+
+Event Values
+    None
+
+=====================================================================
+
+
+
+Name
+    PSTREAM_TIMEOUT
+
+Synopsis
+    Indicates that a priority stream that got created as a result of priority-marked data
+    flow (priority marked in IP TOS) being idle for the default inactivity interval period
+    (specified in the “CREATE_PSTREAM” command) used for priority streams created
+    implicitly by the driver. This event is not indicated for user-created priority streams.
+    User-created priority streams exist until the users delete them explicitly. They do not
+    timeout due to data inactivity.
+
+Event ID
+    0x1007
+
+Event Parameters
+    A_UINT8
+    trafficClass
+    Indicated the traffic class of priority
+    stream that timed out
+
+Event Values
+    {
+        WMM_AC_BE    = 0
+            Best effort
+        WMM_AC_BK    = 1
+            Background
+        WMM_AC_VI    = 2
+            Video
+        WMM_AC_VO     = 3
+            Voice
+    } TRAFFIC CLASS
+
+
+=====================================================================
+
+Name
+    READY
+
+Synopsis
+    Indicates that the AR6000 device is prepared to accept commands. It is sent once after
+    power on or reset. It also indicates the MAC address of the device.
+
+Event ID
+    0x1001
+
+Event Parameters
+    UINT8    macAddr[6]
+        Device MAC address
+    UINT8    phyCapability
+        A WMI_PHY_CAPABILITY value. Indicates the
+        capabilities of the device wireless module’s radio
+
+Event Values
+    {
+        WMI_11A_CAPABILITY       = 1
+        WMI_11G_CAPABILITY       = 2
+        WMI_11AG_CAPABILITY      = 3
+    } WMI_PHY_CAPABILITY
+
+
+=====================================================================
+
+Name
+    REGDOMAIN
+
+Synopsis
+    Indicates that the regulatory domain has changed. It initially occurs when the
+    AR6000 device reads the board data information. The regulatory domain can also
+    change when the device is a world-mode SKU. In this case, the regulatory domain is
+    based on the country advertised by APs per the IEEE 802.11d specification. A
+    potential side effect of a regulatory domain change is a change in the list of available
+    channels. Any channel restrictions that exist as a result of a previous
+    “SET_CHANNEL_PARAMETERS” command are lifted.
+
+Event ID
+    0x1006
+
+Event Parameters
+    UINT32    regDomain
+        The range of 0x0000 – 0x00FF
+        corresponds to an ISO country code.
+
+    Other regCodes are reserved for world
+    mode settings and specific regulatory
+    domains.
+
+Event Values
+    None
+
+
+=====================================================================
+
+
+
+Name
+    REPORT_STATISTICS
+
+Synopsis
+    A reply to a “GET_TARGET_STATS” command.
+
+Event ID
+    0x100B
+
+Event Parameters
+    When the statistics are sent to the host, the AR6001 clear them so that a new set of
+    statistics are collected for the next report.
+
+    UINT32    tx_packets
+    UINT32    tx_bytes
+    UINT32    tx_unicast_pkts
+    UINT32    tx_unicast_bytes
+    UINT32    tx_multicast_pkts
+    UINT32    tx_multicast_bytes
+    UINT32    tx_broadcast_pkts
+    UINT32    tx_broadcast_bytes
+    UINT32    tx_rts_success_cnt
+    UINT32    tx_packet_per_ac[4]
+        Tx packets per AC: [0] = BE, [1] = BK,
+        [2] = VI, [3] = VO
+    UINT32    tx_errors
+        Number of packets which failed Tx, due
+        to all failures
+    ... REPORT_STATISTICS, continued
+    UINT32    tx_failed_cnt
+        Number of data packets that failed Tx
+    UINT32    tx_retry_cnt
+        Number of Tx retries for all packets
+    UINT32    tx_rts_fail_cnt
+        Number of RTS Tx failed count
+    UINT32    rx_packets
+    UINT32    rx_bytes
+    UINT32    rx_unicast_pkts
+    UINT32    rx_unicast_bytes
+    UINT32    rx_multicast_pkts
+    UINT32    rx_multicast_bytes
+    UINT32    rx_broadcast_pkts
+    UINT32    rx_broadcast_bytes
+    UINT32    rx_fragment_pkt
+        Number of fragmented packets received
+    UINT32    rx_errors
+        Number of Rx errors due to all failures
+    UINT32    rx_crcerr
+        Number of Rx errors due to CRC errors
+    UINT32    rx_key_cache_miss
+        Number of Rx errors due to a key not
+        being plumbed
+    UINT32    rx_decrypt_err
+        Number of Rx errors due to decryption
+        failure
+    UINT32    rx_duplicate_frames
+        Number of duplicate frames received
+    UINT32    tkip_local_mic_failure
+        Number of TKIP MIC errors detected
+    UINT32    tkip_counter_measures_invoked
+        Number of times TKIP countermeasures
+        were invoked
+    UINT32    tkip_replays
+        Number of frames that replayed a TKIP
+        encrypted frame received earlier
+    UINT32    tkip_format_errors
+        Number of frames that did not conform
+        to the TKIP frame format
+    UINT32    ccmp_format_errors
+        Number of frames that did not conform
+        to the CCMP frame format
+    UINT32    ccmp_replays
+        Number of frames that replayed a CCMP
+        encrypted frame received earlier
+    UINT32    power_save_failure_cnt
+        Number of failures that occurred when
+        the AR6001 could not go to sleep
+    UINT32    cs_bmiss_cnt
+        Number of BMISS interrupts since
+    connection
+    UINT32    cs_lowRssi_cnt
+        Number of the times the RSSI went below
+        the low RSSI threshold
+    UINT16    cs_connect_cnt
+        Number of connection times
+    UINT16    cs_disconnect_cnt
+        Number of disconnection times
+    UINT8    cs_aveBeacon_rssi
+        The current averaged value of the RSSI
+        from the beacons of the connected BSS
+    UINT8    cs_lastRoam_msec
+        Time that the last roaming took, in ms.
+        This time is the difference between
+        roaming start and actual connection.
+
+Event Values
+    None defined
+
+
+=====================================================================
+
+Name
+    ROAM_TBL_EVENT
+
+Synopsis
+    Reports the roam table, which contains the current roam mode and this information
+    for every BSS:
+
+Event ID
+    0x100F
+
+Event Parameters
+    A_UINT8     bssid[ATH_MAC_LEN];
+        BSSID
+    A_UINT8     rssi
+        Averaged RSSI
+    A_UINT8     rssidt
+        Change in RSSI
+    A_UINT8     last_rssi
+        Last recorded RSSI
+    A_UINT8     roam_util
+        Utility value used in roaming decision
+    A_UINT8     util
+        Base utility with the BSS
+    A_UINT8     bias
+        Host configured for this BSS
+
+Event Values
+    roamMode
+        Current roam mode
+
+        = 1
+    RSSI based roam
+
+        = 2
+    Host bias-based roam
+
+        = 3
+    Lock to the current BSS
+
+        = 4
+    Autonomous roaming disabled
+
+
+=====================================================================
+
+Name
+    RSSI_THRESHOLD
+
+Synopsis
+    Alerts the host that the signal strength from the connected AP has crossed a
+    interesting threshold as defined in a previous “RSSI_THRESHOLD_PARAMS”
+    command.
+
+Event ID
+    0x100C
+
+Event Parameters
+    UINT8    range
+        A WMI_RSSI_THRESHOLD_VAL
+        value, which indicates the range of
+        the average signal strength
+
+Event Values
+    {
+        WMI_RSSI_LOWTHRESHOLD_BELOW_LOWERVAL  = 1
+        WMI_RSSI_LOWTHRESHOLD_LOWERVAL        = 2
+        WMI_RSSI_LOWTHRESHOLD_UPPERVAL        = 3
+        WMI_RSSI_HIGHTHRESHOLD_LOWERVAL       = 4
+        WMI_RSSI_HIGHTHRESHOLD_HIGHERVAL      = 5
+    } WMI_RSSI_THRESHOLD_VAL
+
+
+=====================================================================
+
+Name
+    SCAN_COMPLETE_EVENT
+
+Synopsis
+    Indicates the scan status. if the Scan was not completed, this event is generated with
+    the status A_ECANCELED.
+
+Event ID
+    0x100A
+
+Event Parameters
+    A_UINT8    scanStatus
+
+Event Values
+    {
+        #define     SCAN_ABORTED 16
+        #define     SCAN_COMPLETED 0
+        A_UINT8     scanStatus
+            A_OK or A_ECANCELED
+    } WMI_SCAN_COMPLETE_EVENT;
+
+
+=====================================================================
+
+Name
+    TEST_EVENT
+
+Synopsis
+    The TCMD application uses a single WMI event (WMI_TEST_EVENTID) to
+    communicate events from target to host. The events are parsed by the TCMD
+    application and WMI layer is oblivious of it.
+
+Event ID
+    0x1016
+
+Event Parameters
+    WMI_TEST_EVENTID
+
+
+Event Values
+    None
+
+
+=====================================================================
+
+
+
+Name
+    TKIP_MICERR
+
+Synopsis
+    Indicates that TKIP MIC errors were detected.
+
+Event ID
+    0x1009
+
+Event Parameters
+    UINT8    keyid
+        Indicates the TKIP key ID
+
+    UINT8    ismcast
+        0 = Unicast
+        1 = Multicast
+
+Event Values
+    See event parameters
+
+=====================================================================
+
+WMI Extension Commands
+
+The WMI EXTENSION command is used to multiplex a collection of
+commands that:
+
+        Are not generic wireless commands
+        May be implementation-specific
+        May be target platform-specific
+        May be optional for a host implementation
+
+    An extension command is sent to the AR6000 targets like any other WMI
+command message and uses the WMI_EXTENSION. The first field of the
+payload for this EXTENSION command is another commandId, sometimes
+called the subcommandId, which indicates which extension command is
+being used. A subcommandId-specific payload follows the subcommandId.
+
+All extensions (subcommandIds) are listed in the header file include/wmix.h.
+See also “WMI Extension Events” on page B-58.
+
+
+WMI Extension Commands
+
+
+GPIO_INPUT_GET
+    Read GPIO pins configured for input
+
+GPIO_INTR_ACK
+    Acknowledge and re-arm GPIO interrupts reported earlier
+
+GPIO_OUTPUT_SET
+    Manage output on GPIO pins configured for output
+
+GPIO_REGISTER_GET
+    Read an arbitrary GPIO register
+
+GPIO_REGISTER_SET
+    Dynamically change GPIO configuration
+
+SET_LQTHRESHOLD
+    Set link quality thresholds; the sampling happens at every unicast
+    data frame Tx, if certain thresholds are met, and corresponding
+    events are sent to the host
+
+
+=====================================================================
+
+Name
+    GPIO_INPUT_GET
+
+Synopsis
+    Allows the host to read GPIO pins that are configured for input. The values read are
+    returned through a “GPIO_DATA” extension event.
+
+NOTE: Support for GPIO is optional.
+
+Command
+    N/A
+
+Command Parameters
+    None
+
+
+
+Reply Parameters
+    None
+
+
+Reset Value
+    None
+
+
+
+Restrictions
+    None
+
+=====================================================================
+
+
+Name
+    GPIO_INTR_ACK
+
+Synopsis
+    The host uses this command to acknowledge and to re-arm GPIO interrupts reported
+    through an earlier “GPIO_INTR” extension event. A single “GPIO_INTR_ACK”
+    command should be used to acknowledge all GPIO interrupts that the host knows to
+    be outstanding (if pending interrupts are not acknowledged through
+    “GPIO_INTR_ACK”, another “GPIO_INTR” extension event is raised).
+
+NOTE: Support for GPIO is optional.
+
+Command
+    N/A
+
+Command Parameters
+    UINT32    ack_mask
+        A mask of interrupting GPIO pins (e.g., ack_mask
+        bit [3] acknowledges an interrupt from the pin GPIO3).
+
+Command Values
+    None
+
+Reset Value
+    None
+
+Restrictions
+    The host should acknowledge only interrupts about which it was notified.
+
+
+=====================================================================
+
+Name
+    GPIO_OUTPUT_SET
+
+Synopsis
+    Manages output on GPIO pins configured for output.
+
+    Conflicts between set_mask and clear_mask or enable_mask and disable_mask result
+    in undefined behavior.
+
+NOTE: Support for GPIO is optional.
+
+Command
+    N/A
+
+Command Parameters
+    UINT32    set_mask
+        Specifies which pins should drive a 1 out
+    UINT32    clear_mask
+        Specifies which pins should drive a 0 out
+    UINT32    enable_mask
+        Specifies which pins should be enabled for output
+    UINT32    disable_mask
+        Specifies which pins should be disabled for output
+
+Command Values
+    None
+
+
+Reset Value
+    None
+
+
+Restrictions
+    None
+
+
+
+=====================================================================
+
+
+Name
+    GPIO_REGISTER_GET
+
+Synopsis
+    Allows the host to read an arbitrary GPIO register. It is intended for use during
+    bringup/debug. The target responds to this command with a “GPIO_DATA” event.
+
+NOTE: Support for GPIO is optional.
+
+Command
+    N/A
+
+Command Parameters
+    UINT32
+    gpioreg_id
+    Specifies a GPIO register identifier, as defined
+in include/AR6000/AR6000_gpio.h
+
+Reply Parameters
+    None
+
+Reset Value
+    N/A
+
+Restrictions
+    None
+
+
+=====================================================================
+
+Name
+    GPIO_REGISTER_SET
+
+Synopsis
+    Allows the host to dynamically change GPIO configuration (usually handled
+    statically through the GPIO configuration DataSet).
+
+NOTE: Support for GPIO is optional.
+
+Command
+    N/A
+
+Command Parameters
+    UINT32    gpioreg_id
+        Specifies a GPIO register identifier, as defined in
+        include/AR6000/AR6000_gpio.h
+    UINT32    value
+        Specifies a value to write to the specified
+        GPIO register
+
+Command Values
+    None
+
+
+Reset Value
+    Initial hardware configuration is as defined in the AR6001 or AR6002 ROCmTM
+    Single-Chip MAC/BB/Radio for 2.4/5 GHz Embedded WLAN Applications data sheet. This
+    configuration is modified by the GPIO Configuration DataSet, if one exists.
+
+Restrictions
+    None
+
+
+=====================================================================
+
+
+Name
+    SET_LQTHRESHOLD
+
+Synopsis
+    Set link quality thresholds, the sampling happens at every unicast data frame Tx, if
+    certain threshold is met, corresponding event will be sent to host.
+
+Command
+    wmiconfig eth1 --lqThreshold <enable> <upper_threshold_1>...
+    <upper_threshold_4> <lower_threshold_1>... <lower_threshold_4>
+
+Command Parameters
+    A_UINT8   enable;
+    A_UINT8   thresholdAbove1_Val;
+    A_UINT8   thresholdAbove2_Val;
+    A_UINT8   thresholdAbove3_Val;
+    A_UINT8   thresholdAbove4_Val;
+    A_UINT8   thresholdBelow1_Val;
+    A_UINT8   thresholdBelow2_Val;
+    A_UINT8   thresholdBelow3_Val;
+    A_UINT8   thresholdBelow4_Val;
+
+Command Values
+    enable
+    = 0
+    Disable link quality sampling
+
+        = 1
+    Enable link quality sampling
+
+
+    thresholdAbove_Val
+    [1...4]
+    Above thresholds (value in [0,100]), in ascending
+    order threshold
+
+    Below_Val [1...4] = below thresholds (value
+    in [0,100]), in ascending order
+
+Reset Values
+    None
+
+Restrictions
+    None
+
+=====================================================================
+WMI Extension Events
+
+The WMI EXTENSION event is used for a collection of events that:
+
+    Are not generic wireless events
+    May be implementation-specific
+    May be target platform-specific
+    May be optional for a host implementation
+
+    An extension event is sent from the AR6000 device targets to the host just like
+any other WMI event message, using the WMI_EXTENSION_EVENTID. The
+first field of the payload for this “EXTENSION” event is another commandId
+(sometimes called the subcommandId) that indicates which “EXTENSION”
+event is being used. A subcommandId-specific payload follows the
+subcommandId.
+
+All extensions (subcommandIds) are listed in the header file include/wmix.h.
+See also “WMI Extension Commands” on page B-55.
+
+
+WMI Extension Events
+
+
+GPIO_ACK
+    Acknowledges a host set command has been processed by the device
+
+GPIO_DATA
+    Response to a host’s request for data
+
+GPIO_INTR
+    Signals that GPIO interrupts are pending
+
+
+=====================================================================
+
+Name
+    GPIO_ACK
+
+Synopsis
+    Acknowledges that a host set command (either “GPIO_OUTPUT_SET” or
+    “GPIO_REGISTER_SET”) has been processed by the AR6000 device.
+
+NOTE: Support for GPIO is optional.
+
+Event ID
+    N/A
+
+Event Parameters
+    None
+
+
+Event Values
+    None
+
+=====================================================================
+
+
+Name
+    GPIO_DATA
+
+Synopsis
+    The AR6000 device uses this event to respond to the host’s earlier request for data
+    (through either a “GPIO_REGISTER_GET” or a “GPIO_INPUT_GET” command).
+
+NOTE: Support for GPIO is optional.
+
+Event ID
+    N/A
+
+Event Parameters
+    UINT32    value
+        Holds the data of interest, which is either a register value
+        (in the case of “GPIO_REGISTER_GET”) or a mask of
+        pin inputs (in the case of “GPIO_INPUT_GET”).
+    UINT32    reg_id
+        Indicates which register was read (in the case of
+        “GPIO_REGISTER_GET”) or is GPIO_ID_NONE (in the
+        case of “GPIO_INPUT_GET”)
+
+Event Values
+    None
+
+
+=====================================================================
+
+
+
+Name
+    GPIO_INTR
+
+Synopsis
+    The AR6000 device raises this event to signal that GPIO interrupts are pending.
+    These GPIOs may be interrupts that occurred after the last “GPIO_INTR_ACK”
+    command was issued, or may be GPIO interrupts that the host failed to acknowledge
+    in the last “GPIO_INTR_ACK”. The AR6000 will not raise another GPIO_INTR
+    event until this event is acknowledged through a “GPIO_INTR_ACK” command.
+
+NOTE: Support for GPIO is optional.
+
+Event ID
+    N/A
+
+Event Parameters
+    UINT32    intr_mask
+        Indicates which GPIO interrupts are currently pending
+
+    UINT32    input_values
+        A recent copy of the GPIO input values, taken at the
+        time the most recent GPIO interrupt was processed
+
+Event Values
+    None
+
+
+
+=====================================================================
+#endif

Added: trunk/src/target/AR6kSDK.build_sw.18/host/wmi/wmi_host.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/host/wmi/wmi_host.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/host/wmi/wmi_host.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,71 @@
+#ifndef _WMI_HOST_H_
+#define _WMI_HOST_H_
+/*
+ * Copyright (c) 2004-2006 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * This file contains local definitios for the wmi host module.
+ *
+ * $Id: //depot/sw/releases/olca2.0-GPL/host/wmi/wmi_host.h#1 $
+ *
+ * 
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License version 2 as
+ *  published by the Free Software Foundation;
+ * 
+ *  Software distributed under the License is distributed on an "AS
+ *  IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ *  implied. See the License for the specific language governing
+ *  rights and limitations under the License.
+ * 
+ * 
+ *
+ */
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+struct wmi_stats {
+    A_UINT32    cmd_len_err;
+    A_UINT32    cmd_id_err;
+};
+
+struct wmi_t {
+    A_BOOL                          wmi_ready;
+    A_BOOL                          wmi_numQoSStream;
+    A_UINT8                         wmi_wmiStream2AcMapping[WMI_PRI_MAX_COUNT];
+    WMI_PRI_STREAM_ID               wmi_ac2WmiStreamMapping[WMM_NUM_AC];
+    A_UINT16                        wmi_streamExistsForAC[WMM_NUM_AC];
+    A_UINT8                         wmi_fatPipeExists;
+    void                           *wmi_devt;
+    struct wmi_stats                wmi_stats;
+    struct ieee80211_node_table     wmi_scan_table;
+    A_UINT8                         wmi_bssid[ATH_MAC_LEN];
+    A_UINT8                         wmi_powerMode;
+    A_UINT8                         wmi_phyMode;
+    A_UINT8                         wmi_keepaliveInterval;
+    A_MUTEX_T                       wmi_lock;
+};
+
+#define WMI_INIT_WMISTREAM_AC_MAP(w) \
+{  (w)->wmi_wmiStream2AcMapping[WMI_BEST_EFFORT_PRI] = WMM_AC_BE; \
+   (w)->wmi_wmiStream2AcMapping[WMI_LOW_PRI] = WMM_AC_BK; \
+   (w)->wmi_wmiStream2AcMapping[WMI_HIGH_PRI] = WMM_AC_VI; \
+   (w)->wmi_wmiStream2AcMapping[WMI_HIGHEST_PRI] = WMM_AC_VO; \
+   (w)->wmi_ac2WmiStreamMapping[WMM_AC_BE] = WMI_BEST_EFFORT_PRI; \
+   (w)->wmi_ac2WmiStreamMapping[WMM_AC_BK] = WMI_LOW_PRI; \
+   (w)->wmi_ac2WmiStreamMapping[WMM_AC_VI] = WMI_HIGH_PRI; \
+   (w)->wmi_ac2WmiStreamMapping[WMM_AC_VO] = WMI_HIGHEST_PRI; }
+
+#define WMI_WMISTREAM_ACCESSCATEGORY(w,s)      (w)->wmi_wmiStream2AcMapping[s]
+#define WMI_ACCESSCATEGORY_WMISTREAM(w,ac)       (w)->wmi_ac2WmiStreamMapping[ac]
+
+#define LOCK_WMI(w)     A_MUTEX_LOCK(&(w)->wmi_lock);
+#define UNLOCK_WMI(w)   A_MUTEX_UNLOCK(&(w)->wmi_lock);
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _WMI_HOST_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/include/AR6001/AR6001_regdump.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/AR6001/AR6001_regdump.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/AR6001/AR6001_regdump.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,100 @@
+/*
+ * Copyright (c) 2006 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ */
+
+#ifndef __AR6000_REGDUMP_H__
+#define __AR6000_REGDUMP_H__
+
+#if !defined(__ASSEMBLER__)
+/*
+ * Target CPU state at the time of failure is reflected
+ * in a register dump, which the Host can fetch through
+ * the diagnostic window.
+ */
+
+struct MIPS_exception_frame_s {
+    A_UINT32 pc;        /* Program Counter */
+    A_UINT32 at;        /* MIPS General Purpose registers */
+    A_UINT32 v0;
+    A_UINT32 v1;
+    A_UINT32 a0;
+    A_UINT32 a1;
+    A_UINT32 a2;
+    A_UINT32 a3;
+    A_UINT32 t0;
+    A_UINT32 t1;
+    A_UINT32 t2;
+    A_UINT32 t3;
+    A_UINT32 t4;
+    A_UINT32 t5;
+    A_UINT32 t6;
+    A_UINT32 t7;
+    A_UINT32 s0;
+    A_UINT32 s1;
+    A_UINT32 s2;
+    A_UINT32 s3;
+    A_UINT32 s4;
+    A_UINT32 s5;
+    A_UINT32 s6;
+    A_UINT32 s7;
+    A_UINT32 t8;
+    A_UINT32 t9;
+    A_UINT32 k0;
+    A_UINT32 k1;
+    A_UINT32 gp;
+    A_UINT32 sp;
+    A_UINT32 s8;
+    A_UINT32 ra;
+    A_UINT32 cause; /* Selected coprocessor regs */
+    A_UINT32 status;
+};
+typedef struct MIPS_exception_frame_s CPU_exception_frame_t;
+
+#endif
+
+/*
+ * Offsets into MIPS_exception_frame structure, for use in assembler code
+ * MUST MATCH C STRUCTURE ABOVE
+ */
+#define RD_pc           0
+#define RD_at           1
+#define RD_v0           2
+#define RD_v1           3
+#define RD_a0           4
+#define RD_a1           5
+#define RD_a2           6
+#define RD_a3           7
+#define RD_t0           8
+#define RD_t1           9
+#define RD_t2           10
+#define RD_t3           11
+#define RD_t4           12
+#define RD_t5           13
+#define RD_t6           14
+#define RD_t7           15
+#define RD_s0           16
+#define RD_s1           17
+#define RD_s2           18
+#define RD_s3           19
+#define RD_s4           20
+#define RD_s5           21
+#define RD_s6           22
+#define RD_s7           23
+#define RD_t8           24
+#define RD_t9           25
+#define RD_k0           26
+#define RD_k1           27
+#define RD_gp           28
+#define RD_sp           29
+#define RD_s8           30
+#define RD_ra           31
+#define RD_cause        32
+#define RD_status       33
+
+#define RD_SIZE         (34*4) /* Space for this number of words */
+
+#endif /* __AR6000_REGDUMP_H__ */

Added: trunk/src/target/AR6kSDK.build_sw.18/include/AR6001/AR6K_version.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/AR6001/AR6K_version.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/AR6001/AR6K_version.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,36 @@
+#define __VER_MAJOR_ 2
+#define __VER_MINOR_ 0 
+#define __VER_PATCH_ 0
+
+  
+/* 
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ * The makear6ksdk script (used for release builds) modifies the following line. 
+ */
+#define __BUILD_NUMBER_ 18
+
+
+/* Format of the version number. */
+#define VER_MAJOR_BIT_OFFSET		28
+#define VER_MINOR_BIT_OFFSET		24
+#define VER_PATCH_BIT_OFFSET		16
+#define VER_BUILD_NUM_BIT_OFFSET	0
+
+
+/* 
+ * The version has the following format:
+ * Bits 28-31: Major version
+ * Bits 24-27: Minor version
+ * Bits 16-23: Patch version
+ * Bits 0-15:  Build number (automatically generated during build process ) 
+ * E.g. Build 1.1.3.7 would be represented as 0x11030007.
+ *  
+ * DO NOT split the following macro into multiple lines as this may confuse the build scripts. 
+ */
+#define AR6K_SW_VERSION 	( ( __VER_MAJOR_ << VER_MAJOR_BIT_OFFSET ) + ( __VER_MINOR_ << VER_MINOR_BIT_OFFSET ) + ( __VER_PATCH_ << VER_PATCH_BIT_OFFSET ) + ( __BUILD_NUMBER_ << VER_BUILD_NUM_BIT_OFFSET ) )
+
+

Added: trunk/src/target/AR6kSDK.build_sw.18/include/AR6001/AR6K_version.h.NEW
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/AR6001/AR6K_version.h.NEW	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/AR6001/AR6K_version.h.NEW	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,36 @@
+#define __VER_MAJOR_ 2
+#define __VER_MINOR_ 0 
+#define __VER_PATCH_ 0
+
+  
+/* 
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ * The makear6ksdk script (used for release builds) modifies the following line. 
+ */
+#define __BUILD_NUMBER_ 18
+
+
+/* Format of the version number. */
+#define VER_MAJOR_BIT_OFFSET		28
+#define VER_MINOR_BIT_OFFSET		24
+#define VER_PATCH_BIT_OFFSET		16
+#define VER_BUILD_NUM_BIT_OFFSET	0
+
+
+/* 
+ * The version has the following format:
+ * Bits 28-31: Major version
+ * Bits 24-27: Minor version
+ * Bits 16-23: Patch version
+ * Bits 0-15:  Build number (automatically generated during build process ) 
+ * E.g. Build 1.1.3.7 would be represented as 0x11030007.
+ *  
+ * DO NOT split the following macro into multiple lines as this may confuse the build scripts. 
+ */
+#define AR6K_SW_VERSION 	( ( __VER_MAJOR_ << VER_MAJOR_BIT_OFFSET ) + ( __VER_MINOR_ << VER_MINOR_BIT_OFFSET ) + ( __VER_PATCH_ << VER_PATCH_BIT_OFFSET ) + ( __BUILD_NUMBER_ << VER_BUILD_NUM_BIT_OFFSET ) )
+
+

Added: trunk/src/target/AR6kSDK.build_sw.18/include/AR6Khwreg.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/AR6Khwreg.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/AR6Khwreg.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,147 @@
+/*
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ * This file contains the definitions for AR6001 registers
+ * that may be directly manipulated by Host software.
+ */
+
+#ifndef __AR6KHWREG_H__
+#define __AR6KHWREG_H__
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/* Host registers */
+#define HOST_INT_STATUS_ADDRESS                  0x00000400
+#define CPU_INT_STATUS_ADDRESS                   0x00000401
+#define ERROR_INT_STATUS_ADDRESS                 0x00000402
+#define INT_STATUS_ENABLE_ADDRESS                0x00000418
+#define CPU_INT_STATUS_ENABLE_ADDRESS            0x00000419
+#define COUNT_ADDRESS                            0x00000420
+#define COUNT_DEC_ADDRESS                        0x00000440
+#define WINDOW_DATA_ADDRESS                      0x00000474
+#define WINDOW_WRITE_ADDR_ADDRESS                0x00000478
+#define WINDOW_READ_ADDR_ADDRESS                 0x0000047c
+
+/* Target addresses */
+#define RESET_CONTROL_ADDRESS                    0x0c000000
+#define MC_REMAP_VALID_ADDRESS                   0x0c004080
+#define MC_REMAP_SIZE_ADDRESS                    0x0c004100
+#define MC_REMAP_COMPARE_ADDRESS                 0x0c004180
+#define MC_REMAP_TARGET_ADDRESS                  0x0c004200
+#define LOCAL_COUNT_ADDRESS                      0x0c014080
+#define LOCAL_SCRATCH_ADDRESS                    0x0c0140c0
+
+
+#define INT_STATUS_ENABLE_ERROR_MSB              7
+#define INT_STATUS_ENABLE_ERROR_LSB              7
+#define INT_STATUS_ENABLE_ERROR_MASK             0x00000080
+#define INT_STATUS_ENABLE_ERROR_GET(x)           (((x) & INT_STATUS_ENABLE_ERROR_MASK) >> INT_STATUS_ENABLE_ERROR_LSB)
+#define INT_STATUS_ENABLE_ERROR_SET(x)           (((x) << INT_STATUS_ENABLE_ERROR_LSB) & INT_STATUS_ENABLE_ERROR_MASK)
+
+#define INT_STATUS_ENABLE_CPU_MSB                6
+#define INT_STATUS_ENABLE_CPU_LSB                6
+#define INT_STATUS_ENABLE_CPU_MASK               0x00000040
+#define INT_STATUS_ENABLE_CPU_GET(x)             (((x) & INT_STATUS_ENABLE_CPU_MASK) >> INT_STATUS_ENABLE_CPU_LSB)
+#define INT_STATUS_ENABLE_CPU_SET(x)             (((x) << INT_STATUS_ENABLE_CPU_LSB) & INT_STATUS_ENABLE_CPU_MASK)
+
+#define INT_STATUS_ENABLE_COUNTER_MSB            4
+#define INT_STATUS_ENABLE_COUNTER_LSB            4
+#define INT_STATUS_ENABLE_COUNTER_MASK           0x00000010
+#define INT_STATUS_ENABLE_COUNTER_GET(x)         (((x) & INT_STATUS_ENABLE_COUNTER_MASK) >> INT_STATUS_ENABLE_COUNTER_LSB)
+#define INT_STATUS_ENABLE_COUNTER_SET(x)         (((x) << INT_STATUS_ENABLE_COUNTER_LSB) & INT_STATUS_ENABLE_COUNTER_MASK)
+
+#define INT_STATUS_ENABLE_MBOX_DATA_MSB          3
+#define INT_STATUS_ENABLE_MBOX_DATA_LSB          0
+#define INT_STATUS_ENABLE_MBOX_DATA_MASK         0x0000000f
+#define INT_STATUS_ENABLE_MBOX_DATA_GET(x)       (((x) & INT_STATUS_ENABLE_MBOX_DATA_MASK) >> INT_STATUS_ENABLE_MBOX_DATA_LSB)
+#define INT_STATUS_ENABLE_MBOX_DATA_SET(x)       (((x) << INT_STATUS_ENABLE_MBOX_DATA_LSB) & INT_STATUS_ENABLE_MBOX_DATA_MASK)
+
+#define ERROR_STATUS_ENABLE_RX_UNDERFLOW_MSB     1
+#define ERROR_STATUS_ENABLE_RX_UNDERFLOW_LSB     1
+#define ERROR_STATUS_ENABLE_RX_UNDERFLOW_MASK    0x00000002
+#define ERROR_STATUS_ENABLE_RX_UNDERFLOW_GET(x)  (((x) & ERROR_STATUS_ENABLE_RX_UNDERFLOW_MASK) >> ERROR_STATUS_ENABLE_RX_UNDERFLOW_LSB)
+#define ERROR_STATUS_ENABLE_RX_UNDERFLOW_SET(x)  (((x) << ERROR_STATUS_ENABLE_RX_UNDERFLOW_LSB) & ERROR_STATUS_ENABLE_RX_UNDERFLOW_MASK)
+
+#define ERROR_STATUS_ENABLE_TX_OVERFLOW_MSB      0
+#define ERROR_STATUS_ENABLE_TX_OVERFLOW_LSB      0
+#define ERROR_STATUS_ENABLE_TX_OVERFLOW_MASK     0x00000001
+#define ERROR_STATUS_ENABLE_TX_OVERFLOW_GET(x)   (((x) & ERROR_STATUS_ENABLE_TX_OVERFLOW_MASK) >> ERROR_STATUS_ENABLE_TX_OVERFLOW_LSB)
+#define ERROR_STATUS_ENABLE_TX_OVERFLOW_SET(x)   (((x) << ERROR_STATUS_ENABLE_TX_OVERFLOW_LSB) & ERROR_STATUS_ENABLE_TX_OVERFLOW_MASK)
+
+
+#define CPU_INT_STATUS_ENABLE_BIT_MSB            7
+#define CPU_INT_STATUS_ENABLE_BIT_LSB            0
+#define CPU_INT_STATUS_ENABLE_BIT_MASK           0x000000ff
+#define CPU_INT_STATUS_ENABLE_BIT_GET(x)         (((x) & CPU_INT_STATUS_ENABLE_BIT_MASK) >> CPU_INT_STATUS_ENABLE_BIT_LSB)
+#define CPU_INT_STATUS_ENABLE_BIT_SET(x)         (((x) << CPU_INT_STATUS_ENABLE_BIT_LSB) & CPU_INT_STATUS_ENABLE_BIT_MASK)
+
+#define COUNTER_INT_STATUS_ENABLE_BIT_MSB        7
+#define COUNTER_INT_STATUS_ENABLE_BIT_LSB        0
+#define COUNTER_INT_STATUS_ENABLE_BIT_MASK       0x000000ff
+#define COUNTER_INT_STATUS_ENABLE_BIT_GET(x)     (((x) & COUNTER_INT_STATUS_ENABLE_BIT_MASK) >> COUNTER_INT_STATUS_ENABLE_BIT_LSB)
+#define COUNTER_INT_STATUS_ENABLE_BIT_SET(x)     (((x) << COUNTER_INT_STATUS_ENABLE_BIT_LSB) & COUNTER_INT_STATUS_ENABLE_BIT_MASK)
+
+#define ERROR_INT_STATUS_WAKEUP_MSB              2
+#define ERROR_INT_STATUS_WAKEUP_LSB              2
+#define ERROR_INT_STATUS_WAKEUP_MASK             0x00000004
+#define ERROR_INT_STATUS_WAKEUP_GET(x)           (((x) & ERROR_INT_STATUS_WAKEUP_MASK) >> ERROR_INT_STATUS_WAKEUP_LSB)
+#define ERROR_INT_STATUS_WAKEUP_SET(x)           (((x) << ERROR_INT_STATUS_WAKEUP_LSB) & ERROR_INT_STATUS_WAKEUP_MASK)
+
+#define ERROR_INT_STATUS_RX_UNDERFLOW_MSB        1
+#define ERROR_INT_STATUS_RX_UNDERFLOW_LSB        1
+#define ERROR_INT_STATUS_RX_UNDERFLOW_MASK       0x00000002
+#define ERROR_INT_STATUS_RX_UNDERFLOW_GET(x)     (((x) & ERROR_INT_STATUS_RX_UNDERFLOW_MASK) >> ERROR_INT_STATUS_RX_UNDERFLOW_LSB)
+#define ERROR_INT_STATUS_RX_UNDERFLOW_SET(x)     (((x) << ERROR_INT_STATUS_RX_UNDERFLOW_LSB) & ERROR_INT_STATUS_RX_UNDERFLOW_MASK)
+
+#define ERROR_INT_STATUS_TX_OVERFLOW_MSB         0
+#define ERROR_INT_STATUS_TX_OVERFLOW_LSB         0
+#define ERROR_INT_STATUS_TX_OVERFLOW_MASK        0x00000001
+#define ERROR_INT_STATUS_TX_OVERFLOW_GET(x)      (((x) & ERROR_INT_STATUS_TX_OVERFLOW_MASK) >> ERROR_INT_STATUS_TX_OVERFLOW_LSB)
+#define ERROR_INT_STATUS_TX_OVERFLOW_SET(x)      (((x) << ERROR_INT_STATUS_TX_OVERFLOW_LSB) & ERROR_INT_STATUS_TX_OVERFLOW_MASK)
+
+#define HOST_INT_STATUS_ERROR_MSB                7
+#define HOST_INT_STATUS_ERROR_LSB                7
+#define HOST_INT_STATUS_ERROR_MASK               0x00000080
+#define HOST_INT_STATUS_ERROR_GET(x)             (((x) & HOST_INT_STATUS_ERROR_MASK) >> HOST_INT_STATUS_ERROR_LSB)
+#define HOST_INT_STATUS_ERROR_SET(x)             (((x) << HOST_INT_STATUS_ERROR_LSB) & HOST_INT_STATUS_ERROR_MASK)
+
+#define HOST_INT_STATUS_CPU_MSB                  6
+#define HOST_INT_STATUS_CPU_LSB                  6
+#define HOST_INT_STATUS_CPU_MASK                 0x00000040
+#define HOST_INT_STATUS_CPU_GET(x)               (((x) & HOST_INT_STATUS_CPU_MASK) >> HOST_INT_STATUS_CPU_LSB)
+#define HOST_INT_STATUS_CPU_SET(x)               (((x) << HOST_INT_STATUS_CPU_LSB) & HOST_INT_STATUS_CPU_MASK)
+
+#define HOST_INT_STATUS_COUNTER_MSB              4
+#define HOST_INT_STATUS_COUNTER_LSB              4
+#define HOST_INT_STATUS_COUNTER_MASK             0x00000010
+#define HOST_INT_STATUS_COUNTER_GET(x)           (((x) & HOST_INT_STATUS_COUNTER_MASK) >> HOST_INT_STATUS_COUNTER_LSB)
+#define HOST_INT_STATUS_COUNTER_SET(x)           (((x) << HOST_INT_STATUS_COUNTER_LSB) & HOST_INT_STATUS_COUNTER_MASK)
+
+#define RESET_CONTROL_WARM_RST_MSB               7
+#define RESET_CONTROL_WARM_RST_LSB               7
+#define RESET_CONTROL_WARM_RST_MASK              0x00000080
+#define RESET_CONTROL_WARM_RST_GET(x)            (((x) & RESET_CONTROL_WARM_RST_MASK) >> RESET_CONTROL_WARM_RST_LSB)
+#define RESET_CONTROL_WARM_RST_SET(x)            (((x) << RESET_CONTROL_WARM_RST_LSB) & RESET_CONTROL_WARM_RST_MASK)
+
+#define RESET_CONTROL_COLD_RST_MSB               8
+#define RESET_CONTROL_COLD_RST_LSB               8
+#define RESET_CONTROL_COLD_RST_MASK              0x00000100
+#define RESET_CONTROL_COLD_RST_GET(x)            (((x) & RESET_CONTROL_COLD_RST_MASK) >> RESET_CONTROL_COLD_RST_LSB)
+#define RESET_CONTROL_COLD_RST_SET(x)            (((x) << RESET_CONTROL_COLD_RST_LSB) & RESET_CONTROL_COLD_RST_MASK)
+
+#define RESET_CAUSE_LAST_MSB                     2
+#define RESET_CAUSE_LAST_LSB                     0
+#define RESET_CAUSE_LAST_MASK                    0x00000007
+#define RESET_CAUSE_LAST_GET(x)                  (((x) & RESET_CAUSE_LAST_MASK) >> RESET_CAUSE_LAST_LSB)
+#define RESET_CAUSE_LAST_SET(x)                  (((x) << RESET_CAUSE_LAST_LSB) & RESET_CAUSE_LAST_MASK)
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* __AR6KHWREG_H__ */

Added: trunk/src/target/AR6kSDK.build_sw.18/include/athdefs.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/athdefs.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/athdefs.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,85 @@
+#ifndef __ATHDEFS_H__
+#define __ATHDEFS_H__
+
+/*
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ * This file contains definitions that may be used across both
+ * Host and Target software.  Nothing here is module-dependent
+ * or platform-dependent.
+ */
+
+/*
+ * Generic error codes that can be used by hw, sta, ap, sim, dk
+ * and any other environments. Since these are enums, feel free to
+ * add any more codes that you need.
+ */
+
+typedef enum {
+    A_ERROR = -1,               /* Generic error return */
+    A_OK = 0,                   /* success */
+                                /* Following values start at 1 */
+    A_DEVICE_NOT_FOUND,         /* not able to find PCI device */
+    A_NO_MEMORY,                /* not able to allocate memory, not available */
+    A_MEMORY_NOT_AVAIL,         /* memory region is not free for mapping */
+    A_NO_FREE_DESC,             /* no free descriptors available */
+    A_BAD_ADDRESS,              /* address does not match descriptor */
+    A_WIN_DRIVER_ERROR,         /* used in NT_HW version, if problem at init */
+    A_REGS_NOT_MAPPED,          /* registers not correctly mapped */
+    A_EPERM,                    /* Not superuser */
+    A_EACCES,                   /* Access denied */
+    A_ENOENT,                   /* No such entry, search failed, etc. */
+    A_EEXIST,                   /* The object already exists (can't create) */
+    A_EFAULT,                   /* Bad address fault */
+    A_EBUSY,                    /* Object is busy */
+    A_EINVAL,                   /* Invalid parameter */
+    A_EMSGSIZE,                 /* Inappropriate message buffer length */
+    A_ECANCELED,                /* Operation canceled */
+    A_ENOTSUP,                  /* Operation not supported */
+    A_ECOMM,                    /* Communication error on send */
+    A_EPROTO,                   /* Protocol error */
+    A_ENODEV,                   /* No such device */
+    A_EDEVNOTUP,                /* device is not UP */
+    A_NO_RESOURCE,              /* No resources for requested operation */
+    A_HARDWARE,                 /* Hardware failure */
+    A_PENDING,                  /* Asynchronous routine; will send up results la
+ter (typically in callback) */
+    A_EBADCHANNEL,              /* The channel cannot be used */
+    A_DECRYPT_ERROR,            /* Decryption error */
+    A_PHY_ERROR,                /* RX PHY error */
+    A_CONSUMED                  /* Object was consumed */
+} A_STATUS;
+
+#define A_SUCCESS(x)        (x == A_OK)
+#define A_FAILED(x)         (!A_SUCCESS(x))
+
+#ifndef TRUE
+#define TRUE 1
+#endif
+
+#ifndef FALSE
+#define FALSE 0
+#endif
+
+/*
+ * The following definition is WLAN specific definition
+ */
+typedef enum {
+    MODE_11A = 0,   /* 11a Mode */
+    MODE_11G = 1,   /* 11g + 11b Mode */
+    MODE_11B = 2,   /* 11b Mode */
+    MODE_11GONLY = 3, /* 11g only Mode */
+    MODE_UNKNOWN = 4,
+    MODE_MAX = 4
+} WLAN_PHY_MODE;
+
+typedef enum {
+    WLAN_11A_CAPABILITY   = 1,
+    WLAN_11G_CAPABILITY   = 2,
+    WLAN_11AG_CAPABILITY  = 3,
+}WLAN_CAPABILITY;
+
+#endif /* __ATHDEFS_H__ */

Added: trunk/src/target/AR6kSDK.build_sw.18/include/bmi_msg.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/bmi_msg.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/bmi_msg.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,186 @@
+#ifndef __BMI_MSG_H__
+#define __BMI_MSG_H__
+
+/*
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ * Bootloader Messaging Interface (BMI)
+ *
+ * BMI is a very simple messaging interface used during initialization
+ * to read memory, write memory, execute code, and to define an
+ * application entry PC.
+ *
+ * It is used to download an application to AR6K, to provide
+ * patches to code that is already resident on AR6K, and generally
+ * to examine and modify state.  The Host has an opportunity to use
+ * BMI only once during bootup.  Once the Host issues a BMI_DONE
+ * command, this opportunity ends.
+ *
+ * The Host writes BMI requests to mailbox0, and reads BMI responses
+ * from mailbox0.   BMI requests all begin with a command
+ * (see below for specific commands), and are followed by
+ * command-specific data.
+ *
+ * Flow control:
+ * The Host can only issue a command once the Target gives it a
+ * "BMI Command Credit", using AR6K Counter #4.  As soon as the
+ * Target has completed a command, it issues another BMI Command
+ * Credit (so the Host can issue the next command).
+ *
+ * BMI handles all required Target-side cache flushing.
+ */
+
+
+/* Maximum data size used for BMI transfers */
+#define BMI_DATASZ_MAX                     32
+
+/* BMI Commands */
+
+#define BMI_NO_COMMAND                      0
+
+#define BMI_DONE                            1
+        /*
+         * Semantics: Host is done using BMI
+         * Request format:
+         *    A_UINT32      command (BMI_DONE)
+         * Response format: none
+         */
+
+#define BMI_READ_MEMORY                     2
+        /*
+         * Semantics: Host reads AR6K memory
+         * Request format:
+         *    A_UINT32      command (BMI_READ_MEMORY)
+         *    A_UINT32      address
+         *    A_UINT32      length, at most BMI_DATASZ_MAX
+         * Response format:
+         *    A_UINT8       data[length]
+         */
+
+#define BMI_WRITE_MEMORY                    3
+        /*
+         * Semantics: Host writes AR6K memory
+         * Request format:
+         *    A_UINT32       command (BMI_WRITE_MEMORY)
+         *    A_UINT32      address
+         *    A_UINT32      length, at most BMI_DATASZ_MAX
+         *    A_UINT8       data[length]
+         * Response format: none
+         */
+
+#define BMI_EXECUTE                         4
+        /*
+         * Semantics: Causes AR6K to execute code
+         * Request format:
+         *    A_UINT32      command (BMI_EXECUTE)
+         *    A_UINT32      address
+         *    A_UINT32      parameter
+         * Response format:
+         *    A_UINT32      return value
+         */
+
+#define BMI_SET_APP_START                   5
+        /*
+         * Semantics: Set Target application starting address
+         * Request format:
+         *    A_UINT32      command (BMI_SET_APP_START)
+         *    A_UINT32      address
+         * Response format: none
+         */
+
+#define BMI_READ_SOC_REGISTER               6
+        /*
+         * Semantics: Read a 32-bit Target SOC register.
+         * Request format:
+         *    A_UINT32      command (BMI_READ_REGISTER)
+         *    A_UINT32      address
+         * Response format: 
+         *    A_UINT32      value
+         */
+
+#define BMI_WRITE_SOC_REGISTER              7
+        /*
+         * Semantics: Write a 32-bit Target SOC register.
+         * Request format:
+         *    A_UINT32      command (BMI_WRITE_REGISTER)
+         *    A_UINT32      address
+         *    A_UINT32      value
+         *
+         * Response format: none
+         */
+
+#define BMI_GET_TARGET_ID                  8
+#define BMI_GET_TARGET_INFO                8
+        /*
+         * Semantics: Fetch the 4-byte Target information
+         * Request format:
+         *    A_UINT32      command (BMI_GET_TARGET_ID/INFO)
+         * Response format1 (old firmware):
+         *    A_UINT32      TargetVersionID
+         * Response format2 (newer firmware):
+         *    A_UINT32      TARGET_VERSION_SENTINAL
+         *    struct bmi_target_info;
+         */
+
+struct bmi_target_info {
+    A_UINT32 target_info_byte_count; /* size of this structure */
+    A_UINT32 target_ver;             /* Target Version ID */
+    A_UINT32 target_type;            /* Target type */
+};
+#define TARGET_VERSION_SENTINAL 0xffffffff
+#define TARGET_TYPE_AR6001 1
+#define TARGET_TYPE_AR6002 2
+
+
+#define BMI_ROMPATCH_INSTALL               9
+        /*
+         * Semantics: Install a ROM Patch.
+         * Request format:
+         *    A_UINT32      command (BMI_ROMPATCH_INSTALL)
+         *    A_UINT32      Target ROM Address
+         *    A_UINT32      Target RAM Address
+         *    A_UINT32      Size, in bytes
+         *    A_UINT32      Activate? 1-->activate;
+         *                            0-->install but do not activate
+         * Response format:
+         *    A_UINT32      PatchID
+         */
+
+#define BMI_ROMPATCH_UNINSTALL             10
+        /*
+         * Semantics: Uninstall a previously-installed ROM Patch,
+         * automatically deactivating, if necessary.
+         * Request format:
+         *    A_UINT32      command (BMI_ROMPATCH_UNINSTALL)
+         *    A_UINT32      PatchID
+         *
+         * Response format: none
+         */
+
+#define BMI_ROMPATCH_ACTIVATE              11
+        /*
+         * Semantics: Activate a list of previously-installed ROM Patches.
+         * Request format:
+         *    A_UINT32      command (BMI_ROMPATCH_ACTIVATE)
+         *    A_UINT32      rompatch_count
+         *    A_UINT32      PatchID[rompatch_count]
+         *
+         * Response format: none
+         */
+
+#define BMI_ROMPATCH_DEACTIVATE            12
+        /*
+         * Semantics: Deactivate a list of active ROM Patches.
+         * Request format:
+         *    A_UINT32      command (BMI_ROMPATCH_DEACTIVATE)
+         *    A_UINT32      rompatch_count
+         *    A_UINT32      PatchID[rompatch_count]
+         *
+         * Response format: none
+         */
+
+
+#endif /* __BMI_MSG_H__ */

Added: trunk/src/target/AR6kSDK.build_sw.18/include/dbglog.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/dbglog.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/dbglog.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,107 @@
+/*
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ * This file contains the definitions and data structures associated with
+ * the log based debug mechanism.
+ *
+ */
+
+#ifndef _DBGLOG_H_
+#define _DBGLOG_H_
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+#define DBGLOG_TIMESTAMP_OFFSET          0
+#define DBGLOG_TIMESTAMP_MASK            0x0000FFFF /* Bit 0-15. Contains bit
+                                                       8-23 of the LF0 timer */
+#define DBGLOG_DBGID_OFFSET              16
+#define DBGLOG_DBGID_MASK                0x03FF0000 /* Bit 16-25 */
+#define DBGLOG_DBGID_NUM_MAX             256 /* Upper limit is width of mask */
+
+#define DBGLOG_MODULEID_OFFSET           26
+#define DBGLOG_MODULEID_MASK             0x3C000000 /* Bit 26-29 */
+#define DBGLOG_MODULEID_NUM_MAX          16 /* Upper limit is width of mask */
+
+/*
+ * Please ensure that the definition of any new module intrduced is captured
+ * between the DBGLOG_MODULEID_START and DBGLOG_MODULEID_END defines. The 
+ * structure is required for the parser to correctly pick up the values for
+ * different modules.
+ */
+#define DBGLOG_MODULEID_START
+#define DBGLOG_MODULEID_INF                   0
+#define DBGLOG_MODULEID_WMI                   1
+#define DBGLOG_MODULEID_CSERV                 2
+#define DBGLOG_MODULEID_PM                    3
+#define DBGLOG_MODULEID_TXRX_MGMTBUF          4
+#define DBGLOG_MODULEID_TXRX_TXBUF            5
+#define DBGLOG_MODULEID_TXRX_RXBUF            6
+#define DBGLOG_MODULEID_WOW                   7
+#define DBGLOG_MODULEID_WHAL                  8
+#define DBGLOG_MODULEID_END
+
+#define DBGLOG_NUM_ARGS_OFFSET             30
+#define DBGLOG_NUM_ARGS_MASK               0xC0000000 /* Bit 30-31 */
+#define DBGLOG_NUM_ARGS_MAX                2 /* Upper limit is width of mask */
+
+#define DBGLOG_MODULE_LOG_ENABLE_OFFSET    0
+#define DBGLOG_MODULE_LOG_ENABLE_MASK      0x0000FFFF
+
+#define DBGLOG_REPORTING_ENABLED_OFFSET    16
+#define DBGLOG_REPORTING_ENABLED_MASK      0x00010000
+
+#define DBGLOG_TIMESTAMP_RESOLUTION_OFFSET 17
+#define DBGLOG_TIMESTAMP_RESOLUTION_MASK   0x000E0000
+
+#define DBGLOG_REPORT_SIZE_OFFSET          20
+#define DBGLOG_REPORT_SIZE_MASK            0x3FF00000
+
+#define DBGLOG_LOG_BUFFER_SIZE             1500
+#define DBGLOG_DBGID_DEFINITION_LEN_MAX    64
+
+struct dbglog_buf_s {
+    struct dbglog_buf_s *next;
+    A_INT8              *buffer;
+    A_UINT32             bufsize;
+    A_UINT32             length;
+    A_UINT32             count;
+    A_UINT32             free;
+};
+
+struct dbglog_hdr_s {
+    struct dbglog_buf_s *dbuf;
+    A_UINT32             dropped;
+};
+
+struct dbglog_config_s {
+    A_UINT32                    cfgvalid; /* Mask with valid config bits */
+    union {
+        /* TODO: Take care of endianness */
+        struct {
+            A_UINT32            mmask:16; /* Mask of modules with logging on */
+            A_UINT32            rep:1; /* Reporting enabled or not */
+            A_UINT32            tsr:3; /* Time stamp resolution. Def: 1 ms */
+            A_UINT32            size:10; /* Report size in number of messages */
+            A_UINT32            reserved:2;
+        } dbglog_config;
+
+        A_UINT32                value;
+    } u;
+};
+
+#define cfgmmask                   u.dbglog_config.mmask
+#define cfgrep                     u.dbglog_config.rep
+#define cfgtsr                     u.dbglog_config.tsr
+#define cfgsize                    u.dbglog_config.size
+#define cfgvalue                   u.value
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _DBGLOG_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/include/dbglog_id.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/dbglog_id.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/dbglog_id.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,307 @@
+/*
+ *
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ * This file contains the definitions of the debug identifiers for different
+ * modules.
+ *
+ */
+
+#ifndef _DBGLOG_ID_H_
+#define _DBGLOG_ID_H_
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/* 
+ * The nomenclature for the debug identifiers is MODULE_DESCRIPTION.
+ * Please ensure that the definition of any new debugid introduced is captured
+ * between the <MODULE>_DBGID_DEFINITION_START and 
+ * <MODULE>_DBGID_DEFINITION_END defines. The structure is required for the 
+ * parser to correctly pick up the values for different debug identifiers.
+ */
+
+/* INF debug identifier definitions */
+#define INF_DBGID_DEFINITION_START
+#define INF_ASSERTION_FAILED                          1
+#define INF_TARGET_ID                                 2
+#define INF_DBGID_DEFINITION_END
+
+/* WMI debug identifier definitions */
+#define WMI_DBGID_DEFINITION_START
+#define WMI_CMD_RX_XTND_PKT_TOO_SHORT                 1
+#define WMI_EXTENDED_CMD_NOT_HANDLED                  2
+#define WMI_CMD_RX_PKT_TOO_SHORT                      3
+#define WMI_CALLING_WMI_EXTENSION_FN                  4
+#define WMI_CMD_NOT_HANDLED                           5
+#define WMI_IN_SYNC                                   6
+#define WMI_TARGET_WMI_SYNC_CMD                       7
+#define WMI_SET_SNR_THRESHOLD_PARAMS                  8
+#define WMI_SET_RSSI_THRESHOLD_PARAMS                 9
+#define WMI_SET_LQ_TRESHOLD_PARAMS                   10
+#define WMI_TARGET_CREATE_PSTREAM_CMD                11
+#define WMI_WI_DTM_INUSE                             12
+#define WMI_TARGET_DELETE_PSTREAM_CMD                13
+#define WMI_TARGET_IMPLICIT_DELETE_PSTREAM_CMD       14
+#define WMI_TARGET_GET_BIT_RATE_CMD                  15
+#define WMI_GET_RATE_MASK_CMD_FIX_RATE_MASK_IS       16
+#define WMI_TARGET_GET_AVAILABLE_CHANNELS_CMD        17
+#define WMI_TARGET_GET_TX_PWR_CMD                    18
+#define WMI_FREE_EVBUF_WMIBUF                        19
+#define WMI_FREE_EVBUF_DATABUF                       20
+#define WMI_FREE_EVBUF_BADFLAG                       21
+#define WMI_HTC_RX_ERROR_DATA_PACKET                 22
+#define WMI_HTC_RX_SYNC_PAUSING_FOR_MBOX             23
+#define WMI_INCORRECT_WMI_DATA_HDR_DROPPING_PKT      24
+#define WMI_SENDING_READY_EVENT                      25
+#define WMI_SETPOWER_MDOE_TO_MAXPERF                 26
+#define WMI_SETPOWER_MDOE_TO_REC                     27
+#define WMI_BSSINFO_EVENT_FROM                       28
+#define WMI_TARGET_GET_STATS_CMD                     29
+#define WMI_SENDING_SCAN_COMPLETE_EVENT              30
+#define WMI_SENDING_RSSI_INDB_THRESHOLD_EVENT        31
+#define WMI_SENDING_RSSI_INDBM_THRESHOLD_EVENT       32
+#define WMI_SENDING_LINK_QUALITY_THRESHOLD_EVENT     33
+#define WMI_SENDING_ERROR_REPORT_EVENT               34
+#define WMI_SENDING_CAC_EVENT                        35
+#define WMI_TARGET_GET_ROAM_TABLE_CMD                36
+#define WMI_TARGET_GET_ROAM_DATA_CMD                 37
+#define WMI_SENDING_GPIO_INTR_EVENT                  38
+#define WMI_SENDING_GPIO_ACK_EVENT                   39
+#define WMI_SENDING_GPIO_DATA_EVENT                  40
+#define WMI_CMD_RX                                   41
+#define WMI_CMD_RX_XTND                              42
+#define WMI_EVENT_SEND                               43
+#define WMI_EVENT_SEND_XTND                          44
+#define WMI_DBGID_DEFINITION_END
+
+/* CSERV debug identifier definitions */
+#define CSERV_DBGID_DEFINITION_START
+#define CSERV_BEGIN_SCAN1                             1
+#define CSERV_BEGIN_SCAN2                             2
+#define CSERV_END_SCAN1                               3
+#define CSERV_END_SCAN2                               4
+#define CSERV_CHAN_SCAN_START                         5
+#define CSERV_CHAN_SCAN_STOP                          6
+#define CSERV_CHANNEL_OPPPORTUNITY                    7
+#define CSERV_NC_TIMEOUT                              8
+#define CSERV_BACK_HOME                              10
+#define CSERV_CHMGR_CH_CALLBACK1                     11
+#define CSERV_CHMGR_CH_CALLBACK2                     12
+#define CSERV_CHMGR_CH_CALLBACK3                     13
+#define CSERV_SET_SCAN_PARAMS1                       14
+#define CSERV_SET_SCAN_PARAMS2                       15
+#define CSERV_SET_SCAN_PARAMS3                       16
+#define CSERV_SET_SCAN_PARAMS4                       17
+#define CSERV_ABORT_SCAN                             18
+#define CSERV_NEWSTATE                               19
+#define CSERV_MINCHMGR_OP_END                        20
+#define CSERV_CHMGR_OP_END                           21
+#define CSERV_DISCONNECT_TIMEOUT                     22
+#define CSERV_ROAM_TIMEOUT                           23
+#define CSERV_FORCE_SCAN1                            24
+#define CSERV_FORCE_SCAN2                            25
+#define CSERV_FORCE_SCAN3                            26
+#define CSERV_UTIL_TIMEOUT                           27
+#define CSERV_RSSIPOLLER                             28
+#define CSERV_RETRY_CONNECT_TIMEOUT                  29
+#define CSERV_RSSIINDBMPOLLER                        30
+#define CSERV_BGSCAN_ENABLE                          31
+#define CSERV_BGSCAN_DISABLE                         32
+#define CSERV_WLAN_START_SCAN_CMD1                   33
+#define CSERV_WLAN_START_SCAN_CMD2                   34
+#define CSERV_WLAN_START_SCAN_CMD3                   35
+#define CSERV_START_SCAN_CMD                         36
+#define CSERV_START_FORCE_SCAN                       37
+#define CSERV_NEXT_CHAN                              38
+#define CSERV_SET_REGCODE                            39
+#define CSERV_START_ADHOC                            40
+#define CSERV_ADHOC_AT_HOME                          41
+#define CSERV_OPT_AT_HOME                            42
+#define CSERV_WLAN_CONNECT_CMD                       43
+#define CSERV_WLAN_RECONNECT_CMD                     44
+#define CSERV_WLAN_DISCONNECT_CMD                    45
+#define CSERV_BSS_CHANGE_CHANNEL                     46
+#define CSERV_BEACON_RX                              47
+#define CSERV_KEEPALIVE_CHECK                        48
+#define CSERV_RC_BEGIN_SCAN                          49
+#define CSERV_RC_SCAN_START                          50
+#define CSERV_RC_SCAN_STOP                           51
+#define CSERV_RC_NEXT                                52
+#define CSERV_RC_SCAN_END                            53
+#define CSERV_PROBE_CALLBACK                         54
+#define CSERV_ROAM1                                  55
+#define CSERV_ROAM2                                  56
+#define CSERV_ROAM3                                  57
+#define CSERV_CONNECT_EVENT                          58
+#define CSERV_DISCONNECT_EVENT                       59
+#define CSERV_BMISS_HANDLER1                         60
+#define CSERV_BMISS_HANDLER2                         61
+#define CSERV_BMISS_HANDLER3                         62
+#define CSERV_LOWRSSI_HANDLER                        63
+#define CSERV_WLAN_SET_PMKID_CMD                     64
+#define CSERV_RECONNECT_REQUEST                      65
+#define CSERV_KEYSPLUMBED_EVENT                      66
+#define CSERV_NEW_REG                                67
+#define CSERV_SET_RSSI_THOLD                         68
+#define CSERV_RSSITHRESHOLDCHECK                     69
+#define CSERV_RSSIINDBMTHRESHOLDCHECK                70
+#define CSERV_WLAN_SET_OPT_CMD1                      71
+#define CSERV_WLAN_SET_OPT_CMD2                      72
+#define CSERV_WLAN_SET_OPT_CMD3                      73
+#define CSERV_WLAN_SET_OPT_CMD4                      74
+#define CSERV_SCAN_CONNECT_STOP                      75
+#define CSERV_BMISS_HANDLER4                         76
+#define CSERV_INITIALIZE_TIMER                       77
+#define CSERV_ARM_TIMER                              78
+#define CSERV_DISARM_TIMER                           79
+#define CSERV_UNINITIALIZE_TIMER                     80
+#define CSERV_DISCONNECT_EVENT2                      81
+#define CSERV_SCAN_CONNECT_START                     82
+#define CSERV_BSSINFO_MEMORY_ALLOC_FAILED            83
+#define CSERV_SET_SCAN_PARAMS5                       84
+#define CSERV_DBGID_DEFINITION_END
+    
+/* TXRX debug identifier definitions */
+#define TXRX_TXBUF_DBGID_DEFINITION_START
+#define TXRX_TXBUF_ALLOCATE_BUF                      1
+#define TXRX_TXBUF_QUEUE_BUF_TO_MBOX                 2
+#define TXRX_TXBUF_QUEUE_BUF_TO_TXQ                  3
+#define TXRX_TXBUF_TXQ_DEPTH                         4   
+#define TXRX_TXBUF_IBSS_QUEUE_TO_SFQ                 5
+#define TXRX_TXBUF_IBSS_QUEUE_TO_TXQ_FRM_SFQ         6
+#define TXRX_TXBUF_INITIALIZE_TIMER                  7
+#define TXRX_TXBUF_ARM_TIMER                         8
+#define TXRX_TXBUF_DISARM_TIMER                      9
+#define TXRX_TXBUF_UNINITIALIZE_TIMER                10
+#define TXRX_TXBUF_DBGID_DEFINITION_END
+ 
+#define TXRX_RXBUF_DBGID_DEFINITION_START    
+#define TXRX_RXBUF_ALLOCATE_BUF                      1
+#define TXRX_RXBUF_QUEUE_TO_HOST                     2
+#define TXRX_RXBUF_QUEUE_TO_WLAN                     3
+#define TXRX_RXBUF_ZERO_LEN_BUF                      4
+#define TXRX_RXBUF_QUEUE_TO_HOST_LASTBUF_IN_RXCHAIN  5
+#define TXRX_RXBUF_LASTBUF_IN_RXCHAIN_ZEROBUF        6
+#define TXRX_RXBUF_QUEUE_EMPTY_QUEUE_TO_WLAN         7
+#define TXRX_RXBUF_SEND_TO_RECV_MGMT                 8
+#define TXRX_RXBUF_SEND_TO_IEEE_LAYER                9
+#define TXRX_RXBUF_DBGID_DEFINITION_END
+
+#define TXRX_MGMTBUF_DBGID_DEFINITION_START 
+#define TXRX_MGMTBUF_ALLOCATE_BUF                    1
+#define TXRX_MGMTBUF_ALLOCATE_SM_BUF                 2    
+#define TXRX_MGMTBUF_ALLOCATE_RMBUF                  3
+#define TXRX_MGMTBUF_GET_BUF                         4
+#define TXRX_MGMTBUF_GET_SM_BUF                      5
+#define TXRX_MGMTBUF_QUEUE_BUF_TO_TXQ                6
+#define TXRX_MGMTBUF_REAPED_BUF                      7
+#define TXRX_MGMTBUF_REAPED_SM_BUF                   8
+#define TXRX_MGMTBUF_WAIT_FOR_TXQ_DRAIN              9
+#define TXRX_MGMTBUF_WAIT_FOR_TXQ_SFQ_DRAIN          10
+#define TXRX_MGMTBUF_ENQUEUE_INTO_SFQ                11
+#define TXRX_MGMTBUF_DEQUEUE_FROM_SFQ                12
+#define TXRX_MGMTBUF_PAUSE_TXQ                       13
+#define TXRX_MGMTBUF_RESUME_TXQ                      14
+#define TXRX_MGMTBUF_WAIT_FORTXQ_DRAIN_TIMEOUT       15
+#define TXRX_MGMTBUF_DRAINQ                          16
+#define TXRX_MGMTBUF_INDICATE_Q_DRAINED              17
+#define TXRX_MGMTBUF_DBGID_DEFINITION_END
+
+/* PM (Power Module) debug identifier definitions */
+#define PM_DBGID_DEFINITION_START
+#define PM_INIT                                      1
+#define PM_ENABLE                                    2
+#define PM_SET_STATE                                 3
+#define PM_SET_POWERMODE                             4
+#define PM_CONN_NOTIFY                               5
+#define PM_REF_COUNT_NEGATIVE                        6
+#define PM_APSD_ENABLE                               7
+#define PM_UPDATE_APSD_STATE                         8
+#define PM_CHAN_OP_REQ                               9
+#define PM_SET_MY_BEACON_POLICY                      10
+#define PM_SET_ALL_BEACON_POLICY                     11
+#define PM_SET_PM_PARAMS1                            12
+#define PM_SET_PM_PARAMS2                            13
+#define PM_ADHOC_SET_PM_CAPS_FAIL                    14
+#define PM_ADHOC_UNKNOWN_IBSS_ATTRIB_ID              15
+#define PM_DBGID_DEFINITION_END
+
+/* Wake on Wireless debug identifier definitions */
+#define WOW_DBGID_DEFINITION_START
+#define WOW_INIT                                        1
+#define WOW_GET_CONFIG_DSET                             2   
+#define WOW_NO_CONFIG_DSET                              3
+#define WOW_INVALID_CONFIG_DSET                         4
+#define WOW_USE_DEFAULT_CONFIG                          5
+#define WOW_SETUP_GPIO                                  6
+#define WOW_INIT_DONE                                   7
+#define WOW_SET_GPIO_PIN                                8
+#define WOW_CLEAR_GPIO_PIN                              9
+#define WOW_SET_WOW_MODE_CMD                            10
+#define WOW_SET_HOST_MODE_CMD                           11  
+#define WOW_ADD_WOW_PATTERN_CMD                         12    
+#define WOW_NEW_WOW_PATTERN_AT_INDEX                    13    
+#define WOW_DEL_WOW_PATTERN_CMD                         14    
+#define WOW_LIST_CONTAINS_PATTERNS                      15    
+#define WOW_GET_WOW_LIST_CMD                            16 
+#define WOW_INVALID_FILTER_ID                           17
+#define WOW_INVALID_FILTER_LISTID                       18
+#define WOW_NO_VALID_FILTER_AT_ID                       19
+#define WOW_NO_VALID_LIST_AT_ID                         20
+#define WOW_NUM_PATTERNS_EXCEEDED                       21
+#define WOW_NUM_LISTS_EXCEEDED                          22
+#define WOW_GET_WOW_STATS                               23
+#define WOW_CLEAR_WOW_STATS                             24
+#define WOW_WAKEUP_HOST                                 25
+#define WOW_EVENT_WAKEUP_HOST                           26
+#define WOW_EVENT_DISCARD                               27
+#define WOW_PATTERN_MATCH                               28
+#define WOW_PATTERN_NOT_MATCH                           29
+#define WOW_PATTERN_NOT_MATCH_OFFSET                    30
+#define WOW_DISABLED_HOST_ASLEEP                        31
+#define WOW_ENABLED_HOST_ASLEEP_NO_PATTERNS             32
+#define WOW_ENABLED_HOST_ASLEEP_NO_MATCH_FOUND          33
+#define WOW_DBGID_DEFINITION_END
+
+/* WHAL debug identifier definitions */
+#define WHAL_DBGID_DEFINITION_START
+#define WHAL_ERROR_ANI_CONTROL                      1
+#define WHAL_ERROR_CHIP_TEST1                       2
+#define WHAL_ERROR_CHIP_TEST2                       3
+#define WHAL_ERROR_EEPROM_CHECKSUM                  4
+#define WHAL_ERROR_EEPROM_MACADDR                   5
+#define WHAL_ERROR_INTERRUPT_HIU                    6
+#define WHAL_ERROR_KEYCACHE_RESET                   7
+#define WHAL_ERROR_KEYCACHE_SET                     8 
+#define WHAL_ERROR_KEYCACHE_TYPE                    9
+#define WHAL_ERROR_KEYCACHE_TKIPENTRY              10
+#define WHAL_ERROR_KEYCACHE_WEPLENGTH              11
+#define WHAL_ERROR_PHY_INVALID_CHANNEL             12
+#define WHAL_ERROR_POWER_AWAKE                     13
+#define WHAL_ERROR_POWER_SET                       14
+#define WHAL_ERROR_RECV_STOPDMA                    15
+#define WHAL_ERROR_RECV_STOPPCU                    16
+#define WHAL_ERROR_RESET_CHANNF1                   17
+#define WHAL_ERROR_RESET_CHANNF2                   18
+#define WHAL_ERROR_RESET_PM                        19
+#define WHAL_ERROR_RESET_OFFSETCAL                 20
+#define WHAL_ERROR_RESET_RFGRANT                   21
+#define WHAL_ERROR_RESET_RXFRAME                   22
+#define WHAL_ERROR_RESET_STOPDMA                   23
+#define WHAL_ERROR_RESET_RECOVER                   24
+#define WHAL_ERROR_XMIT_COMPUTE                    25
+#define WHAL_ERROR_XMIT_NOQUEUE                    26
+#define WHAL_ERROR_XMIT_ACTIVEQUEUE                27
+#define WHAL_ERROR_XMIT_BADTYPE                    28
+#define WHAL_DBGID_DEFINITION_END
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _DBGLOG_ID_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/include/dset_internal.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/dset_internal.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/dset_internal.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,39 @@
+/*
+ * Copyright (c) 2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ */
+
+#ifndef __DSET_INTERNAL_H__
+#define __DSET_INTERNAL_H__
+
+/*
+ * Internal dset definitions, common for DataSet layer.
+ */
+
+#define DSET_TYPE_STANDARD      0
+#define DSET_TYPE_BPATCHED      1
+#define DSET_TYPE_COMPRESSED    2
+
+/* Dataset descriptor */
+
+typedef struct dset_descriptor_s {
+  struct dset_descriptor_s  *next;         /* List link. NULL only at the last
+                                              descriptor */
+  A_UINT16                   id;           /* Dset ID */
+  A_UINT16                   size;         /* Dset size. */
+  void                      *DataPtr;      /* Pointer to raw data for standard
+                                              DataSet or pointer to original
+                                              dset_descriptor for patched
+                                              DataSet */
+  A_UINT32                   data_type;    /* DSET_TYPE_*, above */
+
+  void                      *AuxPtr;       /* Additional data that might
+                                              needed for data_type. For
+                                              example, pointer to patch
+                                              Dataset descriptor for BPatch. */
+} dset_descriptor_t;
+
+#endif /* __DSET_INTERNAL_H__ */

Added: trunk/src/target/AR6kSDK.build_sw.18/include/dsetid.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/dsetid.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/dsetid.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,110 @@
+/*
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ */
+
+#ifndef __DSETID_H__
+#define __DSETID_H__
+
+/* Well-known DataSet IDs */
+#define DSETID_UNUSED                     0x00000000
+#define DSETID_BOARD_DATA                 0x00000001 /* Cal and board data */
+#define DSETID_REGDB                      0x00000002 /* Regulatory Database */
+#define DSETID_POWER_CONTROL              0x00000003 /* TX Pwr Lim & Ant Gain */
+#define DSETID_USER_CONFIG                0x00000004 /* User Configuration */
+
+#define DSETID_ANALOG_CONTROL_DATA_START  0x00000005
+#define DSETID_ANALOG_CONTROL_DATA_END    0x00000025
+/*
+ * Get DSETID for various reference clock speeds.
+ * For each speed there are three DataSets that correspond
+ * to the three columns of bank6 data (addr, 11a, 11b/g).
+ * This macro returns the dsetid of the first of those
+ * three DataSets.
+ */
+#define ANALOG_CONTROL_DATA_DSETID(refclk) \
+        (DSETID_ANALOG_CONTROL_DATA_START + 3*refclk)
+
+/*
+ * There are TWO STARTUP_PATCH DataSets.
+ * DSETID_STARTUP_PATCH is historical, and was applied before BMI on
+ * earlier systems.  On AR6002, it is applied after BMI, just like
+ * DSETID_STARTUP_PATCH2.
+ */
+#define DSETID_STARTUP_PATCH              0x00000026
+#define DSETID_GPIO_CONFIG_PATCH          0x00000027
+#define DSETID_WLANREGS                   0x00000028 /* override wlan regs */
+#define DSETID_STARTUP_PATCH2             0x00000029
+
+#define DSETID_WOW_CONFIG                 0x00000090 /* WoW Configuration */
+
+/* Add WHAL_INI_DATA_ID to DSETID_INI_DATA for a specific WHAL INI table. */
+#define DSETID_INI_DATA                   0x00000100
+/* Reserved for WHAL INI Tables: 0x100..0x11f */
+#define DSETID_INI_DATA_END               0x0000011f
+
+#define DSETID_VENDOR_START               0x00010000 /* Vendor-defined DataSets */
+
+#define DSETID_INDEX_END                  0xfffffffe /* Reserved to indicate the
+                                                        end of a memory-based
+                                                        DataSet Index */
+#define DSETID_INDEX_FREE                 0xffffffff /* An unused index entry */
+
+/* 
+ * PATCH DataSet format:
+ * A list of patches, terminated by a patch with
+ * address=PATCH_END.
+ *
+ * This allows for patches to be stored in flash.
+ */
+struct patch_s {
+    A_UINT32 *address;
+    A_UINT32  data;
+};
+
+/*
+ * Skip some patches.  Can be used to erase a single patch in a
+ * patch DataSet without having to re-write the DataSet.  May
+ * also be used to embed information for use by subsequent
+ * patch code.  The "data" in a PATCH_SKIP tells how many
+ * bytes of length "patch_s" to skip.
+ */
+#define PATCH_SKIP      ((A_UINT32 *)0x00000000)
+
+/*
+ * Execute code at the address specified by "data".
+ * The address of the patch structure is passed as
+ * the one parameter.
+ */
+#define PATCH_CODE_ABS  ((A_UINT32 *)0x00000001)
+
+/*
+ * Same as PATCH_CODE_ABS, but treat "data" as an
+ * offset from the start of the patch word.
+ */
+#define PATCH_CODE_REL  ((A_UINT32 *)0x00000002)
+
+/* Mark the end of this patch DataSet. */
+#define PATCH_END       ((A_UINT32 *)0xffffffff)
+
+/*
+ * A DataSet which contains a Binary Patch to some other DataSet
+ * uses the original dsetid with the DSETID_BPATCH_FLAG bit set.
+ * Such a BPatch DataSet consists of BPatch metadata followed by
+ * the bdiff bytes.  BPatch metadata consists of a single 32-bit
+ * word that contains the size of the BPatched final image.
+ *
+ * To create a suitable bdiff DataSet, use bdiff in host/tools/bdiff
+ * to create "diffs":
+ *  bdiff -q -O -nooldmd5 -nonewmd5 -d ORIGfile NEWfile diffs
+ * Then add BPatch metadata to the start of "diffs".
+ *
+ * NB: There are some implementation-induced restrictions
+ * on which DataSets can be BPatched.
+ */
+#define DSETID_BPATCH_FLAG                0x80000000
+
+#endif /* __DSETID_H__ */

Added: trunk/src/target/AR6kSDK.build_sw.18/include/gpio.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/gpio.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/gpio.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,34 @@
+/*
+ * Copyright (c) 2005 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ */
+
+#if defined(AR6001)
+#define GPIO_PIN_COUNT 18
+#else
+#define GPIO_PIN_COUNT 18
+#endif
+
+/*
+ * Possible values for WMIX_GPIO_SET_REGISTER_CMDID.
+ * NB: These match hardware order, so that addresses can
+ * easily be computed.
+ */
+#define GPIO_ID_OUT             0x00000000
+#define GPIO_ID_OUT_W1TS        0x00000001
+#define GPIO_ID_OUT_W1TC        0x00000002
+#define GPIO_ID_ENABLE          0x00000003
+#define GPIO_ID_ENABLE_W1TS     0x00000004
+#define GPIO_ID_ENABLE_W1TC     0x00000005
+#define GPIO_ID_IN              0x00000006
+#define GPIO_ID_STATUS          0x00000007
+#define GPIO_ID_STATUS_W1TS     0x00000008
+#define GPIO_ID_STATUS_W1TC     0x00000009
+#define GPIO_ID_PIN0            0x0000000a
+#define GPIO_ID_PIN(n)          (GPIO_ID_PIN0+(n))
+
+#define GPIO_LAST_REGISTER_ID   GPIO_ID_PIN(17)
+#define GPIO_ID_NONE            0xffffffff

Added: trunk/src/target/AR6kSDK.build_sw.18/include/htc.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/htc.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/htc.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,190 @@
+/*
+ * Copyright (c) 2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ */
+
+
+#ifndef __HTC_H__
+#define __HTC_H__
+
+#ifndef ATH_TARGET
+#include "athstartpack.h"
+#endif
+
+#define A_OFFSETOF(type,field) (int)(&(((type *)NULL)->field))
+
+#define ASSEMBLE_UNALIGNED_UINT16(p,highbyte,lowbyte) \
+        (((A_UINT16)(((A_UINT8 *)(p))[(highbyte)])) << 8 | (A_UINT16)(((A_UINT8 *)(p))[(lowbyte)]))
+
+/* alignment independent macros (little-endian) to fetch UINT16s or UINT8s from a
+ * structure using only the type and field name.
+ * Use these macros if there is the potential for unaligned buffer accesses. */
+#define A_GET_UINT16_FIELD(p,type,field) \
+    ASSEMBLE_UNALIGNED_UINT16(p,\
+                              A_OFFSETOF(type,field) + 1, \
+                              A_OFFSETOF(type,field))
+
+#define A_SET_UINT16_FIELD(p,type,field,value) \
+{                                              \
+    ((A_UINT8 *)(p))[A_OFFSETOF(type,field)] = (A_UINT8)(value);        \
+    ((A_UINT8 *)(p))[A_OFFSETOF(type,field) + 1] = (A_UINT8)((value) >> 8); \
+}
+
+#define A_GET_UINT8_FIELD(p,type,field) \
+            ((A_UINT8 *)(p))[A_OFFSETOF(type,field)]
+
+#define A_SET_UINT8_FIELD(p,type,field,value) \
+    ((A_UINT8 *)(p))[A_OFFSETOF(type,field)] = (value)
+
+/****** DANGER DANGER ***************
+ *
+ *   The frame header length and message formats defined herein were
+ *   selected to accommodate optimal alignment for target processing.  This reduces code
+ *   size and improves performance.
+ *
+ *   Any changes to the header length may alter the alignment and cause exceptions
+ *   on the target. When adding to the message structures insure that fields are
+ *   properly aligned.
+ *
+ */
+
+/* HTC frame header */
+typedef PREPACK struct _HTC_FRAME_HDR{
+        /* do not remove or re-arrange these fields, these are minimally required
+         * to take advantage of 4-byte lookaheads in some hardware implementations */
+    A_UINT8   EndpointID;
+    A_UINT8   Flags;
+    A_UINT16  PayloadLen;       /* length of data (including trailer) that follows the header */
+
+    /***** end of 4-byte lookahead ****/
+
+    A_UINT8   ControlBytes[2];
+
+    /* message payload starts after the header */
+
+} POSTPACK HTC_FRAME_HDR;
+
+/* frame header flags */
+#define HTC_FLAGS_NEED_CREDIT_UPDATE (1 << 0)
+#define HTC_FLAGS_RECV_TRAILER       (1 << 1)
+
+
+#define HTC_HDR_LENGTH  (sizeof(HTC_FRAME_HDR))
+#define HTC_MAX_TRAILER_LENGTH   255
+#define HTC_MAX_PAYLOAD_LENGTH   (2048 - sizeof(HTC_FRAME_HDR))
+
+/* HTC control message IDs */
+typedef enum {
+    HTC_MSG_READY_ID = 1,
+    HTC_MSG_CONNECT_SERVICE_ID = 2,
+    HTC_MSG_CONNECT_SERVICE_RESPONSE_ID = 3,
+    HTC_MSG_SETUP_COMPLETE_ID = 4,
+} HTC_MSG_IDS;
+
+#define HTC_MAX_CONTROL_MESSAGE_LENGTH  256
+
+/* base message ID header */
+typedef PREPACK struct {
+    A_UINT16 MessageID;
+} POSTPACK HTC_UNKNOWN_MSG;
+
+/* HTC ready message
+ * direction : target-to-host  */
+typedef PREPACK struct {
+    A_UINT16  MessageID;    /* ID */
+    A_UINT16  CreditCount;  /* number of credits the target can offer */
+    A_UINT16  CreditSize;   /* size of each credit */
+    A_UINT8   MaxEndpoints; /* maximum number of endpoints the target has resources for */
+    A_UINT8   _Pad1;
+} POSTPACK HTC_READY_MSG;
+
+#define HTC_SERVICE_META_DATA_MAX_LENGTH 128
+
+/* connect service
+ * direction : host-to-target */
+typedef PREPACK struct {
+    A_UINT16  MessageID;
+    A_UINT16  ServiceID;           /* service ID of the service to connect to */
+    A_UINT16  ConnectionFlags;     /* connection flags */
+
+#define HTC_CONNECT_FLAGS_REDUCE_CREDIT_DRIBBLE (1 << 2)  /* reduce credit dribbling when
+                                                             the host needs credits */
+#define HTC_CONNECT_FLAGS_THRESHOLD_LEVEL_MASK             (0x3)
+#define HTC_CONNECT_FLAGS_THRESHOLD_LEVEL_ONE_FOURTH        0x0
+#define HTC_CONNECT_FLAGS_THRESHOLD_LEVEL_ONE_HALF          0x1
+#define HTC_CONNECT_FLAGS_THRESHOLD_LEVEL_THREE_FOURTHS     0x2
+#define HTC_CONNECT_FLAGS_THRESHOLD_LEVEL_UNITY             0x3
+
+    A_UINT8   ServiceMetaLength;   /* length of meta data that follows */
+    A_UINT8   _Pad1;
+
+    /* service-specific meta data starts after the header */
+
+} POSTPACK HTC_CONNECT_SERVICE_MSG;
+
+/* connect response
+ * direction : target-to-host */
+typedef PREPACK struct {
+    A_UINT16  MessageID;
+    A_UINT16  ServiceID;            /* service ID that the connection request was made */
+    A_UINT8   Status;               /* service connection status */
+    A_UINT8   EndpointID;           /* assigned endpoint ID */
+    A_UINT16  MaxMsgSize;           /* maximum expected message size on this endpoint */
+    A_UINT8   ServiceMetaLength;    /* length of meta data that follows */
+    A_UINT8   _Pad1;
+
+    /* service-specific meta data starts after the header */
+
+} POSTPACK HTC_CONNECT_SERVICE_RESPONSE_MSG;
+
+typedef PREPACK struct {
+    A_UINT16  MessageID;
+    /* currently, no other fields */
+} POSTPACK HTC_SETUP_COMPLETE_MSG;
+
+
+/* connect response status codes */
+#define HTC_SERVICE_SUCCESS      0  /* success */
+#define HTC_SERVICE_NOT_FOUND    1  /* service could not be found */
+#define HTC_SERVICE_FAILED       2  /* specific service failed the connect */
+#define HTC_SERVICE_NO_RESOURCES 3  /* no resources (i.e. no more endpoints) */
+#define HTC_SERVICE_NO_MORE_EP   4  /* specific service is not allowing any more
+                                       endpoints */
+
+/* report record IDs */
+typedef enum {
+    HTC_RECORD_NULL  = 0,
+    HTC_RECORD_CREDITS   = 1,
+    HTC_RECORD_LOOKAHEAD = 2,
+} HTC_RPT_IDS;
+
+typedef PREPACK struct {
+    A_UINT8 RecordID;     /* Record ID */
+    A_UINT8 Length;       /* Length of record */
+} POSTPACK HTC_RECORD_HDR;
+
+typedef PREPACK struct {
+    A_UINT8 EndpointID;     /* Endpoint that owns these credits */
+    A_UINT8 Credits;        /* credits to report since last report */
+} POSTPACK HTC_CREDIT_REPORT;
+
+typedef PREPACK struct {    
+    A_UINT8 PreValid;         /* pre valid guard */
+    A_UINT8 LookAhead[4];     /* 4 byte lookahead */
+    A_UINT8 PostValid;        /* post valid guard */
+
+   /* NOTE: the LookAhead array is guarded by a PreValid and Post Valid guard bytes.
+    * The PreValid bytes must equal the inverse of the PostValid byte */
+
+} POSTPACK HTC_LOOKAHEAD_REPORT;
+
+#ifndef ATH_TARGET
+#include "athendpack.h"
+#endif
+
+
+#endif /* __HTC_H__ */
+

Added: trunk/src/target/AR6kSDK.build_sw.18/include/htc_services.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/htc_services.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/htc_services.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,37 @@
+/*
+ * Copyright (c) 2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ */
+
+#ifndef __HTC_SERVICES_H__
+#define __HTC_SERVICES_H__
+
+/* Current service IDs */
+
+typedef enum {
+    RSVD_SERVICE_GROUP  = 0,
+    WMI_SERVICE_GROUP   = 1, 
+    
+    HTC_TEST_GROUP = 254,
+    HTC_SERVICE_GROUP_LAST = 255
+}HTC_SERVICE_GROUP_IDS;
+
+#define MAKE_SERVICE_ID(group,index) \
+            (int)(((int)group << 8) | (int)(index))
+
+/* NOTE: service ID of 0x0000 is reserved and should never be used */
+#define HTC_CTRL_RSVD_SVC MAKE_SERVICE_ID(RSVD_SERVICE_GROUP,1)
+#define WMI_CONTROL_SVC   MAKE_SERVICE_ID(WMI_SERVICE_GROUP,0)
+#define WMI_DATA_BE_SVC   MAKE_SERVICE_ID(WMI_SERVICE_GROUP,1)
+#define WMI_DATA_BK_SVC   MAKE_SERVICE_ID(WMI_SERVICE_GROUP,2)
+#define WMI_DATA_VI_SVC   MAKE_SERVICE_ID(WMI_SERVICE_GROUP,3)
+#define WMI_DATA_VO_SVC   MAKE_SERVICE_ID(WMI_SERVICE_GROUP,4)
+#define WMI_MAX_SERVICES  5
+
+/* raw stream service (i.e. flash, tcmd, calibration apps) */
+#define HTC_RAW_STREAMS_SVC MAKE_SERVICE_ID(HTC_TEST_GROUP,0)
+
+#endif /*HTC_SERVICES_H_*/

Added: trunk/src/target/AR6kSDK.build_sw.18/include/ini_dset.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/ini_dset.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/ini_dset.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,40 @@
+/*
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ */
+#ifndef _INI_DSET_H_
+#define _INI_DSET_H_
+
+/*
+ * Each of these represents a WHAL INI table, which consists
+ * of an "address column" followed by 1 or more "value columns".
+ *
+ * Software uses the base WHAL_INI_DATA_ID+column to access a
+ * DataSet that holds a particular column of data.
+ */
+typedef enum {
+    WHAL_INI_DATA_ID_NULL               =0,
+    WHAL_INI_DATA_ID_MODE_SPECIFIC      =1,  /* 2,3 */
+    WHAL_INI_DATA_ID_COMMON             =4,  /* 5 */
+    WHAL_INI_DATA_ID_BB_RFGAIN          =6,  /* 7,8 */
+    WHAL_INI_DATA_ID_ANALOG_BANK1       =9,  /* 10 */
+    WHAL_INI_DATA_ID_ANALOG_BANK2       =11, /* 12 */
+    WHAL_INI_DATA_ID_ANALOG_BANK3       =13, /* 14, 15 */
+    WHAL_INI_DATA_ID_ANALOG_BANK6       =16, /* 17, 18 */
+    WHAL_INI_DATA_ID_ANALOG_BANK7       =19, /* 20 */
+    WHAL_INI_DATA_ID_MODE_OVERRIDES     =21, /* 22,23 */
+    WHAL_INI_DATA_ID_COMMON_OVERRIDES   =24, /* 25 */
+
+    WHAL_INI_DATA_ID_MAX                =25
+} WHAL_INI_DATA_ID;
+
+typedef PREPACK struct {
+    A_UINT16 freqIndex; // 1 - A mode 2 - B or G mode 0 - common
+    A_UINT16 offset;
+    A_UINT32 newValue;
+} POSTPACK INI_DSET_REG_OVERRIDE;
+
+#endif

Added: trunk/src/target/AR6kSDK.build_sw.18/include/regDb.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/regDb.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/regDb.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,19 @@
+/*
+ * Copyright (c) 2005 Atheros Communications, Inc.
+ * All rights reserved.
+ *
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ * This module contains the header files for regulatory module,
+ * which include the DB schema and DB values.
+ * $Id:
+ */
+
+#ifndef __REG_DB_H__
+#define __REG_DB_H__
+
+#include "./regulatory/reg_dbschema.h"
+#include "./regulatory/reg_dbvalues.h"
+
+#endif  /* __REG_DB_H__ */

Added: trunk/src/target/AR6kSDK.build_sw.18/include/regdump.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/regdump.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/regdump.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,33 @@
+#ifndef __REGDUMP_H__
+#define __REGDUMP_H__
+/*
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ */
+#if defined(AR6001)
+#include "AR6001/AR6001_regdump.h"
+#endif
+#if defined(AR6002)
+#include "AR6002/AR6002_regdump.h"
+#endif
+
+#if !defined(__ASSEMBLER__)
+/*
+ * Target CPU state at the time of failure is reflected
+ * in a register dump, which the Host can fetch through
+ * the diagnostic window.
+ */
+struct register_dump_s {
+    A_UINT32 target_id;               /* Target ID */
+    A_UINT32 assline;                 /* Line number (if assertion failure) */
+    A_UINT32 pc;                      /* Program Counter at time of exception */
+    A_UINT32 badvaddr;                /* Virtual address causing exception */
+    CPU_exception_frame_t exc_frame;  /* CPU-specific exception info */
+
+    /* Could copy top of stack here, too.... */
+};
+#endif /* __ASSEMBLER__ */
+#endif /* __REGDUMP_H__ */

Added: trunk/src/target/AR6kSDK.build_sw.18/include/targaddrs.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/targaddrs.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/targaddrs.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,158 @@
+/*
+ * Copyright (c) 2004-2007 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ */
+
+#ifndef __TARGADDRS_H__
+#define __TARGADDRS_H__
+#if defined(AR6001)
+#include "AR6001/addrs.h"
+#endif
+#if defined(AR6002)
+#include "AR6002/addrs.h"
+#endif
+
+/* 
+ * AR6K option bits, to enable/disable various features.
+ * By default, all option bits are 0.
+ * These bits can be set in LOCAL_SCRATCH register 0.
+ */
+#define AR6K_OPTION_BMI_DISABLE      0x01 /* Disable BMI comm with Host */
+#define AR6K_OPTION_SERIAL_ENABLE    0x02 /* Enable serial port msgs */
+#define AR6K_OPTION_WDT_DISABLE      0x04 /* WatchDog Timer override */
+#define AR6K_OPTION_SLEEP_DISABLE    0x08 /* Disable system sleep */
+#define AR6K_OPTION_STOP_BOOT        0x10 /* Stop boot processes (for ATE) */
+#define AR6K_OPTION_ENABLE_NOANI     0x20 /* Operate without ANI */
+#define AR6K_OPTION_DSET_DISABLE     0x40 /* Ignore DataSets */
+#define AR6K_OPTION_IGNORE_FLASH     0x80 /* Ignore flash during bootup */
+
+/*
+ * xxx_HOST_INTEREST_ADDRESS is the address in Target RAM of the
+ * host_interest structure.  It must match the address of the _host_interest
+ * symbol (see linker script).
+ *
+ * Host Interest is shared between Host and Target in order to coordinate
+ * between the two, and is intended to remain constant (with additions only
+ * at the end) across software releases.
+ */
+#define AR6001_HOST_INTEREST_ADDRESS     0x80000600
+#define AR6002_HOST_INTEREST_ADDRESS     0x00500400
+
+#define HOST_INTEREST_MAX_SIZE          0x100
+
+#if !defined(__ASSEMBLER__)
+struct register_dump_s;
+struct dbglog_hdr_s;
+
+/* 
+ * These are items that the Host may need to access
+ * via BMI or via the Diagnostic Window. The position
+ * of items in this structure must remain constant
+ * across firmware revisions!
+ *
+ * Types for each item must be fixed size across
+ * target and host platforms.
+ *
+ * More items may be added at the end.
+ */
+struct host_interest_s {
+    /*
+     * Pointer to application-defined area, if any.
+     * Set by Target application during startup.
+     */
+    A_UINT32               hi_app_host_interest;                      /* 0x00 */
+
+    /* Pointer to register dump area, valid after Target crash. */
+    A_UINT32               hi_failure_state;                          /* 0x04 */
+
+    /* Pointer to debug logging header */
+    A_UINT32               hi_dbglog_hdr;                             /* 0x08 */
+
+    /* Indicates whether or not flash is present on Target.
+     * NB: flash_is_present indicator is here not just
+     * because it might be of interest to the Host; but
+     * also because it's set early on by Target's startup
+     * asm code and we need it to have a special RAM address
+     * so that it doesn't get reinitialized with the rest
+     * of data.
+     */
+    A_UINT32               hi_flash_is_present;                       /* 0x0c */
+
+    /*
+     * General-purpose flag bits, similar to AR6000_OPTION_* flags.
+     * Can be used by application rather than by OS.
+     */
+    A_UINT32               hi_option_flag;                            /* 0x10 */
+
+    /*
+     * Boolean that determines whether or not to
+     * display messages on the serial port.
+     */
+    A_UINT32               hi_serial_enable;                          /* 0x14 */
+
+    /* Start address of Flash DataSet index, if any */
+    A_UINT32               hi_dset_list_head;                         /* 0x18 */
+
+    /* Override Target application start address */
+    A_UINT32               hi_app_start;                              /* 0x1c */
+
+    /* Clock and voltage tuning */
+    A_UINT32               hi_skip_clock_init;                        /* 0x20 */
+    A_UINT32               hi_core_clock_setting;                     /* 0x24 */
+    A_UINT32               hi_cpu_clock_setting;                      /* 0x28 */
+    A_UINT32               hi_system_sleep_setting;                   /* 0x2c */
+    A_UINT32               hi_xtal_control_setting;                   /* 0x30 */
+    A_UINT32               hi_pll_ctrl_setting_24ghz;                 /* 0x34 */
+    A_UINT32               hi_pll_ctrl_setting_5ghz;                  /* 0x38 */
+    A_UINT32               hi_ref_voltage_trim_setting;               /* 0x3c */
+    A_UINT32               hi_clock_info;                             /* 0x40 */
+
+    /*
+     * Flash configuration overrides, used only
+     * when firmware is not executing from flash.
+     * (When using flash, modify the global variables
+     * with equivalent names.)
+     */
+    A_UINT32               hi_bank0_addr_value;                       /* 0x44 */
+    A_UINT32               hi_bank0_read_value;                       /* 0x48 */
+    A_UINT32               hi_bank0_write_value;                      /* 0x4c */
+    A_UINT32               hi_bank0_config_value;                     /* 0x50 */
+
+    /* Pointer to Board Data  */
+    A_UINT32               hi_board_data;                             /* 0x54 */
+    A_UINT32               hi_board_data_initialized;                 /* 0x58 */
+
+    A_UINT32               hi_dset_RAM_index_table;                   /* 0x5c */
+
+    A_UINT32               hi_desired_baud_rate;                      /* 0x60 */
+    A_UINT32               hi_dbglog_config;                          /* 0x64 */
+    A_UINT32               hi_end_RAM_reserve_sz;                     /* 0x68 */
+    A_UINT32               hi_mbox_io_block_sz;                       /* 0x6c */
+
+    A_UINT32               hi_num_bpatch_streams;                     /* 0x70 */
+    A_UINT32               hi_mbox_isr_yield_limit;                   /* 0x74 */
+
+    A_UINT32               hi_refclk_hz;                              /* 0x78 */
+};
+
+/* Bits defined in hi_option_flag */
+#define HI_OPTION_TIMER_WAR     1 /* not really used */
+
+/*
+ * Intended for use by Host software, this macro returns the Target RAM
+ * address of any item in the host_interest structure.
+ * Example: target_addr = AR6001_HOST_INTEREST_ITEM_ADDRESS(hi_board_data);
+ */
+#define AR6001_HOST_INTEREST_ITEM_ADDRESS(item) \
+    ((A_UINT32)&((((struct host_interest_s *)(AR6001_HOST_INTEREST_ADDRESS))->item)))
+
+#define AR6002_HOST_INTEREST_ITEM_ADDRESS(item) \
+    ((A_UINT32)&((((struct host_interest_s *)(AR6002_HOST_INTEREST_ADDRESS))->item)))
+
+
+#endif /* !__ASSEMBLER__ */
+
+#endif /* __TARGADDRS_H__ */

Added: trunk/src/target/AR6kSDK.build_sw.18/include/testcmd.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/testcmd.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/testcmd.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,144 @@
+/*
+ * Copyright (c) 2004-2005 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ */
+
+#ifndef  TESTCMD_H_
+#define  TESTCMD_H_
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+typedef enum {
+    ZEROES_PATTERN = 0,
+    ONES_PATTERN,
+    REPEATING_10,
+    PN7_PATTERN,
+    PN9_PATTERN,
+    PN15_PATTERN
+}TX_DATA_PATTERN;
+
+/* Continous tx
+   mode : TCMD_CONT_TX_OFF - Disabling continous tx
+          TCMD_CONT_TX_SINE - Enable continuous unmodulated tx
+          TCMD_CONT_TX_FRAME- Enable continuous modulated tx
+   freq : Channel freq in Mhz. (e.g 2412 for channel 1 in 11 g)
+dataRate: 0 - 1 Mbps
+          1 - 2 Mbps
+          2 - 5.5 Mbps
+          3 - 11 Mbps
+          4 - 6 Mbps
+          5 - 9 Mbps
+          6 - 12 Mbps
+          7 - 18 Mbps
+          8 - 24 Mbps
+          9 - 36 Mbps
+         10 - 28 Mbps
+         11 - 54 Mbps
+  txPwr: Tx power in dBm[5 -11] for unmod Tx, [5-14] for mod Tx
+antenna:  1 - one antenna
+          2 - two antenna
+Note : Enable/disable continuous tx test cmd works only when target is awake.
+*/
+
+typedef enum {
+    TCMD_CONT_TX_OFF = 0,
+    TCMD_CONT_TX_SINE,
+    TCMD_CONT_TX_FRAME,
+    TCMD_CONT_TX_TX99,
+    TCMD_CONT_TX_TX100
+} TCMD_CONT_TX_MODE;
+
+typedef PREPACK struct {
+    A_UINT32                 testCmdId;
+    A_UINT32                mode;
+    A_UINT32                freq;
+    A_UINT32                dataRate;
+    A_INT32                 txPwr;
+    A_UINT32                antenna;
+    A_UINT32                enANI;
+    A_UINT32                scramblerOff;
+    A_UINT32                aifsn;
+    A_UINT16                pktSz;
+    A_UINT16                txPattern;
+} POSTPACK TCMD_CONT_TX;
+
+#define TCMD_TXPATTERN_ZERONE                 0x1
+#define TCMD_TXPATTERN_ZERONE_DIS_SCRAMBLE    0x2
+
+/* Continuous Rx
+ act: TCMD_CONT_RX_PROMIS - promiscuous mode (accept all incoming frames)
+      TCMD_CONT_RX_FILTER - filter mode (accept only frames with dest
+                                             address equal specified
+                                             mac address (set via act =3)
+      TCMD_CONT_RX_REPORT  off mode  (disable cont rx mode and get the
+                                          report from the last cont
+                                          Rx test)
+
+     TCMD_CONT_RX_SETMAC - set MacAddr mode (sets the MAC address for the
+                                                 target. This Overrides
+                                                 the default MAC address.)
+
+*/
+typedef enum {
+    TCMD_CONT_RX_PROMIS =0,
+    TCMD_CONT_RX_FILTER,
+    TCMD_CONT_RX_REPORT,
+    TCMD_CONT_RX_SETMAC
+} TCMD_CONT_RX_ACT;
+
+typedef PREPACK struct {
+    A_UINT32         testCmdId;
+    A_UINT32        act;
+    A_UINT32        enANI;
+    PREPACK union {
+        struct PREPACK TCMD_CONT_RX_PARA {
+            A_UINT32    freq;
+            A_UINT32    antenna;
+        } POSTPACK para;
+        struct PREPACK TCMD_CONT_RX_REPORT {
+            A_UINT32    totalPkt;
+            A_INT32    rssiInDBm;
+        } POSTPACK report;
+        struct PREPACK TCMD_CONT_RX_MAC {
+            A_UCHAR    addr[ATH_MAC_LEN];
+        } POSTPACK mac;
+    } POSTPACK u;
+} POSTPACK TCMD_CONT_RX;
+
+/* Force sleep/wake  test cmd
+ mode: TCMD_PM_WAKEUP - Wakeup the target
+       TCMD_PM_SLEEP - Force the target to sleep.
+ */
+typedef enum {
+    TCMD_PM_WAKEUP = 1, /* be consistent with target */
+    TCMD_PM_SLEEP
+} TCMD_PM_MODE;
+
+typedef PREPACK struct {
+	A_UINT32  testCmdId;
+    A_UINT32  mode;
+} POSTPACK TCMD_PM;
+
+typedef enum{
+    TCMD_CONT_TX_ID,
+    TCMD_CONT_RX_ID,
+    TCMD_PM_ID
+   } TCMD_ID;
+
+typedef PREPACK union {
+          TCMD_CONT_TX contTx;
+          TCMD_CONT_RX contRx;
+          TCMD_PM pm ;
+} POSTPACK TEST_CMD;
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* TESTCMD_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/include/wlan_dset.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/wlan_dset.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/wlan_dset.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,20 @@
+/*
+ * Copyright (c) 2007 Atheros Communications, Inc.
+ * All rights reserved.
+ *
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ */
+
+#ifndef __WLAN_DSET_H__
+#define __WKAN_DSET_H__
+
+typedef PREPACK struct wow_config_dset {
+
+    A_UINT8 valid_dset;
+    A_UINT8 gpio_enable;
+    A_UINT16 gpio_pin;
+} POSTPACK WOW_CONFIG_DSET;
+
+#endif

Added: trunk/src/target/AR6kSDK.build_sw.18/include/wmi.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/wmi.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/wmi.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,1739 @@
+/* 
+ * Copyright (c) 2004-2006 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ * This file contains the definitions of the WMI protocol specified in the
+ * Wireless Module Interface (WMI).  It includes definitions of all the
+ * commands and events. Commands are messages from the host to the WM.
+ * Events and Replies are messages from the WM to the host.
+ *
+ * Ownership of correctness in regards to WMI commands
+ * belongs to the host driver and the WM is not required to validate
+ * parameters for value, proper range, or any other checking.
+ *
+ */
+
+#ifndef _WMI_H_
+#define _WMI_H_
+
+#ifndef ATH_TARGET
+#include "athstartpack.h"
+#endif
+
+#include "wmix.h"
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+#define WMI_PROTOCOL_VERSION    0x0002
+#define WMI_PROTOCOL_REVISION   0x0000
+
+#define ATH_MAC_LEN             6               /* length of mac in bytes */
+#define WMI_CMD_MAX_LEN         100
+#define WMI_CONTROL_MSG_MAX_LEN     256
+#define WMI_OPT_CONTROL_MSG_MAX_LEN 1536
+#define IS_ETHERTYPE(_typeOrLen)        ((_typeOrLen) >= 0x0600)
+#define RFC1042OUI      {0x00, 0x00, 0x00}
+
+#define IP_ETHERTYPE 0x0800
+
+#define WMI_IMPLICIT_PSTREAM 0xFF
+#define WMI_MAX_THINSTREAM 15
+
+struct host_app_area_s {
+    A_UINT32 wmi_protocol_ver;
+};
+
+/*
+ * Data Path
+ */
+typedef PREPACK struct {
+    A_UINT8     dstMac[ATH_MAC_LEN];
+    A_UINT8     srcMac[ATH_MAC_LEN];
+    A_UINT16    typeOrLen;
+} POSTPACK ATH_MAC_HDR;
+
+typedef PREPACK struct {
+    A_UINT8     dsap;
+    A_UINT8     ssap;
+    A_UINT8     cntl;
+    A_UINT8     orgCode[3];
+    A_UINT16    etherType;
+} POSTPACK ATH_LLC_SNAP_HDR;
+
+typedef enum {
+    DATA_MSGTYPE = 0x0,
+    CNTL_MSGTYPE,
+    SYNC_MSGTYPE
+} WMI_MSG_TYPE;
+
+
+typedef PREPACK struct {
+    A_INT8      rssi;
+    A_UINT8     info;            /* WMI_MSG_TYPE in lower 2 bits - b1b0 */
+                                 /* UP in next 3 bits - b4b3b2 */
+#define WMI_DATA_HDR_MSG_TYPE_MASK  0x03
+#define WMI_DATA_HDR_MSG_TYPE_SHIFT 0
+#define WMI_DATA_HDR_UP_MASK        0x07
+#define WMI_DATA_HDR_UP_SHIFT       2
+#define WMI_DATA_HDR_IS_MSG_TYPE(h, t)  (((h)->info & (WMI_DATA_HDR_MSG_TYPE_MASK)) == (t))
+} POSTPACK WMI_DATA_HDR;
+
+
+#define WMI_DATA_HDR_SET_MSG_TYPE(h, t) (h)->info = (((h)->info & ~(WMI_DATA_HDR_MSG_TYPE_MASK << WMI_DATA_HDR_MSG_TYPE_SHIFT)) | (t << WMI_DATA_HDR_MSG_TYPE_SHIFT))
+#define WMI_DATA_HDR_SET_UP(h, p) (h)->info = (((h)->info & ~(WMI_DATA_HDR_UP_MASK << WMI_DATA_HDR_UP_SHIFT)) | (p << WMI_DATA_HDR_UP_SHIFT))
+
+/*
+ * Control Path
+ */
+typedef PREPACK struct {
+    A_UINT16    commandId;
+} POSTPACK WMI_CMD_HDR;        /* used for commands and events */
+
+/*
+ * List of Commnands
+ */
+typedef enum {
+    WMI_CONNECT_CMDID           = 0x0001,
+    WMI_RECONNECT_CMDID,
+    WMI_DISCONNECT_CMDID,
+    WMI_SYNCHRONIZE_CMDID,
+    WMI_CREATE_PSTREAM_CMDID,
+    WMI_DELETE_PSTREAM_CMDID,
+    WMI_START_SCAN_CMDID,
+    WMI_SET_SCAN_PARAMS_CMDID,
+    WMI_SET_BSS_FILTER_CMDID,
+    WMI_SET_PROBED_SSID_CMDID,
+    WMI_SET_LISTEN_INT_CMDID,
+    WMI_SET_BMISS_TIME_CMDID,
+    WMI_SET_DISC_TIMEOUT_CMDID,
+    WMI_GET_CHANNEL_LIST_CMDID,
+    WMI_SET_BEACON_INT_CMDID,
+    WMI_GET_STATISTICS_CMDID,
+    WMI_SET_CHANNEL_PARAMS_CMDID,
+    WMI_SET_POWER_MODE_CMDID,
+    WMI_SET_IBSS_PM_CAPS_CMDID,
+    WMI_SET_POWER_PARAMS_CMDID,
+    WMI_SET_POWERSAVE_TIMERS_POLICY_CMDID,
+    WMI_ADD_CIPHER_KEY_CMDID,
+    WMI_DELETE_CIPHER_KEY_CMDID,
+    WMI_ADD_KRK_CMDID,
+    WMI_DELETE_KRK_CMDID,
+    WMI_SET_PMKID_CMDID,
+    WMI_SET_TX_PWR_CMDID,
+    WMI_GET_TX_PWR_CMDID,
+    WMI_SET_ASSOC_INFO_CMDID,
+    WMI_ADD_BAD_AP_CMDID,
+    WMI_DELETE_BAD_AP_CMDID,
+    WMI_SET_TKIP_COUNTERMEASURES_CMDID,
+    WMI_RSSI_THRESHOLD_PARAMS_CMDID,
+    WMI_TARGET_ERROR_REPORT_BITMASK_CMDID,
+    WMI_SET_ACCESS_PARAMS_CMDID,
+    WMI_SET_RETRY_LIMITS_CMDID,
+    WMI_SET_OPT_MODE_CMDID,
+    WMI_OPT_TX_FRAME_CMDID,
+    WMI_SET_VOICE_PKT_SIZE_CMDID,
+    WMI_SET_MAX_SP_LEN_CMDID,
+    WMI_SET_ROAM_CTRL_CMDID,
+    WMI_GET_ROAM_TBL_CMDID,
+    WMI_GET_ROAM_DATA_CMDID,
+    WMI_ENABLE_RM_CMDID,
+    WMI_SET_MAX_OFFHOME_DURATION_CMDID,
+    WMI_EXTENSION_CMDID,                        /* Non-wireless extensions */
+    WMI_SNR_THRESHOLD_PARAMS_CMDID,
+    WMI_LQ_THRESHOLD_PARAMS_CMDID,
+    WMI_SET_LPREAMBLE_CMDID,
+    WMI_SET_RTS_CMDID,
+    WMI_CLR_RSSI_SNR_CMDID,
+    WMI_SET_FIXRATES_CMDID,
+    WMI_GET_FIXRATES_CMDID,
+    WMI_SET_AUTH_MODE_CMDID,
+    WMI_SET_REASSOC_MODE_CMDID,
+    WMI_SET_WMM_CMDID,
+    WMI_SET_WMM_TXOP_CMDID,
+    WMI_TEST_CMDID,
+    WMI_SET_BT_STATUS_CMDID,
+    WMI_SET_BT_PARAMS_CMDID,
+
+    WMI_SET_KEEPALIVE_CMDID,
+    WMI_GET_KEEPALIVE_CMDID,
+    WMI_SET_APPIE_CMDID,
+    WMI_GET_APPIE_CMDID,
+    WMI_SET_WSC_STATUS_CMDID,
+
+    /* Wake on Wireless */
+    WMI_SET_HOST_SLEEP_MODE_CMDID,
+    WMI_SET_WOW_MODE_CMDID,
+    WMI_GET_WOW_LIST_CMDID,
+    WMI_ADD_WOW_PATTERN_CMDID,
+    WMI_DEL_WOW_PATTERN_CMDID,
+    WMI_SET_MAC_ADDRESS_CMDID,
+    WMI_SET_AKMP_PARAMS_CMDID,
+    WMI_SET_PMKID_LIST_CMDID,
+    WMI_GET_PMKID_LIST_CMDID,
+
+    /*
+     * Developer commands starts at 0xF000
+     */
+    WMI_SET_BITRATE_CMDID = 0xF000,
+    WMI_GET_BITRATE_CMDID,
+    WMI_SET_WHALPARAM_CMDID,
+
+} WMI_COMMAND_ID;
+
+/*
+ * Frame Types
+ */
+typedef enum {
+    WMI_FRAME_BEACON        =   0,
+    WMI_FRAME_PROBE_REQ,
+    WMI_FRAME_PROBE_RESP,
+    WMI_FRAME_ASSOC_REQ,
+    WMI_FRAME_ASSOC_RESP,
+    WMI_NUM_MGMT_FRAME
+} WMI_MGMT_FRAME_TYPE;
+
+/*
+ * Connect Command
+ */
+typedef enum {
+    INFRA_NETWORK       = 0x01,
+    ADHOC_NETWORK       = 0x02,
+    ADHOC_CREATOR       = 0x04,
+} NETWORK_TYPE;
+
+typedef enum {
+    OPEN_AUTH           = 0x01,
+    SHARED_AUTH         = 0x02,
+    LEAP_AUTH           = 0x04,  /* different from IEEE_AUTH_MODE definitions */
+} DOT11_AUTH_MODE;
+
+typedef enum {
+    NONE_AUTH           = 0x01,
+    WPA_AUTH            = 0x02,
+    WPA_PSK_AUTH        = 0x03,
+    WPA2_AUTH           = 0x04,
+    WPA2_PSK_AUTH       = 0x05,
+    WPA_AUTH_CCKM       = 0x06,
+    WPA2_AUTH_CCKM      = 0x07,
+} AUTH_MODE;
+
+typedef enum {
+    NONE_CRYPT          = 0x01,
+    WEP_CRYPT           = 0x02,
+    TKIP_CRYPT          = 0x03,
+    AES_CRYPT           = 0x04,
+} CRYPTO_TYPE;
+
+#define WMI_MIN_CRYPTO_TYPE NONE_CRYPT
+#define WMI_MAX_CRYPTO_TYPE (AES_CRYPT + 1)
+
+#define WMI_MIN_KEY_INDEX   0
+#define WMI_MAX_KEY_INDEX   3
+
+#define WMI_MAX_KEY_LEN     32
+
+#define WMI_MAX_SSID_LEN    32
+
+typedef enum {
+    CONNECT_ASSOC_POLICY_USER = 0x0001,
+    CONNECT_SEND_REASSOC = 0x0002,
+    CONNECT_IGNORE_WPAx_GROUP_CIPHER = 0x0004,
+    CONNECT_PROFILE_MATCH_DONE = 0x0008,
+    CONNECT_IGNORE_AAC_BEACON = 0x0010,
+} WMI_CONNECT_CTRL_FLAGS_BITS;
+
+typedef PREPACK struct {
+    A_UINT8     networkType;
+    A_UINT8     dot11AuthMode;
+    A_UINT8     authMode;
+    A_UINT8     pairwiseCryptoType;
+    A_UINT8     pairwiseCryptoLen;
+    A_UINT8     groupCryptoType;
+    A_UINT8     groupCryptoLen;
+    A_UINT8     ssidLength;
+    A_UCHAR     ssid[WMI_MAX_SSID_LEN];
+    A_UINT16    channel;
+    A_UINT8     bssid[ATH_MAC_LEN];
+    A_UINT32    ctrl_flags;
+} POSTPACK WMI_CONNECT_CMD;
+
+/*
+ * WMI_RECONNECT_CMDID
+ */
+typedef PREPACK struct {
+    A_UINT16    channel;                    /* hint */
+    A_UINT8     bssid[ATH_MAC_LEN];         /* mandatory if set */
+} POSTPACK WMI_RECONNECT_CMD;
+
+/*
+ * WMI_ADD_CIPHER_KEY_CMDID
+ */
+typedef enum {
+    PAIRWISE_USAGE      = 0x00,
+    GROUP_USAGE         = 0x01,
+    TX_USAGE            = 0x02,     /* default Tx Key - Static WEP only */
+} KEY_USAGE;
+
+/*
+ * Bit Flag
+ * Bit 0 - Initialise TSC - default is Initialize
+ */
+#define KEY_OP_INIT_TSC       0x01
+#define KEY_OP_INIT_RSC       0x02
+
+#define KEY_OP_INIT_VAL     0x03     /* Default Initialise the TSC & RSC */
+#define KEY_OP_VALID_MASK   0x03     
+
+typedef PREPACK struct {
+    A_UINT8     keyIndex;
+    A_UINT8     keyType;
+    A_UINT8     keyUsage;           /* KEY_USAGE */
+    A_UINT8     keyLength;
+    A_UINT8     keyRSC[8];          /* key replay sequence counter */
+    A_UINT8     key[WMI_MAX_KEY_LEN];
+    A_UINT8     key_op_ctrl;       /* Additional Key Control information */
+} POSTPACK WMI_ADD_CIPHER_KEY_CMD;
+
+/*
+ * WMI_DELETE_CIPHER_KEY_CMDID
+ */
+typedef PREPACK struct {
+    A_UINT8     keyIndex;
+} POSTPACK WMI_DELETE_CIPHER_KEY_CMD;
+
+#define WMI_KRK_LEN     16
+/*
+ * WMI_ADD_KRK_CMDID
+ */
+typedef PREPACK struct {
+    A_UINT8     krk[WMI_KRK_LEN];
+} POSTPACK WMI_ADD_KRK_CMD;
+
+/*
+ * WMI_SET_TKIP_COUNTERMEASURES_CMDID
+ */
+typedef enum {
+    WMI_TKIP_CM_DISABLE = 0x0,
+    WMI_TKIP_CM_ENABLE  = 0x1,
+} WMI_TKIP_CM_CONTROL;
+
+typedef PREPACK struct {
+    A_UINT8  cm_en;                     /* WMI_TKIP_CM_CONTROL */
+} POSTPACK WMI_SET_TKIP_COUNTERMEASURES_CMD;
+
+/*
+ * WMI_SET_PMKID_CMDID
+ */
+
+#define WMI_PMKID_LEN 16
+
+typedef enum {
+   PMKID_DISABLE = 0,
+   PMKID_ENABLE  = 1,
+} PMKID_ENABLE_FLG;
+
+typedef PREPACK struct {
+    A_UINT8     bssid[ATH_MAC_LEN];
+    A_UINT8     enable;                 /* PMKID_ENABLE_FLG */
+    A_UINT8     pmkid[WMI_PMKID_LEN];
+} POSTPACK WMI_SET_PMKID_CMD;
+
+/*
+ * WMI_START_SCAN_CMD
+ */
+typedef enum {
+    WMI_LONG_SCAN  = 0,
+    WMI_SHORT_SCAN = 1,
+} WMI_SCAN_TYPE;
+
+typedef PREPACK struct {
+    A_BOOL   forceFgScan;
+    A_BOOL   isLegacy;        /* For Legacy Cisco AP compatibility */
+    A_UINT32 homeDwellTime;   /* Maximum duration in the home channel(milliseconds) */
+    A_UINT32 forceScanInterval;    /* Time interval between scans (milliseconds)*/
+    A_UINT8  scanType;           /* WMI_SCAN_TYPE */
+} POSTPACK WMI_START_SCAN_CMD;
+
+/*
+ * WMI_SET_SCAN_PARAMS_CMDID
+ */
+#define WMI_SHORTSCANRATIO_DEFAULT      3
+typedef enum {
+    CONNECT_SCAN_CTRL_FLAGS = 0x01,    /* set if can scan in the Connect cmd */
+    SCAN_CONNECTED_CTRL_FLAGS = 0x02,  /* set if scan for the SSID it is */
+                                       /* already connected to */
+    ACTIVE_SCAN_CTRL_FLAGS = 0x04,     /* set if enable active scan */
+    ROAM_SCAN_CTRL_FLAGS = 0x08,       /* set if enable roam scan when bmiss and lowrssi */
+    REPORT_BSSINFO_CTRL_FLAGS = 0x10,   /* set if follows customer BSSINFO reporting rule */
+    ENABLE_AUTO_CTRL_FLAGS = 0x20,      /* if disabled, target doesn't
+                                          scan after a disconnect event  */
+    ENABLE_SCAN_ABORT_EVENT = 0x40      /* Scan complete event with canceled status will be generated when a scan is prempted before it gets completed */
+
+} WMI_SCAN_CTRL_FLAGS_BITS;
+
+#define CAN_SCAN_IN_CONNECT(flags)      (flags & CONNECT_SCAN_CTRL_FLAGS)
+#define CAN_SCAN_CONNECTED(flags)       (flags & SCAN_CONNECTED_CTRL_FLAGS)
+#define ENABLE_ACTIVE_SCAN(flags)       (flags & ACTIVE_SCAN_CTRL_FLAGS)
+#define ENABLE_ROAM_SCAN(flags)         (flags & ROAM_SCAN_CTRL_FLAGS)
+#define CONFIG_REPORT_BSSINFO(flags)     (flags & REPORT_BSSINFO_CTRL_FLAGS)
+#define IS_AUTO_SCAN_ENABLED(flags)      (flags & ENABLE_AUTO_CTRL_FLAGS)
+#define SCAN_ABORT_EVENT_ENABLED(flags) (flags & ENABLE_SCAN_ABORT_EVENT)
+
+#define DEFAULT_SCAN_CTRL_FLAGS         (CONNECT_SCAN_CTRL_FLAGS| SCAN_CONNECTED_CTRL_FLAGS| ACTIVE_SCAN_CTRL_FLAGS| ROAM_SCAN_CTRL_FLAGS | ENABLE_AUTO_CTRL_FLAGS)
+
+
+typedef PREPACK struct {
+    A_UINT16    fg_start_period;        /* seconds */
+    A_UINT16    fg_end_period;          /* seconds */
+    A_UINT16    bg_period;              /* seconds */
+    A_UINT16    maxact_chdwell_time;    /* msec */
+    A_UINT16    pas_chdwell_time;       /* msec */
+    A_UINT8     shortScanRatio;         /* how many shorts scan for one long */
+    A_UINT8     scanCtrlFlags;
+    A_UINT16    minact_chdwell_time;    /* msec */
+    A_UINT32    max_dfsch_act_time;  /* msecs */
+} POSTPACK WMI_SCAN_PARAMS_CMD;
+
+/*
+ * WMI_SET_BSS_FILTER_CMDID
+ */
+typedef enum {
+    NONE_BSS_FILTER = 0x0,              /* no beacons forwarded */
+    ALL_BSS_FILTER,                     /* all beacons forwarded */
+    PROFILE_FILTER,                     /* only beacons matching profile */
+    ALL_BUT_PROFILE_FILTER,             /* all but beacons matching profile */
+    CURRENT_BSS_FILTER,                 /* only beacons matching current BSS */
+    ALL_BUT_BSS_FILTER,                 /* all but beacons matching BSS */
+    PROBED_SSID_FILTER,                 /* beacons matching probed ssid */
+    LAST_BSS_FILTER,                    /* marker only */
+} WMI_BSS_FILTER;
+
+typedef PREPACK struct {
+    A_UINT8    bssFilter;                      /* see WMI_BSS_FILTER */
+    A_UINT32   ieMask;
+} POSTPACK WMI_BSS_FILTER_CMD;
+
+/*
+ * WMI_SET_PROBED_SSID_CMDID
+ */
+#define MAX_PROBED_SSID_INDEX   5
+
+typedef enum {
+    DISABLE_SSID_FLAG  = 0,                  /* disables entry */
+    SPECIFIC_SSID_FLAG = 0x01,               /* probes specified ssid */
+    ANY_SSID_FLAG      = 0x02,               /* probes for any ssid */
+} WMI_SSID_FLAG;
+
+typedef PREPACK struct {
+    A_UINT8     entryIndex;                     /* 0 to MAX_PROBED_SSID_INDEX */
+    A_UINT8     flag;                           /* WMI_SSID_FLG */
+    A_UINT8     ssidLength;
+    A_UINT8     ssid[32];
+} POSTPACK WMI_PROBED_SSID_CMD;
+
+/*
+ * WMI_SET_LISTEN_INT_CMDID
+ * The Listen interval is between 15 and 3000 TUs
+ */
+#define MIN_LISTEN_INTERVAL 15
+#define MAX_LISTEN_INTERVAL 5000
+#define MIN_LISTEN_BEACONS 1
+#define MAX_LISTEN_BEACONS 50
+
+typedef PREPACK struct {
+    A_UINT16     listenInterval;
+    A_UINT16     numBeacons;
+} POSTPACK WMI_LISTEN_INT_CMD;
+
+/*
+ * WMI_SET_BEACON_INT_CMDID
+ */
+typedef PREPACK struct {
+    A_UINT16     beaconInterval;
+} POSTPACK WMI_BEACON_INT_CMD;
+
+/*
+ * WMI_SET_BMISS_TIME_CMDID
+ * valid values are between 1000 and 5000 TUs
+ */
+
+#define MIN_BMISS_TIME     1000
+#define MAX_BMISS_TIME     5000
+#define MIN_BMISS_BEACONS  1
+#define MAX_BMISS_BEACONS  50
+
+typedef PREPACK struct {
+    A_UINT16     bmissTime;
+    A_UINT16     numBeacons;
+} POSTPACK WMI_BMISS_TIME_CMD;
+
+/*
+ * WMI_SET_POWER_MODE_CMDID
+ */
+typedef enum {
+    REC_POWER = 0x01,
+    MAX_PERF_POWER,
+} WMI_POWER_MODE;
+
+typedef PREPACK struct {
+    A_UINT8     powerMode;      /* WMI_POWER_MODE */
+} POSTPACK WMI_POWER_MODE_CMD;
+
+/*
+ * WMI_SET_POWER_PARAMS_CMDID
+ */
+typedef enum {
+    IGNORE_DTIM = 0x01,
+    NORMAL_DTIM = 0x02,
+    STICK_DTIM  = 0x03,
+} WMI_DTIM_POLICY;
+
+typedef PREPACK struct {
+    A_UINT16    idle_period;             /* msec */
+    A_UINT16    pspoll_number;
+    A_UINT16    dtim_policy;
+} POSTPACK WMI_POWER_PARAMS_CMD;
+
+typedef PREPACK struct {
+    A_UINT8    power_saving;
+    A_UINT8    ttl; /* number of beacon periods */
+    A_UINT16   atim_windows;          /* msec */
+    A_UINT16   timeout_value;         /* msec */
+} POSTPACK WMI_IBSS_PM_CAPS_CMD;
+
+/*
+ * WMI_SET_POWERSAVE_TIMERS_POLICY_CMDID
+ */
+typedef enum {
+    IGNORE_TIM_ALL_QUEUES_APSD = 0,
+    PROCESS_TIM_ALL_QUEUES_APSD = 1,
+    IGNORE_TIM_SIMULATED_APSD = 2,
+    PROCESS_TIM_SIMULATED_APSD = 3,
+} APSD_TIM_POLICY;
+
+typedef PREPACK struct {
+    A_UINT16    psPollTimeout;          /* msec */
+    A_UINT16    triggerTimeout;         /* msec */
+    APSD_TIM_POLICY apsdTimPolicy;      /* TIM behavior with  ques APSD enabled. Default is IGNORE_TIM_ALL_QUEUES_APSD */
+    APSD_TIM_POLICY simulatedAPSDTimPolicy;      /* TIM behavior with  simulated APSD enabled. Default is PROCESS_TIM_SIMULATED_APSD */
+} POSTPACK WMI_POWERSAVE_TIMERS_POLICY_CMD;
+
+/*
+ * WMI_SET_VOICE_PKT_SIZE_CMDID
+ */
+typedef PREPACK struct {
+    A_UINT16    voicePktSize;
+} POSTPACK WMI_SET_VOICE_PKT_SIZE_CMD;
+
+/*
+ * WMI_SET_MAX_SP_LEN_CMDID
+ */
+typedef enum {
+    DELIVER_ALL_PKT = 0x0,
+    DELIVER_2_PKT = 0x1,
+    DELIVER_4_PKT = 0x2,
+    DELIVER_6_PKT = 0x3,
+} APSD_SP_LEN_TYPE;
+
+typedef PREPACK struct {
+    A_UINT8    maxSPLen;
+} POSTPACK WMI_SET_MAX_SP_LEN_CMD;
+
+/*
+ * WMI_SET_DISC_TIMEOUT_CMDID
+ */
+typedef PREPACK struct {
+    A_UINT8     disconnectTimeout;          /* seconds */
+} POSTPACK WMI_DISC_TIMEOUT_CMD;
+
+typedef enum {
+    UPLINK_TRAFFIC = 0,
+    DNLINK_TRAFFIC = 1,
+    BIDIR_TRAFFIC = 2,
+} DIR_TYPE;
+
+typedef enum {
+    DISABLE_FOR_THIS_AC = 0,
+    ENABLE_FOR_THIS_AC  = 1,
+    ENABLE_FOR_ALL_AC   = 2,
+} VOICEPS_CAP_TYPE;
+
+typedef enum {
+    TRAFFIC_TYPE_APERIODIC = 0,
+    TRAFFIC_TYPE_PERIODIC = 1,
+}TRAFFIC_TYPE;
+
+/*
+ * WMI_CREATE_PSTREAM_CMDID
+ */
+typedef PREPACK struct {
+    A_UINT32        minServiceInt;           /* in milli-sec */
+    A_UINT32        maxServiceInt;           /* in milli-sec */
+    A_UINT32        inactivityInt;           /* in milli-sec */
+    A_UINT32        suspensionInt;           /* in milli-sec */
+    A_UINT32        serviceStartTime;
+    A_UINT32        minDataRate;             /* in bps */
+    A_UINT32        meanDataRate;            /* in bps */
+    A_UINT32        peakDataRate;            /* in bps */
+    A_UINT32        maxBurstSize;
+    A_UINT32        delayBound;
+    A_UINT32        minPhyRate;              /* in bps */
+    A_UINT32        sba;
+    A_UINT32        mediumTime;
+    A_UINT16        nominalMSDU;             /* in octects */
+    A_UINT16        maxMSDU;                 /* in octects */
+    A_UINT8         trafficClass;
+    A_UINT8         trafficType;             /* TRAFFIC_TYPE */
+    A_UINT8         trafficDirection;        /* TRAFFIC_DIR */
+    A_UINT8         voicePSCapability;       /* VOICEPS_CAP_TYPE */
+    A_UINT8         tsid;
+    A_UINT8         userPriority;            /* 802.1D user priority */
+} POSTPACK WMI_CREATE_PSTREAM_CMD;
+
+/*
+ * WMI_DELETE_PSTREAM_CMDID
+ */
+typedef PREPACK struct {
+    A_UINT8     trafficClass;
+    A_UINT8     tsid;
+} POSTPACK WMI_DELETE_PSTREAM_CMD;
+
+/*
+ * WMI_SET_CHANNEL_PARAMS_CMDID
+ */
+typedef enum {
+    WMI_11A_MODE  = 0x1,
+    WMI_11G_MODE  = 0x2,
+    WMI_11AG_MODE = 0x3,
+    WMI_11B_MODE  = 0x4,
+    WMI_11GONLY_MODE = 0x5,
+} WMI_PHY_MODE;
+
+#define WMI_MAX_CHANNELS        32
+
+typedef PREPACK struct {
+    A_UINT8     reserved1;
+    A_UINT8     scanParam;              /* set if enable scan */
+    A_UINT8     phyMode;                /* see WMI_PHY_MODE */
+    A_UINT8     numChannels;            /* how many channels follow */
+    A_UINT16    channelList[1];         /* channels in Mhz */
+} POSTPACK WMI_CHANNEL_PARAMS_CMD;
+
+
+/*
+ *  WMI_RSSI_THRESHOLD_PARAMS_CMDID
+ *  Setting the polltime to 0 would disable polling.
+ *  Threshold values are in the ascending order, and should agree to:
+ *  (lowThreshold_lowerVal < lowThreshold_upperVal < highThreshold_lowerVal
+ *      < highThreshold_upperVal)
+ */
+
+typedef PREPACK struct WMI_RSSI_THRESHOLD_PARAMS{
+    A_UINT32    pollTime;               /* Polling time as a factor of LI */
+    A_INT16     thresholdAbove1_Val;          /* lowest of upper */
+    A_INT16     thresholdAbove2_Val;
+    A_INT16     thresholdAbove3_Val;
+    A_INT16     thresholdAbove4_Val;
+    A_INT16     thresholdAbove5_Val;
+    A_INT16     thresholdAbove6_Val;          /* highest of upper */
+    A_INT16     thresholdBelow1_Val;         /* lowest of bellow */
+    A_INT16     thresholdBelow2_Val;
+    A_INT16     thresholdBelow3_Val;
+    A_INT16     thresholdBelow4_Val;
+    A_INT16     thresholdBelow5_Val;
+    A_INT16     thresholdBelow6_Val;         /* highest of bellow */
+    A_UINT8     weight;                  /* "alpha" */
+    A_UINT8     reserved[3];
+} POSTPACK  WMI_RSSI_THRESHOLD_PARAMS_CMD;
+
+/*
+ *  WMI_SNR_THRESHOLD_PARAMS_CMDID
+ *  Setting the polltime to 0 would disable polling.
+ */
+
+typedef PREPACK struct WMI_SNR_THRESHOLD_PARAMS{
+    A_UINT32    pollTime;               /* Polling time as a factor of LI */
+    A_UINT8     weight;                  /* "alpha" */
+    A_UINT8     thresholdAbove1_Val;      /* lowest of uppper*/
+    A_UINT8     thresholdAbove2_Val;
+    A_UINT8     thresholdAbove3_Val;
+    A_UINT8     thresholdAbove4_Val;      /* highest of upper */
+    A_UINT8     thresholdBelow1_Val;     /* lowest of bellow */
+    A_UINT8     thresholdBelow2_Val;
+    A_UINT8     thresholdBelow3_Val;
+    A_UINT8     thresholdBelow4_Val;     /* highest of bellow */
+    A_UINT8     reserved[3];
+} POSTPACK WMI_SNR_THRESHOLD_PARAMS_CMD;
+
+/*
+ *  WMI_LQ_THRESHOLD_PARAMS_CMDID
+ */
+typedef PREPACK struct WMI_LQ_THRESHOLD_PARAMS {
+    A_UINT8     enable;
+    A_UINT8     thresholdAbove1_Val;
+    A_UINT8     thresholdAbove2_Val;
+    A_UINT8     thresholdAbove3_Val;
+    A_UINT8     thresholdAbove4_Val;
+    A_UINT8     thresholdBelow1_Val;
+    A_UINT8     thresholdBelow2_Val;
+    A_UINT8     thresholdBelow3_Val;
+    A_UINT8     thresholdBelow4_Val;
+    A_UINT8     reserved[3];
+} POSTPACK  WMI_LQ_THRESHOLD_PARAMS_CMD;
+
+typedef enum {
+    WMI_LPREAMBLE_DISABLED = 0,
+    WMI_LPREAMBLE_ENABLED
+} WMI_LPREAMBLE_STATUS;
+
+typedef PREPACK struct {
+    A_UINT8     status;
+}POSTPACK WMI_SET_LPREAMBLE_CMD;
+
+typedef PREPACK struct {
+    A_UINT16    threshold;
+}POSTPACK WMI_SET_RTS_CMD;
+
+/*
+ *  WMI_TARGET_ERROR_REPORT_BITMASK_CMDID
+ *  Sets the error reporting event bitmask in target. Target clears it
+ *  upon an error. Subsequent errors are counted, but not reported
+ *  via event, unless the bitmask is set again.
+ */
+typedef PREPACK struct {
+    A_UINT32    bitmask;
+} POSTPACK  WMI_TARGET_ERROR_REPORT_BITMASK;
+
+/*
+ * WMI_SET_TX_PWR_CMDID
+ */
+typedef PREPACK struct {
+    A_UINT8     dbM;                  /* in dbM units */
+} POSTPACK WMI_SET_TX_PWR_CMD, WMI_TX_PWR_REPLY;
+
+/*
+ * WMI_SET_ASSOC_INFO_CMDID
+ *
+ * A maximum of 2 private IEs can be sent in the [Re]Assoc request.
+ * A 3rd one, the CCX version IE can also be set from the host.
+ */
+#define WMI_MAX_ASSOC_INFO_TYPE    2
+#define WMI_CCX_VER_IE             2 /* ieType to set CCX Version IE */
+
+#define WMI_MAX_ASSOC_INFO_LEN     240
+
+typedef PREPACK struct {
+    A_UINT8     ieType;
+    A_UINT8     bufferSize;
+    A_UINT8     assocInfo[1];       /* up to WMI_MAX_ASSOC_INFO_LEN */
+} POSTPACK WMI_SET_ASSOC_INFO_CMD;
+
+
+/*
+ * WMI_GET_TX_PWR_CMDID does not take any parameters
+ */
+
+/*
+ * WMI_ADD_BAD_AP_CMDID
+ */
+#define WMI_MAX_BAD_AP_INDEX      1
+
+typedef PREPACK struct {
+    A_UINT8     badApIndex;         /* 0 to WMI_MAX_BAD_AP_INDEX */
+    A_UINT8     bssid[ATH_MAC_LEN];
+} POSTPACK WMI_ADD_BAD_AP_CMD;
+
+/*
+ * WMI_DELETE_BAD_AP_CMDID
+ */
+typedef PREPACK struct {
+    A_UINT8     badApIndex;         /* 0 to WMI_MAX_BAD_AP_INDEX */
+} POSTPACK WMI_DELETE_BAD_AP_CMD;
+
+/*
+ * WMI_SET_ACCESS_PARAMS_CMDID
+ */
+#define WMI_DEFAULT_TXOP_ACPARAM    0       /* implies one MSDU */
+#define WMI_DEFAULT_ECWMIN_ACPARAM  4       /* corresponds to CWmin of 15 */
+#define WMI_DEFAULT_ECWMAX_ACPARAM  10      /* corresponds to CWmax of 1023 */
+#define WMI_MAX_CW_ACPARAM          15      /* maximum eCWmin or eCWmax */
+#define WMI_DEFAULT_AIFSN_ACPARAM   2
+#define WMI_MAX_AIFSN_ACPARAM       15
+typedef PREPACK struct {
+    A_UINT16 txop;                      /* in units of 32 usec */
+    A_UINT8  eCWmin;
+    A_UINT8  eCWmax;
+    A_UINT8  aifsn;
+} POSTPACK WMI_SET_ACCESS_PARAMS_CMD;
+
+
+/*
+ * WMI_SET_RETRY_LIMITS_CMDID
+ *
+ * This command is used to customize the number of retries the
+ * wlan device will perform on a given frame.
+ */
+#define WMI_MIN_RETRIES 2
+#define WMI_MAX_RETRIES 13
+typedef enum {
+    MGMT_FRAMETYPE    = 0,
+    CONTROL_FRAMETYPE = 1,
+    DATA_FRAMETYPE    = 2
+} WMI_FRAMETYPE;
+
+typedef PREPACK struct {
+    A_UINT8 frameType;                      /* WMI_FRAMETYPE */
+    A_UINT8 trafficClass;                   /* applies only to DATA_FRAMETYPE */
+    A_UINT8 maxRetries;
+    A_UINT8 enableNotify;
+} POSTPACK WMI_SET_RETRY_LIMITS_CMD;
+
+/*
+ * WMI_SET_ROAM_CTRL_CMDID
+ *
+ * This command is used to influence the Roaming behaviour
+ * Set the host biases of the BSSs before setting the roam mode as bias
+ * based.
+ */
+
+/*
+ * Different types of Roam Control
+ */
+
+typedef enum {
+        WMI_FORCE_ROAM          = 1,      /* Roam to the specified BSSID */
+        WMI_SET_ROAM_MODE       = 2,      /* default ,progd bias, no roam */
+        WMI_SET_HOST_BIAS       = 3,     /* Set the Host Bias */
+        WMI_SET_LOWRSSI_SCAN_PARAMS = 4, /* Set lowrssi Scan parameters */
+} WMI_ROAM_CTRL_TYPE;
+
+#define WMI_MIN_ROAM_CTRL_TYPE WMI_FORCE_ROAM
+#define WMI_MAX_ROAM_CTRL_TYPE WMI_SET_LOWRSSI_SCAN_PARAMS
+
+/*
+ * ROAM MODES
+ */
+
+typedef enum {
+        WMI_DEFAULT_ROAM_MODE   = 1,  /* RSSI based ROAM */
+        WMI_HOST_BIAS_ROAM_MODE = 2, /* HOST BIAS based ROAM */
+        WMI_LOCK_BSS_MODE  = 3  /* Lock to the Current BSS - no Roam */
+} WMI_ROAM_MODE;
+
+/*
+ * BSS HOST BIAS INFO
+ */
+
+typedef PREPACK struct {
+        A_UINT8 bssid[ATH_MAC_LEN];
+        A_INT8  bias;
+} POSTPACK WMI_BSS_BIAS;
+
+typedef PREPACK struct {
+        A_UINT8 numBss;
+        WMI_BSS_BIAS bssBias[1];
+} POSTPACK WMI_BSS_BIAS_INFO;
+
+typedef PREPACK struct WMI_LOWRSSI_SCAN_PARAMS {
+        A_UINT16 lowrssi_scan_period;
+        A_INT16  lowrssi_scan_threshold;
+        A_INT16  lowrssi_roam_threshold;
+        A_UINT8  roam_rssi_floor;
+        A_UINT8  reserved[1];              /* For alignment */
+} POSTPACK WMI_LOWRSSI_SCAN_PARAMS;
+
+typedef PREPACK struct {
+    PREPACK union {
+        A_UINT8 bssid[ATH_MAC_LEN]; /* WMI_FORCE_ROAM */
+        A_UINT8 roamMode;           /* WMI_SET_ROAM_MODE  */
+        WMI_BSS_BIAS_INFO bssBiasInfo; /* WMI_SET_HOST_BIAS */
+        WMI_LOWRSSI_SCAN_PARAMS lrScanParams;
+    } POSTPACK info;
+    A_UINT8   roamCtrlType ;
+} POSTPACK WMI_SET_ROAM_CTRL_CMD;
+
+/*
+ * WMI_ENABLE_RM_CMDID
+ */
+typedef PREPACK struct {
+        A_BOOL enable_radio_measurements;
+} POSTPACK WMI_ENABLE_RM_CMD;
+
+/*
+ * WMI_SET_MAX_OFFHOME_DURATION_CMDID
+ */
+typedef PREPACK struct {
+        A_UINT8 max_offhome_duration;
+} POSTPACK WMI_SET_MAX_OFFHOME_DURATION_CMD;
+
+typedef PREPACK struct {
+    A_UINT32 frequency;
+    A_UINT8  threshold;
+} POSTPACK WMI_SET_HB_CHALLENGE_RESP_PARAMS_CMD;
+
+typedef enum {
+    BT_STREAM_UNDEF = 0,
+    BT_STREAM_SCO,             /* SCO stream */
+    BT_STREAM_A2DP,            /* A2DP stream */
+    BT_STREAM_MAX
+} BT_STREAM_TYPE;
+
+typedef enum {
+    BT_PARAM_SCO = 1,         /* SCO stream parameters */
+    BT_PARAM_A2DP,            /* A2DP stream parameters */
+    BT_PARAM_MISC,            /* miscellaneous parameters */
+    BT_PARAM_REGS,            /* co-existence register parameters */
+    BT_PARAM_MAX
+} BT_PARAM_TYPE;
+
+typedef enum {
+    BT_STATUS_UNDEF = 0,
+    BT_STATUS_START,
+    BT_STATUS_STOP,
+    BT_STATUS_RESUME,
+    BT_STATUS_SUSPEND,
+    BT_STATUS_MAX
+} BT_STREAM_STATUS;
+
+typedef PREPACK struct {
+    A_UINT8 streamType;
+    A_UINT8 status;
+} POSTPACK WMI_SET_BT_STATUS_CMD;
+
+typedef PREPACK struct {
+    A_UINT8 noSCOPkts;
+    A_UINT8 pspollTimeout;
+    A_UINT8 stompbt;
+} POSTPACK BT_PARAMS_SCO;
+
+typedef PREPACK struct {
+    A_UINT32 period;
+    A_UINT32 dutycycle;
+    A_UINT8  stompbt;
+} POSTPACK BT_PARAMS_A2DP;
+
+typedef PREPACK struct {
+    A_UINT32 mode;
+    A_UINT32 scoWghts;
+    A_UINT32 a2dpWghts;
+    A_UINT32 genWghts;
+    A_UINT32 mode2;
+    A_UINT8  setVal;
+} POSTPACK BT_COEX_REGS;
+
+typedef enum {
+    WLAN_PROTECT_POLICY = 1,
+    WLAN_COEX_CTRL_FLAGS
+} BT_PARAMS_MISC_TYPE;
+
+typedef enum {
+    WLAN_PROTECT_PER_STREAM = 0x01,   /* default */
+    WLAN_PROTECT_ANY_TX = 0x02
+} WLAN_PROTECT_FLAGS;
+
+
+#define WLAN_DISABLE_COEX_IN_DISCONNECT   0x01 /* default */
+#define WLAN_KEEP_COEX_IN_DISCONNECT      0x02
+#define WLAN_STOMPBT_IN_DISCONNECT        0x04
+
+#define WLAN_DISABLE_COEX_IN_ROAM         0x10 /* default */
+#define WLAN_KEEP_COEX_IN_ROAM            0x20
+#define WLAN_STOMPBT_IN_ROAM              0x40
+
+#define WLAN_DISABLE_COEX_IN_SCAN        0x100 /* default */
+#define WLAN_KEEP_COEX_IN_SCAN           0x200
+#define WLAN_STOMPBT_IN_SCAN             0x400
+
+#define WLAN_DISABLE_COEX_BT_OFF        0x1000 /* default */
+#define WLAN_KEEP_COEX_BT_OFF           0x2000
+#define WLAN_STOMPBT_BT_OFF             0x4000
+
+typedef PREPACK struct {
+    A_UINT32 period;
+    A_UINT32 dutycycle;
+    A_UINT8  stompbt;
+    A_UINT8  policy;
+} POSTPACK WLAN_PROTECT_POLICY_TYPE;
+
+typedef PREPACK struct {
+    PREPACK union {
+        WLAN_PROTECT_POLICY_TYPE protectParams; 
+        A_UINT16 wlanCtrlFlags;
+    } POSTPACK info;
+    A_UINT8 paramType;
+} POSTPACK BT_PARAMS_MISC;
+
+typedef PREPACK struct {
+    PREPACK union {
+        BT_PARAMS_SCO scoParams;
+        BT_PARAMS_A2DP a2dpParams;
+        BT_PARAMS_MISC miscParams;
+        BT_COEX_REGS regs;
+    } POSTPACK info;
+    A_UINT8 paramType;
+} POSTPACK WMI_SET_BT_PARAMS_CMD;
+
+/*
+ * Command Replies
+ */
+
+/*
+ * WMI_GET_CHANNEL_LIST_CMDID reply
+ */
+typedef PREPACK struct {
+    A_UINT8     reserved1;
+    A_UINT8     numChannels;            /* number of channels in reply */
+    A_UINT16    channelList[1];         /* channel in Mhz */
+} POSTPACK WMI_CHANNEL_LIST_REPLY;
+
+typedef enum {
+    A_SUCCEEDED = A_OK,
+    A_FAILED_DELETE_STREAM_DOESNOT_EXIST=250,
+    A_SUCCEEDED_MODIFY_STREAM=251,
+    A_FAILED_INVALID_STREAM = 252,
+    A_FAILED_MAX_THINSTREAMS = 253,
+    A_FAILED_CREATE_REMOVE_PSTREAM_FIRST = 254,
+} PSTREAM_REPLY_STATUS;
+
+/*
+ * List of Events (target to host)
+ */
+typedef enum {
+    WMI_READY_EVENTID           = 0x1001,
+    WMI_CONNECT_EVENTID,
+    WMI_DISCONNECT_EVENTID,
+    WMI_BSSINFO_EVENTID,
+    WMI_CMDERROR_EVENTID,
+    WMI_REGDOMAIN_EVENTID,
+    WMI_PSTREAM_TIMEOUT_EVENTID,
+    WMI_NEIGHBOR_REPORT_EVENTID,
+    WMI_TKIP_MICERR_EVENTID,
+    WMI_SCAN_COMPLETE_EVENTID,
+    WMI_REPORT_STATISTICS_EVENTID,
+    WMI_RSSI_THRESHOLD_EVENTID,
+    WMI_ERROR_REPORT_EVENTID,
+    WMI_OPT_RX_FRAME_EVENTID,
+    WMI_REPORT_ROAM_TBL_EVENTID,
+    WMI_EXTENSION_EVENTID,
+    WMI_CAC_EVENTID,
+    WMI_SNR_THRESHOLD_EVENTID,
+    WMI_LQ_THRESHOLD_EVENTID,
+    WMI_TX_RETRY_ERR_EVENTID,
+    WMI_REPORT_ROAM_DATA_EVENTID,
+    WMI_TEST_EVENTID,
+    WMI_APLIST_EVENTID,
+    WMI_GET_WOW_LIST_EVENTID,
+    WMI_GET_PMKID_LIST_EVENTID
+} WMI_EVENT_ID;
+
+typedef enum {
+    WMI_11A_CAPABILITY   = 1,
+    WMI_11G_CAPABILITY   = 2,
+    WMI_11AG_CAPABILITY  = 3,
+} WMI_PHY_CAPABILITY;
+
+typedef PREPACK struct {
+    A_UINT8     macaddr[ATH_MAC_LEN];
+    A_UINT8     phyCapability;              /* WMI_PHY_CAPABILITY */
+} POSTPACK WMI_READY_EVENT;
+
+/*
+ * Connect Event
+ */
+typedef PREPACK struct {
+    A_UINT16    channel;
+    A_UINT8     bssid[ATH_MAC_LEN];
+    A_UINT16    listenInterval;
+    A_UINT16    beaconInterval;
+    NETWORK_TYPE  networkType;
+    A_UINT8     beaconIeLen;
+    A_UINT8     assocReqLen;
+    A_UINT8     assocRespLen;
+    A_UINT8     assocInfo[1];
+} POSTPACK WMI_CONNECT_EVENT;
+
+/*
+ * Disconnect Event
+ */
+typedef enum {
+    NO_NETWORK_AVAIL   = 0x01,
+    LOST_LINK          = 0x02,     /* bmiss */
+    DISCONNECT_CMD     = 0x03,
+    BSS_DISCONNECTED   = 0x04,
+    AUTH_FAILED        = 0x05,
+    ASSOC_FAILED       = 0x06,
+    NO_RESOURCES_AVAIL = 0x07,
+    CSERV_DISCONNECT   = 0x08,
+    INVALID_PROFILE    = 0x0a,
+} WMI_DISCONNECT_REASON;
+
+typedef PREPACK struct {
+    A_UINT16    protocolReasonStatus;  /* reason code, see 802.11 spec. */
+    A_UINT8     bssid[ATH_MAC_LEN];    /* set if known */
+    A_UINT8     disconnectReason ;      /* see WMI_DISCONNECT_REASON */
+    A_UINT8     assocRespLen;
+    A_UINT8     assocInfo[1];
+} POSTPACK WMI_DISCONNECT_EVENT;
+
+/*
+ * BSS Info Event.
+ * Mechanism used to inform host of the presence and characteristic of
+ * wireless networks present.  Consists of bss info header followed by
+ * the beacon or probe-response frame body.  The 802.11 header is not included.
+ */
+typedef enum {
+    BEACON_FTYPE = 0x1,
+    PROBERESP_FTYPE,
+    ACTION_MGMT_FTYPE,
+} WMI_BI_FTYPE;
+
+enum {
+    BSS_ELEMID_CHANSWITCH = 0x01,
+    BSS_ELEMID_ATHEROS = 0x02,
+};
+
+typedef PREPACK struct {
+    A_UINT16    channel;
+    A_UINT8     frameType;          /* see WMI_BI_FTYPE */
+    A_UINT8     snr;
+    A_INT16     rssi;
+    A_UINT8     bssid[ATH_MAC_LEN];
+    A_UINT32    ieMask;
+} POSTPACK WMI_BSS_INFO_HDR;
+
+/*
+ * Command Error Event
+ */
+typedef enum {
+    INVALID_PARAM  = 0x01,
+    ILLEGAL_STATE  = 0x02,
+    INTERNAL_ERROR = 0x03,
+} WMI_ERROR_CODE;
+
+typedef PREPACK struct {
+    A_UINT16    commandId;
+    A_UINT8     errorCode;
+} POSTPACK WMI_CMD_ERROR_EVENT;
+
+/*
+ * New Regulatory Domain Event
+ */
+typedef PREPACK struct {
+    A_UINT32    regDomain;
+} POSTPACK WMI_REG_DOMAIN_EVENT;
+
+typedef PREPACK struct {
+    A_UINT8     trafficClass;
+} POSTPACK WMI_PSTREAM_TIMEOUT_EVENT;
+
+/*
+ * The WMI_NEIGHBOR_REPORT Event is generated by the target to inform
+ * the host of BSS's it has found that matches the current profile.
+ * It can be used by the host to cache PMKs and/to initiate pre-authentication
+ * if the BSS supports it.  The first bssid is always the current associated
+ * BSS.
+ * The bssid and bssFlags information repeats according to the number
+ * or APs reported.
+ */
+typedef enum {
+    WMI_DEFAULT_BSS_FLAGS   = 0x00,
+    WMI_PREAUTH_CAPABLE_BSS = 0x01,
+    WMI_PMKID_VALID_BSS     = 0x02,
+} WMI_BSS_FLAGS;
+
+typedef PREPACK struct {
+    A_UINT8     bssid[ATH_MAC_LEN];
+    A_UINT8     bssFlags;            /* see WMI_BSS_FLAGS */
+} POSTPACK WMI_NEIGHBOR_INFO;
+
+typedef PREPACK struct {
+    A_INT8      numberOfAps;
+    WMI_NEIGHBOR_INFO neighbor[1];
+} POSTPACK WMI_NEIGHBOR_REPORT_EVENT;
+
+/*
+ * TKIP MIC Error Event
+ */
+typedef PREPACK struct {
+    A_UINT8 keyid;
+    A_UINT8 ismcast;
+} POSTPACK WMI_TKIP_MICERR_EVENT;
+
+/*
+ * WMI_SCAN_COMPLETE_EVENTID - no parameters (old), staus parameter (new)
+ */
+typedef PREPACK struct {
+    A_STATUS status;
+} POSTPACK WMI_SCAN_COMPLETE_EVENT;
+
+#define MAX_OPT_DATA_LEN 1400
+
+/*
+ * WMI_SET_ADHOC_BSSID_CMDID
+ */
+typedef PREPACK struct {
+    A_UINT8     bssid[ATH_MAC_LEN];
+} POSTPACK WMI_SET_ADHOC_BSSID_CMD;
+
+/*
+ * WMI_SET_OPT_MODE_CMDID
+ */
+typedef enum {
+    SPECIAL_OFF,
+    SPECIAL_ON,
+} OPT_MODE_TYPE;
+
+typedef PREPACK struct {
+    A_UINT8     optMode;
+} POSTPACK WMI_SET_OPT_MODE_CMD;
+
+/*
+ * WMI_TX_OPT_FRAME_CMDID
+ */
+typedef enum {
+    OPT_PROBE_REQ   = 0x01,
+    OPT_PROBE_RESP  = 0x02,
+    OPT_CPPP_START  = 0x03,
+    OPT_CPPP_STOP   = 0x04,
+} WMI_OPT_FTYPE;
+
+typedef PREPACK struct {
+    A_UINT16    optIEDataLen;
+    A_UINT8     frmType;
+    A_UINT8     dstAddr[ATH_MAC_LEN];
+    A_UINT8     bssid[ATH_MAC_LEN];
+    A_UINT8     reserved;               /* For alignment */
+    A_UINT8     optIEData[1];
+} POSTPACK WMI_OPT_TX_FRAME_CMD;
+
+/*
+ * Special frame receive Event.
+ * Mechanism used to inform host of the receiption of the special frames.
+ * Consists of special frame info header followed by special frame body.
+ * The 802.11 header is not included.
+ */
+typedef PREPACK struct {
+    A_UINT16    channel;
+    A_UINT8     frameType;          /* see WMI_OPT_FTYPE */
+    A_INT8      snr;
+    A_UINT8     srcAddr[ATH_MAC_LEN];
+    A_UINT8     bssid[ATH_MAC_LEN];
+} POSTPACK WMI_OPT_RX_INFO_HDR;
+
+/*
+ * Reporting statistics.
+ */
+typedef PREPACK struct {
+    A_UINT32   tx_packets;
+    A_UINT32   tx_bytes;
+    A_UINT32   tx_unicast_pkts;
+    A_UINT32   tx_unicast_bytes;
+    A_UINT32   tx_multicast_pkts;
+    A_UINT32   tx_multicast_bytes;
+    A_UINT32   tx_broadcast_pkts;
+    A_UINT32   tx_broadcast_bytes;
+    A_UINT32   tx_rts_success_cnt;
+    A_UINT32   tx_packet_per_ac[4];
+    A_UINT32   tx_errors_per_ac[4];
+
+    A_UINT32   tx_errors;
+    A_UINT32   tx_failed_cnt;
+    A_UINT32   tx_retry_cnt;
+    A_UINT32   tx_rts_fail_cnt;
+    A_INT32    tx_unicast_rate;
+}POSTPACK tx_stats_t;
+
+typedef PREPACK struct {
+    A_UINT32   rx_packets;
+    A_UINT32   rx_bytes;
+    A_UINT32   rx_unicast_pkts;
+    A_UINT32   rx_unicast_bytes;
+    A_UINT32   rx_multicast_pkts;
+    A_UINT32   rx_multicast_bytes;
+    A_UINT32   rx_broadcast_pkts;
+    A_UINT32   rx_broadcast_bytes;
+    A_UINT32   rx_fragment_pkt;
+
+    A_UINT32   rx_errors;
+    A_UINT32   rx_crcerr;
+    A_UINT32   rx_key_cache_miss;
+    A_UINT32   rx_decrypt_err;
+    A_UINT32   rx_duplicate_frames;
+    A_INT32    rx_unicast_rate;
+}POSTPACK rx_stats_t;
+
+typedef PREPACK struct {
+    A_UINT32   tkip_local_mic_failure;
+    A_UINT32   tkip_counter_measures_invoked;
+    A_UINT32   tkip_replays;
+    A_UINT32   tkip_format_errors;
+    A_UINT32   ccmp_format_errors;
+    A_UINT32   ccmp_replays;
+}POSTPACK tkip_ccmp_stats_t;
+
+typedef PREPACK struct {
+    A_UINT32   power_save_failure_cnt;
+}POSTPACK pm_stats_t;
+
+typedef PREPACK struct {
+    A_UINT32    cs_bmiss_cnt;
+    A_UINT32    cs_lowRssi_cnt;
+    A_UINT16    cs_connect_cnt;
+    A_UINT16    cs_disconnect_cnt;
+    A_INT16     cs_aveBeacon_rssi;
+    A_UINT16    cs_roam_count;
+    A_UINT16    cs_rssi;
+    A_UINT8     cs_snr;
+    A_UINT8     cs_aveBeacon_snr;
+    A_UINT8     cs_lastRoam_msec;
+} POSTPACK cserv_stats_t;
+
+typedef PREPACK struct {
+    tx_stats_t          tx_stats;
+    rx_stats_t          rx_stats;
+    tkip_ccmp_stats_t   tkipCcmpStats;
+}POSTPACK wlan_net_stats_t;
+
+typedef PREPACK struct {
+    A_UINT32    wow_num_pkts_dropped;
+    A_UINT16    wow_num_events_discarded;
+    A_UINT8     wow_num_host_pkt_wakeups;
+    A_UINT8     wow_num_host_event_wakeups;
+} POSTPACK wlan_wow_stats_t;
+
+typedef PREPACK struct {
+    A_UINT32            lqVal;
+    A_INT32             noise_floor_calibation;
+    pm_stats_t          pmStats;
+    wlan_net_stats_t    txrxStats;
+    wlan_wow_stats_t    wowStats;
+    cserv_stats_t       cservStats;
+} POSTPACK WMI_TARGET_STATS;
+
+/*
+ * WMI_RSSI_THRESHOLD_EVENTID.
+ * Indicate the RSSI events to host. Events are indicated when we breach a
+ * thresold value.
+ */
+typedef enum{
+    WMI_RSSI_THRESHOLD1_ABOVE = 0,
+    WMI_RSSI_THRESHOLD2_ABOVE,
+    WMI_RSSI_THRESHOLD3_ABOVE,
+    WMI_RSSI_THRESHOLD4_ABOVE,
+    WMI_RSSI_THRESHOLD5_ABOVE,
+    WMI_RSSI_THRESHOLD6_ABOVE,
+    WMI_RSSI_THRESHOLD1_BELOW,
+    WMI_RSSI_THRESHOLD2_BELOW,
+    WMI_RSSI_THRESHOLD3_BELOW,
+    WMI_RSSI_THRESHOLD4_BELOW,
+    WMI_RSSI_THRESHOLD5_BELOW,
+    WMI_RSSI_THRESHOLD6_BELOW
+}WMI_RSSI_THRESHOLD_VAL;
+
+typedef PREPACK struct {
+    A_INT16 rssi;
+    A_UINT8 range;
+}POSTPACK WMI_RSSI_THRESHOLD_EVENT;
+
+/*
+ *  WMI_ERROR_REPORT_EVENTID
+ */
+typedef enum{
+    WMI_TARGET_PM_ERR_FAIL      = 0x00000001,
+    WMI_TARGET_KEY_NOT_FOUND    = 0x00000002,
+    WMI_TARGET_DECRYPTION_ERR   = 0x00000004,
+    WMI_TARGET_BMISS            = 0x00000008,
+    WMI_PSDISABLE_NODE_JOIN     = 0x00000010,
+    WMI_TARGET_COM_ERR          = 0x00000020,
+    WMI_TARGET_FATAL_ERR        = 0x00000040
+} WMI_TARGET_ERROR_VAL;
+
+typedef PREPACK struct {
+    A_UINT32 errorVal;
+}POSTPACK  WMI_TARGET_ERROR_REPORT_EVENT;
+
+typedef PREPACK struct {
+    A_UINT8 retrys;
+}POSTPACK  WMI_TX_RETRY_ERR_EVENT;
+
+typedef enum{
+    WMI_SNR_THRESHOLD1_ABOVE = 1,
+    WMI_SNR_THRESHOLD1_BELOW,
+    WMI_SNR_THRESHOLD2_ABOVE,
+    WMI_SNR_THRESHOLD2_BELOW,
+    WMI_SNR_THRESHOLD3_ABOVE,
+    WMI_SNR_THRESHOLD3_BELOW,
+    WMI_SNR_THRESHOLD4_ABOVE,
+    WMI_SNR_THRESHOLD4_BELOW
+} WMI_SNR_THRESHOLD_VAL;
+
+typedef PREPACK struct {
+    A_UINT8 range;  /* WMI_SNR_THRESHOLD_VAL */
+    A_UINT8 snr;
+}POSTPACK  WMI_SNR_THRESHOLD_EVENT;
+
+typedef enum{
+    WMI_LQ_THRESHOLD1_ABOVE = 1,
+    WMI_LQ_THRESHOLD1_BELOW,
+    WMI_LQ_THRESHOLD2_ABOVE,
+    WMI_LQ_THRESHOLD2_BELOW,
+    WMI_LQ_THRESHOLD3_ABOVE,
+    WMI_LQ_THRESHOLD3_BELOW,
+    WMI_LQ_THRESHOLD4_ABOVE,
+    WMI_LQ_THRESHOLD4_BELOW
+} WMI_LQ_THRESHOLD_VAL;
+
+typedef PREPACK struct {
+    A_INT32 lq;
+    A_UINT8 range;  /* WMI_LQ_THRESHOLD_VAL */
+}POSTPACK  WMI_LQ_THRESHOLD_EVENT;
+/*
+ * WMI_REPORT_ROAM_TBL_EVENTID
+ */
+#define MAX_ROAM_TBL_CAND   5
+
+typedef PREPACK struct {
+    A_INT32 roam_util;
+    A_UINT8 bssid[ATH_MAC_LEN];
+    A_INT8  rssi;
+    A_INT8  rssidt;
+    A_INT8  last_rssi;
+    A_INT8  util;
+    A_INT8  bias;
+    A_UINT8 reserved; /* For alignment */
+} POSTPACK WMI_BSS_ROAM_INFO;
+
+
+typedef PREPACK struct {
+    A_UINT16  roamMode;
+    A_UINT16  numEntries;
+    WMI_BSS_ROAM_INFO bssRoamInfo[1];
+} POSTPACK WMI_TARGET_ROAM_TBL;
+
+/*
+ *  WMI_CAC_EVENTID
+ */
+typedef enum {
+    CAC_INDICATION_ADMISSION = 0x00,
+    CAC_INDICATION_ADMISSION_RESP = 0x01,
+    CAC_INDICATION_DELETE = 0x02,
+    CAC_INDICATION_NO_RESP = 0x03,
+}CAC_INDICATION;
+
+#define WMM_TSPEC_IE_LEN   63
+
+typedef PREPACK struct {
+    A_UINT8 ac;
+    A_UINT8 cac_indication;
+    A_UINT8 statusCode;
+    A_UINT8 tspecSuggestion[WMM_TSPEC_IE_LEN];
+}POSTPACK  WMI_CAC_EVENT;
+
+/*
+ * WMI_APLIST_EVENTID
+ */
+
+typedef enum {
+    APLIST_VER1 = 1,
+} APLIST_VER;
+
+typedef PREPACK struct {
+    A_UINT8     bssid[ATH_MAC_LEN];
+    A_UINT16    channel;
+} POSTPACK  WMI_AP_INFO_V1;
+
+typedef PREPACK union {
+    WMI_AP_INFO_V1  apInfoV1;
+} POSTPACK WMI_AP_INFO;
+
+typedef PREPACK struct {
+    A_UINT8     apListVer;
+    A_UINT8     numAP;
+    WMI_AP_INFO apList[1];
+} POSTPACK WMI_APLIST_EVENT;
+
+/*
+ * developer commands
+ */
+
+/*
+ * WMI_SET_BITRATE_CMDID
+ *
+ * Get bit rate cmd uses same definition as set bit rate cmd
+ */
+typedef enum {
+    RATE_AUTO   = -1,
+    RATE_1Mb    = 0,
+    RATE_2Mb    = 1,
+    RATE_5_5Mb  = 2,
+    RATE_11Mb   = 3,
+    RATE_6Mb    = 4,
+    RATE_9Mb    = 5,
+    RATE_12Mb   = 6,
+    RATE_18Mb   = 7,
+    RATE_24Mb   = 8,
+    RATE_36Mb   = 9,
+    RATE_48Mb   = 10,
+    RATE_54Mb   = 11,
+} WMI_BIT_RATE;
+
+typedef PREPACK struct {
+    A_INT8      rateIndex;          /* see WMI_BIT_RATE */
+} POSTPACK WMI_BIT_RATE_CMD, WMI_BIT_RATE_REPLY;
+
+/*
+ * WMI_SET_FIXRATES_CMDID
+ *
+ * Get fix rates cmd uses same definition as set fix rates cmd
+ */
+typedef enum {
+    FIX_RATE_1Mb    = 0x1,
+    FIX_RATE_2Mb    = 0x2,
+    FIX_RATE_5_5Mb  = 0x4,
+    FIX_RATE_11Mb   = 0x8,
+    FIX_RATE_6Mb    = 0x10,
+    FIX_RATE_9Mb    = 0x20,
+    FIX_RATE_12Mb   = 0x40,
+    FIX_RATE_18Mb   = 0x80,
+    FIX_RATE_24Mb   = 0x100,
+    FIX_RATE_36Mb   = 0x200,
+    FIX_RATE_48Mb   = 0x400,
+    FIX_RATE_54Mb   = 0x800,
+} WMI_FIX_RATES_MASK;
+
+typedef PREPACK struct {
+    A_UINT16      fixRateMask;          /* see WMI_BIT_RATE */
+} POSTPACK WMI_FIX_RATES_CMD, WMI_FIX_RATES_REPLY;
+
+/*
+ * WMI_SET_RECONNECT_AUTH_MODE_CMDID
+ *
+ * Set authentication mode
+ */
+typedef enum {
+    RECONN_DO_AUTH = 0x00,
+    RECONN_NOT_AUTH = 0x01
+} WMI_AUTH_MODE;
+
+typedef PREPACK struct {
+    A_UINT8 mode;
+} POSTPACK WMI_SET_AUTH_MODE_CMD;
+
+/*
+ * WMI_SET_REASSOC_MODE_CMDID
+ *
+ * Set authentication mode
+ */
+typedef enum {
+    REASSOC_DO_DISASSOC = 0x00,
+    REASSOC_DONOT_DISASSOC = 0x01
+} WMI_REASSOC_MODE;
+
+typedef PREPACK struct {
+    A_UINT8 mode;
+}POSTPACK WMI_SET_REASSOC_MODE_CMD;
+
+typedef enum {
+    ROAM_DATA_TIME = 1,            /* Get The Roam Time Data */
+} ROAM_DATA_TYPE;
+
+typedef PREPACK struct {
+    A_UINT32        disassoc_time;
+    A_UINT32        no_txrx_time;
+    A_UINT32        assoc_time;
+    A_UINT32        allow_txrx_time;
+    A_UINT32        last_data_txrx_time;
+    A_UINT32        first_data_txrx_time;
+    A_UINT8         disassoc_bssid[ATH_MAC_LEN];
+    A_INT8          disassoc_bss_rssi;
+    A_UINT8         assoc_bssid[ATH_MAC_LEN];
+    A_INT8          assoc_bss_rssi;
+} POSTPACK WMI_TARGET_ROAM_TIME;
+
+typedef PREPACK struct {
+    PREPACK union {
+        WMI_TARGET_ROAM_TIME roamTime;
+    } POSTPACK u;
+    A_UINT8 roamDataType ;
+} POSTPACK WMI_TARGET_ROAM_DATA;
+
+typedef enum {
+    WMI_WMM_DISABLED = 0,
+    WMI_WMM_ENABLED
+} WMI_WMM_STATUS;
+
+typedef PREPACK struct {
+    A_UINT8    status;
+}POSTPACK WMI_SET_WMM_CMD;
+
+typedef enum {
+    WMI_TXOP_DISABLED = 0,
+    WMI_TXOP_ENABLED
+} WMI_TXOP_CFG;
+
+typedef PREPACK struct {
+    A_UINT8    txopEnable;
+}POSTPACK WMI_SET_WMM_TXOP_CMD;
+
+typedef PREPACK struct {
+    A_UINT8 keepaliveInterval;
+} POSTPACK WMI_SET_KEEPALIVE_CMD;
+
+typedef PREPACK struct {
+    A_BOOL configured;
+    A_UINT8 keepaliveInterval;
+} POSTPACK WMI_GET_KEEPALIVE_CMD;
+
+/*
+ * Add Application specified IE to a management frame
+ */
+#define WMI_MAX_IE_LEN  78
+
+typedef PREPACK struct {
+    A_UINT8 mgmtFrmType;  /* one of WMI_MGMT_FRAME_TYPE */
+    A_UINT8 ieLen;    /* Length  of the IE that should be added to the MGMT frame */
+    A_UINT8 ieInfo[1];
+} POSTPACK WMI_SET_APPIE_CMD;
+
+/*
+ * Notify the WSC registration status to the target
+ */
+#define WSC_REG_ACTIVE     1
+#define WSC_REG_INACTIVE   0
+/* Generic Hal Interface for setting hal paramters. */
+/* Add new Set HAL Param cmdIds here for newer params */
+typedef enum {
+   WHAL_SETCABTO_CMDID = 1,
+}WHAL_CMDID;
+
+typedef PREPACK struct {
+    A_UINT8 cabTimeOut;
+} POSTPACK WHAL_SETCABTO_PARAM;
+
+typedef PREPACK struct {
+    A_UINT8  whalCmdId;
+    A_UINT8 data[1];
+} POSTPACK WHAL_PARAMCMD;
+
+
+#define WOW_MAX_FILTER_LISTS 1 /*4*/
+#define WOW_MAX_FILTERS_PER_LIST 4
+#define WOW_PATTERN_SIZE 64
+#define WOW_MASK_SIZE 64
+
+typedef PREPACK struct {
+    A_UINT8 wow_valid_filter;
+    A_UINT8 wow_filter_id;
+    A_UINT8 wow_filter_size;
+    A_UINT8 wow_filter_offset;
+    A_UINT8 wow_filter_mask[WOW_MASK_SIZE];
+    A_UINT8 wow_filter_pattern[WOW_PATTERN_SIZE];
+} POSTPACK WOW_FILTER;
+
+
+typedef PREPACK struct {
+    A_UINT8 wow_valid_list;
+    A_UINT8 wow_list_id;
+    A_UINT8 wow_num_filters;
+    A_UINT8 wow_total_list_size;
+    WOW_FILTER list[WOW_MAX_FILTERS_PER_LIST];
+} POSTPACK WOW_FILTER_LIST;
+
+typedef PREPACK struct {
+    A_BOOL awake;
+    A_BOOL asleep;
+} POSTPACK WMI_SET_HOST_SLEEP_MODE_CMD;
+
+typedef PREPACK struct {
+    A_BOOL enable_wow;
+} POSTPACK WMI_SET_WOW_MODE_CMD;
+
+typedef PREPACK struct {
+    A_UINT8 filter_list_id;
+} POSTPACK WMI_GET_WOW_LIST_CMD;
+
+/*
+ * WMI_GET_WOW_LIST_CMD reply
+ */
+typedef PREPACK struct {
+    A_UINT8     num_filters;     /* number of patterns in reply */
+    A_UINT8     this_filter_num; /*  this is filter # x of total num_filters */
+    A_UINT8     wow_mode;
+    A_UINT8     host_mode;
+    WOW_FILTER  wow_filters[1];
+} POSTPACK WMI_GET_WOW_LIST_REPLY;
+
+typedef PREPACK struct {
+    A_UINT8 filter_list_id;
+    A_UINT8 filter_size;
+    A_UINT8 filter_offset;
+    A_UINT8 filter[1];
+} POSTPACK WMI_ADD_WOW_PATTERN_CMD;
+
+typedef PREPACK struct {
+    A_UINT16 filter_list_id;
+    A_UINT16 filter_id;
+} POSTPACK WMI_DEL_WOW_PATTERN_CMD;
+
+typedef PREPACK struct {
+    A_UINT8 macaddr[ATH_MAC_LEN];
+} POSTPACK WMI_SET_MAC_ADDRESS_CMD;
+
+/* 
+ * WMI_SET_AKMP_PARAMS_CMD
+ */
+
+#define WMI_AKMP_MULTI_PMKID_EN   0x000001
+
+typedef PREPACK struct {
+    A_UINT32    akmpInfo;
+} POSTPACK WMI_SET_AKMP_PARAMS_CMD;
+
+typedef PREPACK struct {
+    A_UINT8 pmkid[WMI_PMKID_LEN];
+} POSTPACK WMI_PMKID;
+
+/*
+ * WMI_SET_PMKID_LIST_CMD
+ */
+#define WMI_MAX_PMKID_CACHE   8
+
+typedef PREPACK struct {
+    A_UINT32    numPMKID;
+    WMI_PMKID   pmkidList[WMI_MAX_PMKID_CACHE];
+} POSTPACK WMI_SET_PMKID_LIST_CMD;
+
+/*
+ * WMI_GET_PMKID_LIST_CMD  Reply
+ * Following the Number of PMKIDs is the list of PMKIDs
+ */
+typedef PREPACK struct {
+    A_UINT32    numPMKID;
+    WMI_PMKID   pmkidList[1];
+} POSTPACK WMI_PMKID_LIST_REPLY;
+
+/* index used for priority streams */
+typedef enum {
+    WMI_NOT_MAPPED  = -1,
+    WMI_CONTROL_PRI = 0,
+    WMI_BEST_EFFORT_PRI = 1,
+    WMI_LOW_PRI = 2,
+    WMI_HIGH_PRI = 3,
+    WMI_HIGHEST_PRI,
+    WMI_PRI_MAX_COUNT
+} WMI_PRI_STREAM_ID;
+
+#ifndef ATH_TARGET
+#include "athendpack.h"
+#endif
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _WMI_H_ */

Added: trunk/src/target/AR6kSDK.build_sw.18/include/wmix.h
===================================================================
--- trunk/src/target/AR6kSDK.build_sw.18/include/wmix.h	                        (rev 0)
+++ trunk/src/target/AR6kSDK.build_sw.18/include/wmix.h	2008-07-10 11:59:08 UTC (rev 4522)
@@ -0,0 +1,233 @@
+/*
+ * Copyright (c) 2004-2005 Atheros Communications Inc.
+ * All rights reserved.
+ *
+ *
+ * $ATH_LICENSE_HOSTSDK0_C$
+ *
+ * This file contains extensions of the WMI protocol specified in the
+ * Wireless Module Interface (WMI).  It includes definitions of all
+ * extended commands and events.  Extensions include useful commands
+ * that are not directly related to wireless activities.  They may
+ * be hardware-specific, and they might not be supported on all
+ * implementations.
+ *
+ * Extended WMIX commands are encapsulated in a WMI message with
+ * cmd=WMI_EXTENSION_CMD.
+ *
+ */
+
+#ifndef _WMIX_H_
+#define _WMIX_H_
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+#ifndef ATH_TARGET
+#include "athstartpack.h"
+#endif
+
+#include "dbglog.h"
+
+/*
+ * Extended WMI commands are those that are needed during wireless
+ * operation, but which are not really wireless commands.  This allows,
+ * for instance, platform-specific commands.  Extended WMI commands are
+ * embedded in a WMI command message with WMI_COMMAND_ID=WMI_EXTENSION_CMDID.
+ * Extended WMI events are similarly embedded in a WMI event message with
+ * WMI_EVENT_ID=WMI_EXTENSION_EVENTID.
+ */
+typedef PREPACK struct {
+    A_UINT32    commandId;
+} POSTPACK WMIX_CMD_HDR;
+
+typedef enum {
+    WMIX_DSETOPEN_REPLY_CMDID           = 0x2001,
+    WMIX_DSETDATA_REPLY_CMDID,
+    WMIX_GPIO_OUTPUT_SET_CMDID,
+    WMIX_GPIO_INPUT_GET_CMDID,
+    WMIX_GPIO_REGISTER_SET_CMDID,
+    WMIX_GPIO_REGISTER_GET_CMDID,
+    WMIX_GPIO_INTR_ACK_CMDID,
+    WMIX_HB_CHALLENGE_RESP_CMDID,
+    WMIX_DBGLOG_CFG_MODULE_CMDID,
+} WMIX_COMMAND_ID;
+
+typedef enum {
+    WMIX_DSETOPENREQ_EVENTID            = 0x3001,
+    WMIX_DSETCLOSE_EVENTID,
+    WMIX_DSETDATAREQ_EVENTID,
+    WMIX_GPIO_INTR_EVENTID,
+    WMIX_GPIO_DATA_EVENTID,
+    WMIX_GPIO_ACK_EVENTID,
+    WMIX_HB_CHALLENGE_RESP_EVENTID,
+    WMIX_DBGLOG_EVENTID,
+} WMIX_EVENT_ID;
+
+/*
+ * =============DataSet support=================
+ */
+
+/*
+ * WMIX_DSETOPENREQ_EVENTID
+ * DataSet Open Request Event
+ */
+typedef PREPACK struct {
+    A_UINT32 dset_id;
+    A_UINT32 targ_dset_handle;  /* echo'ed, not used by Host, */
+    A_UINT32 targ_reply_fn;     /* echo'ed, not used by Host, */
+    A_UINT32 targ_reply_arg;    /* echo'ed, not used by Host, */
+} POSTPACK WMIX_DSETOPENREQ_EVENT;
+
+/*
+ * WMIX_DSETCLOSE_EVENTID
+ * DataSet Close Event
+ */
+typedef PREPACK struct {
+    A_UINT32 access_cookie;
+} POSTPACK WMIX_DSETCLOSE_EVENT;
+
+/*
+ * WMIX_DSETDATAREQ_EVENTID
+ * DataSet Data Request Event
+ */
+typedef PREPACK struct {
+    A_UINT32 access_cookie;
+    A_UINT32 offset;
+    A_UINT32 length;
+    A_UINT32 targ_buf;         /* echo'ed, not used by Host, */
+    A_UINT32 targ_reply_fn;    /* echo'ed, not used by Host, */
+    A_UINT32 targ_reply_arg;   /* echo'ed, not used by Host, */
+} POSTPACK WMIX_DSETDATAREQ_EVENT;
+
+typedef PREPACK struct {
+    A_UINT32              status;
+    A_UINT32              targ_dset_handle;
+    A_UINT32              targ_reply_fn;
+    A_UINT32              targ_reply_arg;
+    A_UINT32              access_cookie;
+    A_UINT32              size;
+    A_UINT32              version;
+} POSTPACK WMIX_DSETOPEN_REPLY_CMD;
+
+typedef PREPACK struct {
+    A_UINT32              status;
+    A_UINT32              targ_buf;
+    A_UINT32              targ_reply_fn;
+    A_UINT32              targ_reply_arg;
+    A_UINT32              length;
+    A_UINT8               buf[1];
+} POSTPACK WMIX_DSETDATA_REPLY_CMD;
+
+
+/*
+ * =============GPIO support=================
+ * All masks are 18-bit masks with bit N operating on GPIO pin N.
+ */
+
+#include "gpio.h"
+
+/*
+ * Set GPIO pin output state.
+ * In order for output to be driven, a pin must be enabled for output.
+ * This can be done during initialization through the GPIO Configuration
+ * DataSet, or during operation with the enable_mask.
+ *
+ * If a request is made to simultaneously set/clear or set/disable or
+ * clear/disable or disable/enable, results are undefined.
+ */
+typedef PREPACK struct {
+    A_UINT32              set_mask;             /* pins to set */
+    A_UINT32              clear_mask;           /* pins to clear */
+    A_UINT32              enable_mask;          /* pins to enable for output */
+    A_UINT32              disable_mask;         /* pins to disable/tristate */
+} POSTPACK WMIX_GPIO_OUTPUT_SET_CMD;
+
+/*
+ * Set a GPIO register.  For debug/exceptional cases.
+ * Values for gpioreg_id are GPIO_REGISTER_IDs, defined in a
+ * platform-dependent header.
+ */
+typedef PREPACK struct {
+    A_UINT32              gpioreg_id;           /* GPIO register ID */
+    A_UINT32              value;                /* value to write */
+} POSTPACK WMIX_GPIO_REGISTER_SET_CMD;
+
+/* Get a GPIO register.  For debug/exceptional cases. */
+typedef PREPACK struct {
+    A_UINT32              gpioreg_id;           /* GPIO register to read */
+} POSTPACK WMIX_GPIO_REGISTER_GET_CMD;
+
+/*
+ * Host acknowledges and re-arms GPIO interrupts.  A single
+ * message should be used to acknowledge all interrupts that
+ * were delivered in an earlier WMIX_GPIO_INTR_EVENT message.
+ */
+typedef PREPACK struct {
+    A_UINT32              ack_mask;             /* interrupts to acknowledge */
+} POSTPACK WMIX_GPIO_INTR_ACK_CMD;
+
+/*
+ * Target informs Host of GPIO interrupts that have ocurred since the
+ * last WMIX_GIPO_INTR_ACK_CMD was received.  Additional information --
+ * the current GPIO input values is provided -- in order to support
+ * use of a GPIO interrupt as a Data Valid signal for other GPIO pins.
+ */
+typedef PREPACK struct {
+    A_UINT32              intr_mask;            /* pending GPIO interrupts */
+    A_UINT32              input_values;         /* recent GPIO input values */
+} POSTPACK WMIX_GPIO_INTR_EVENT;
+
+/*
+ * Target responds to Host's earlier WMIX_GPIO_INPUT_GET_CMDID request
+ * using a GPIO_DATA_EVENT with
+ *   value set to the mask of GPIO pin inputs and
+ *   reg_id set to GPIO_ID_NONE
+ *
+ *
+ * Target responds to Hosts's earlier WMIX_GPIO_REGISTER_GET_CMDID request
+ * using a GPIO_DATA_EVENT with
+ *   value set to the value of the requested register and
+ *   reg_id identifying the register (reflects the original request)
+ * NB: reg_id supports the future possibility of unsolicited
+ * WMIX_GPIO_DATA_EVENTs (for polling GPIO input), and it may
+ * simplify Host GPIO support.
+ */
+typedef PREPACK struct {
+    A_UINT32              value;
+    A_UINT32              reg_id;
+} POSTPACK WMIX_GPIO_DATA_EVENT;
+
+/*
+ * =============Error Detection support=================
+ */
+
+/*
+ * WMIX_HB_CHALLENGE_RESP_CMDID
+ * Heartbeat Challenge Response command
+ */
+typedef PREPACK struct {
+    A_UINT32              cookie;
+    A_UINT32              source;
+} POSTPACK WMIX_HB_CHALLENGE_RESP_CMD;
+
+/*
+ * WMIX_HB_CHALLENGE_RESP_EVENTID
+ * Heartbeat Challenge Response Event
+ */
+#define WMIX_HB_CHALLENGE_RESP_EVENT WMIX_HB_CHALLENGE_RESP_CMD
+
+typedef PREPACK struct {
+    struct dbglog_config_s config;
+} POSTPACK WMIX_DBGLOG_CFG_MODULE_CMD;
+
+#ifndef ATH_TARGET
+#include "athendpack.h"
+#endif
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif /* _WMIX_H_ */





More information about the commitlog mailing list