drivers/net/wireless/orinoco/hermes.h - kernel/msm - Gitiles

 /* hermes.h
  *
  * Driver core for the "Hermes" wireless MAC controller, as used in
  * the Lucent Orinoco and Cabletron RoamAbout cards. It should also
  * work on the hfa3841 and hfa3842 MAC controller chips used in the
  * Prism I & II chipsets.
  *
  * This is not a complete driver, just low-level access routines for
  * the MAC controller itself.
  *
  * Based on the prism2 driver from Absolute Value Systems' linux-wlan
  * project, the Linux wvlan_cs driver, Lucent's HCF-Light
  * (wvlan_hcf.c) library, and the NetBSD wireless driver.
  *
  * Copyright (C) 2000, David Gibson, Linuxcare Australia.
  * (C) Copyright David Gibson, IBM Corp. 2001-2003.
  *
  * Portions taken from hfa384x.h.
  * Copyright (C) 1999 AbsoluteValue Systems, Inc. All Rights Reserved.
  *
  * This file distributed under the GPL, version 2.
  */

 #ifndef _HERMES_H
 #define _HERMES_H

 /* Notes on locking:
  *
  * As a module of low level hardware access routines, there is no
  * locking. Users of this module should ensure that they serialize
  * access to the hermes_t structure, and to the hardware
 */

 #include <linux/if_ether.h>
 #include <linux/io.h>

 /*
  * Limits and constants
  */
 #define		HERMES_ALLOC_LEN_MIN		(4)
 #define		HERMES_ALLOC_LEN_MAX		(2400)
 #define		HERMES_LTV_LEN_MAX		(34)
 #define		HERMES_BAP_DATALEN_MAX		(4096)
 #define		HERMES_BAP_OFFSET_MAX		(4096)
 #define		HERMES_PORTID_MAX		(7)
 #define		HERMES_NUMPORTS_MAX		(HERMES_PORTID_MAX+1)
 #define		HERMES_PDR_LEN_MAX		(260)	/* in bytes, from EK */
 #define		HERMES_PDA_RECS_MAX		(200)	/* a guess */
 #define		HERMES_PDA_LEN_MAX		(1024)	/* in bytes, from EK */
 #define		HERMES_SCANRESULT_MAX		(35)
 #define		HERMES_CHINFORESULT_MAX		(8)
 #define		HERMES_MAX_MULTICAST		(16)
 #define		HERMES_MAGIC			(0x7d1f)

 /*
  * Hermes register offsets
  */
 #define		HERMES_CMD			(0x00)
 #define		HERMES_PARAM0			(0x02)
 #define		HERMES_PARAM1			(0x04)
 #define		HERMES_PARAM2			(0x06)
 #define		HERMES_STATUS			(0x08)
 #define		HERMES_RESP0			(0x0A)
 #define		HERMES_RESP1			(0x0C)
 #define		HERMES_RESP2			(0x0E)
 #define		HERMES_INFOFID			(0x10)
 #define		HERMES_RXFID			(0x20)
 #define		HERMES_ALLOCFID			(0x22)
 #define		HERMES_TXCOMPLFID		(0x24)
 #define		HERMES_SELECT0			(0x18)
 #define		HERMES_OFFSET0			(0x1C)
 #define		HERMES_DATA0			(0x36)
 #define		HERMES_SELECT1			(0x1A)
 #define		HERMES_OFFSET1			(0x1E)
 #define		HERMES_DATA1			(0x38)
 #define		HERMES_EVSTAT			(0x30)
 #define		HERMES_INTEN			(0x32)
 #define		HERMES_EVACK			(0x34)
 #define		HERMES_CONTROL			(0x14)
 #define		HERMES_SWSUPPORT0		(0x28)
 #define		HERMES_SWSUPPORT1		(0x2A)
 #define		HERMES_SWSUPPORT2		(0x2C)
 #define		HERMES_AUXPAGE			(0x3A)
 #define		HERMES_AUXOFFSET		(0x3C)
 #define		HERMES_AUXDATA			(0x3E)

 /*
  * CMD register bitmasks
  */
 #define		HERMES_CMD_BUSY			(0x8000)
 #define		HERMES_CMD_AINFO		(0x7f00)
 #define		HERMES_CMD_MACPORT		(0x0700)
 #define		HERMES_CMD_RECL			(0x0100)
 #define		HERMES_CMD_WRITE		(0x0100)
 #define		HERMES_CMD_PROGMODE		(0x0300)
 #define		HERMES_CMD_CMDCODE		(0x003f)

 /*
  * STATUS register bitmasks
  */
 #define		HERMES_STATUS_RESULT		(0x7f00)
 #define		HERMES_STATUS_CMDCODE		(0x003f)

 /*
  * OFFSET register bitmasks
  */
 #define		HERMES_OFFSET_BUSY		(0x8000)
 #define		HERMES_OFFSET_ERR		(0x4000)
 #define		HERMES_OFFSET_DATAOFF		(0x0ffe)

 /*
  * Event register bitmasks (INTEN, EVSTAT, EVACK)
  */
 #define		HERMES_EV_TICK			(0x8000)
 #define		HERMES_EV_WTERR			(0x4000)
 #define		HERMES_EV_INFDROP		(0x2000)
 #define		HERMES_EV_INFO			(0x0080)
 #define		HERMES_EV_DTIM			(0x0020)
 #define		HERMES_EV_CMD			(0x0010)
 #define		HERMES_EV_ALLOC			(0x0008)
 #define		HERMES_EV_TXEXC			(0x0004)
 #define		HERMES_EV_TX			(0x0002)
 #define		HERMES_EV_RX			(0x0001)

 /*
  * Command codes
  */
 /*--- Controller Commands ----------------------------*/
 #define		HERMES_CMD_INIT			(0x0000)
 #define		HERMES_CMD_ENABLE		(0x0001)
 #define		HERMES_CMD_DISABLE		(0x0002)
 #define		HERMES_CMD_DIAG			(0x0003)

 /*--- Buffer Mgmt Commands ---------------------------*/
 #define		HERMES_CMD_ALLOC		(0x000A)
 #define		HERMES_CMD_TX			(0x000B)

 /*--- Regulate Commands ------------------------------*/
 #define		HERMES_CMD_NOTIFY		(0x0010)
 #define		HERMES_CMD_INQUIRE		(0x0011)

 /*--- Configure Commands -----------------------------*/
 #define		HERMES_CMD_ACCESS		(0x0021)
 #define		HERMES_CMD_DOWNLD		(0x0022)

 /*--- Serial I/O Commands ----------------------------*/
 #define		HERMES_CMD_READMIF		(0x0030)
 #define		HERMES_CMD_WRITEMIF		(0x0031)

 /*--- Debugging Commands -----------------------------*/
 #define 	HERMES_CMD_TEST			(0x0038)


 /* Test command arguments */
 #define		HERMES_TEST_SET_CHANNEL		0x0800
 #define		HERMES_TEST_MONITOR		0x0b00
 #define		HERMES_TEST_STOP		0x0f00

 /* Authentication algorithms */
 #define		HERMES_AUTH_OPEN		1
 #define		HERMES_AUTH_SHARED_KEY		2

 /* WEP settings */
 #define		HERMES_WEP_PRIVACY_INVOKED	0x0001
 #define		HERMES_WEP_EXCL_UNENCRYPTED	0x0002
 #define		HERMES_WEP_HOST_ENCRYPT		0x0010
 #define		HERMES_WEP_HOST_DECRYPT		0x0080

 /* Symbol hostscan options */
 #define		HERMES_HOSTSCAN_SYMBOL_5SEC	0x0001
 #define		HERMES_HOSTSCAN_SYMBOL_ONCE	0x0002
 #define		HERMES_HOSTSCAN_SYMBOL_PASSIVE	0x0040
 #define		HERMES_HOSTSCAN_SYMBOL_BCAST	0x0080

 /*
  * Frame structures and constants
  */

 #define HERMES_DESCRIPTOR_OFFSET	0
 #define HERMES_802_11_OFFSET		(14)
 #define HERMES_802_3_OFFSET		(14+32)
 #define HERMES_802_2_OFFSET		(14+32+14)
 #define HERMES_TXCNTL2_OFFSET		(HERMES_802_3_OFFSET - 2)

 #define HERMES_RXSTAT_ERR		(0x0003)
 #define	HERMES_RXSTAT_BADCRC		(0x0001)
 #define	HERMES_RXSTAT_UNDECRYPTABLE	(0x0002)
 #define	HERMES_RXSTAT_MIC		(0x0010)	/* Frame contains MIC */
 #define	HERMES_RXSTAT_MACPORT		(0x0700)
 #define HERMES_RXSTAT_PCF		(0x1000)	/* Frame was received in CF period */
 #define	HERMES_RXSTAT_MIC_KEY_ID	(0x1800)	/* MIC key used */
 #define	HERMES_RXSTAT_MSGTYPE		(0xE000)
 #define	HERMES_RXSTAT_1042		(0x2000)	/* RFC-1042 frame */
 #define	HERMES_RXSTAT_TUNNEL		(0x4000)	/* bridge-tunnel encoded frame */
 #define	HERMES_RXSTAT_WMP		(0x6000)	/* Wavelan-II Management Protocol frame */

 /* Shift amount for key ID in RXSTAT and TXCTRL */
 #define	HERMES_MIC_KEY_ID_SHIFT		11

 struct hermes_tx_descriptor {
 	__le16 status;
 	__le16 reserved1;
 	__le16 reserved2;
 	__le32 sw_support;
 	u8 retry_count;
 	u8 tx_rate;
 	__le16 tx_control;
 } __attribute__ ((packed));

 #define HERMES_TXSTAT_RETRYERR		(0x0001)
 #define HERMES_TXSTAT_AGEDERR		(0x0002)
 #define HERMES_TXSTAT_DISCON		(0x0004)
 #define HERMES_TXSTAT_FORMERR		(0x0008)

 #define HERMES_TXCTRL_TX_OK		(0x0002)	/* ?? interrupt on Tx complete */
 #define HERMES_TXCTRL_TX_EX		(0x0004)	/* ?? interrupt on Tx exception */
 #define HERMES_TXCTRL_802_11		(0x0008)	/* We supply 802.11 header */
 #define HERMES_TXCTRL_MIC		(0x0010)	/* 802.3 + TKIP */
 #define HERMES_TXCTRL_MIC_KEY_ID	(0x1800)	/* MIC Key ID mask */
 #define HERMES_TXCTRL_ALT_RTRY		(0x0020)

 /* Inquiry constants and data types */

 #define HERMES_INQ_TALLIES		(0xF100)
 #define HERMES_INQ_SCAN			(0xF101)
 #define HERMES_INQ_CHANNELINFO		(0xF102)
 #define HERMES_INQ_HOSTSCAN		(0xF103)
 #define HERMES_INQ_HOSTSCAN_SYMBOL	(0xF104)
 #define HERMES_INQ_LINKSTATUS		(0xF200)
 #define HERMES_INQ_SEC_STAT_AGERE	(0xF202)

 struct hermes_tallies_frame {
 	__le16 TxUnicastFrames;
 	__le16 TxMulticastFrames;
 	__le16 TxFragments;
 	__le16 TxUnicastOctets;
 	__le16 TxMulticastOctets;
 	__le16 TxDeferredTransmissions;
 	__le16 TxSingleRetryFrames;
 	__le16 TxMultipleRetryFrames;
 	__le16 TxRetryLimitExceeded;
 	__le16 TxDiscards;
 	__le16 RxUnicastFrames;
 	__le16 RxMulticastFrames;
 	__le16 RxFragments;
 	__le16 RxUnicastOctets;
 	__le16 RxMulticastOctets;
 	__le16 RxFCSErrors;
 	__le16 RxDiscards_NoBuffer;
 	__le16 TxDiscardsWrongSA;
 	__le16 RxWEPUndecryptable;
 	__le16 RxMsgInMsgFragments;
 	__le16 RxMsgInBadMsgFragments;
 	/* Those last are probably not available in very old firmwares */
 	__le16 RxDiscards_WEPICVError;
 	__le16 RxDiscards_WEPExcluded;
 } __attribute__ ((packed));

 /* Grabbed from wlan-ng - Thanks Mark... - Jean II
  * This is the result of a scan inquiry command */
 /* Structure describing info about an Access Point */
 struct prism2_scan_apinfo {
 	__le16 channel;		/* Channel where the AP sits */
 	__le16 noise;		/* Noise level */
 	__le16 level;		/* Signal level */
 	u8 bssid[ETH_ALEN];	/* MAC address of the Access Point */
 	__le16 beacon_interv;	/* Beacon interval */
 	__le16 capabilities;	/* Capabilities */
 	__le16 essid_len;	/* ESSID length */
 	u8 essid[32];		/* ESSID of the network */
 	u8 rates[10];		/* Bit rate supported */
 	__le16 proberesp_rate;	/* Data rate of the response frame */
 	__le16 atim;		/* ATIM window time, Kus (hostscan only) */
 } __attribute__ ((packed));

 /* Same stuff for the Lucent/Agere card.
  * Thanks to h1kari <h1kari AT dachb0den.com> - Jean II */
 struct agere_scan_apinfo {
 	__le16 channel;		/* Channel where the AP sits */
 	__le16 noise;		/* Noise level */
 	__le16 level;		/* Signal level */
 	u8 bssid[ETH_ALEN];	/* MAC address of the Access Point */
 	__le16 beacon_interv;	/* Beacon interval */
 	__le16 capabilities;	/* Capabilities */
 	/* bits: 0-ess, 1-ibss, 4-privacy [wep] */
 	__le16 essid_len;	/* ESSID length */
 	u8 essid[32];		/* ESSID of the network */
 } __attribute__ ((packed));

 /* Moustafa: Scan structure for Symbol cards */
 struct symbol_scan_apinfo {
 	u8 channel;		/* Channel where the AP sits */
 	u8 unknown1;		/* 8 in 2.9x and 3.9x f/w, 0 otherwise */
 	__le16 noise;		/* Noise level */
 	__le16 level;		/* Signal level */
 	u8 bssid[ETH_ALEN];	/* MAC address of the Access Point */
 	__le16 beacon_interv;	/* Beacon interval */
 	__le16 capabilities;	/* Capabilities */
 	/* bits: 0-ess, 1-ibss, 4-privacy [wep] */
 	__le16 essid_len;	/* ESSID length */
 	u8 essid[32];		/* ESSID of the network */
 	__le16 rates[5];	/* Bit rate supported */
 	__le16 basic_rates;	/* Basic rates bitmask */
 	u8 unknown2[6];		/* Always FF:FF:FF:FF:00:00 */
 	u8 unknown3[8];		/* Always 0, appeared in f/w 3.91-68 */
 } __attribute__ ((packed));

 union hermes_scan_info {
 	struct agere_scan_apinfo	a;
 	struct prism2_scan_apinfo	p;
 	struct symbol_scan_apinfo	s;
 };

 /* Extended scan struct for HERMES_INQ_CHANNELINFO.
  * wl_lkm calls this an ACS scan (Automatic Channel Select).
  * Keep out of union hermes_scan_info because it is much bigger than
  * the older scan structures. */
 struct agere_ext_scan_info {
 	__le16	reserved0;

 	u8	noise;
 	u8	level;
 	u8	rx_flow;
 	u8	rate;
 	__le16	reserved1[2];

 	__le16	frame_control;
 	__le16	dur_id;
 	u8	addr1[ETH_ALEN];
 	u8	addr2[ETH_ALEN];
 	u8	bssid[ETH_ALEN];
 	__le16	sequence;
 	u8	addr4[ETH_ALEN];

 	__le16	data_length;

 	/* Next 3 fields do not get filled in. */
 	u8	daddr[ETH_ALEN];
 	u8	saddr[ETH_ALEN];
 	__le16	len_type;

 	__le64	timestamp;
 	__le16	beacon_interval;
 	__le16	capabilities;
 	u8	data[316];
 } __attribute__ ((packed));

 #define HERMES_LINKSTATUS_NOT_CONNECTED   (0x0000)
 #define HERMES_LINKSTATUS_CONNECTED       (0x0001)
 #define HERMES_LINKSTATUS_DISCONNECTED    (0x0002)
 #define HERMES_LINKSTATUS_AP_CHANGE       (0x0003)
 #define HERMES_LINKSTATUS_AP_OUT_OF_RANGE (0x0004)
 #define HERMES_LINKSTATUS_AP_IN_RANGE     (0x0005)
 #define HERMES_LINKSTATUS_ASSOC_FAILED    (0x0006)

 struct hermes_linkstatus {
 	__le16 linkstatus;         /* Link status */
 } __attribute__ ((packed));

 struct hermes_response {
 	u16 status, resp0, resp1, resp2;
 };

 /* "ID" structure - used for ESSID and station nickname */
 struct hermes_idstring {
 	__le16 len;
 	__le16 val[16];
 } __attribute__ ((packed));

 struct hermes_multicast {
 	u8 addr[HERMES_MAX_MULTICAST][ETH_ALEN];
 } __attribute__ ((packed));

 /* Timeouts */
 #define HERMES_BAP_BUSY_TIMEOUT (10000) /* In iterations of ~1us */

 /* Basic control structure */
 typedef struct hermes {
 	void __iomem *iobase;
 	int reg_spacing;
 #define HERMES_16BIT_REGSPACING	0
 #define HERMES_32BIT_REGSPACING	1
 	u16 inten; /* Which interrupts should be enabled? */
 } hermes_t;

 /* Register access convenience macros */
 #define hermes_read_reg(hw, off) \
 	(ioread16((hw)->iobase + ((off) << (hw)->reg_spacing)))
 #define hermes_write_reg(hw, off, val) \
 	(iowrite16((val), (hw)->iobase + ((off) << (hw)->reg_spacing)))
 #define hermes_read_regn(hw, name) hermes_read_reg((hw), HERMES_##name)
 #define hermes_write_regn(hw, name, val) \
 	hermes_write_reg((hw), HERMES_##name, (val))

 /* Function prototypes */
 void hermes_struct_init(hermes_t *hw, void __iomem *address, int reg_spacing);
 int hermes_init(hermes_t *hw);
 int hermes_docmd_wait(hermes_t *hw, u16 cmd, u16 parm0,
 		      struct hermes_response *resp);
 int hermes_doicmd_wait(hermes_t *hw, u16 cmd,
 		       u16 parm0, u16 parm1, u16 parm2,
 		       struct hermes_response *resp);
 int hermes_allocate(hermes_t *hw, u16 size, u16 *fid);

 int hermes_bap_pread(hermes_t *hw, int bap, void *buf, int len,
 		       u16 id, u16 offset);
 int hermes_bap_pwrite(hermes_t *hw, int bap, const void *buf, int len,
 			u16 id, u16 offset);
 int hermes_read_ltv(hermes_t *hw, int bap, u16 rid, unsigned buflen,
 		    u16 *length, void *buf);
 int hermes_write_ltv(hermes_t *hw, int bap, u16 rid,
 		      u16 length, const void *value);

 /* Inline functions */

 static inline int hermes_present(hermes_t *hw)
 {
 	return hermes_read_regn(hw, SWSUPPORT0) == HERMES_MAGIC;
 }

 static inline void hermes_set_irqmask(hermes_t *hw, u16 events)
 {
 	hw->inten = events;
 	hermes_write_regn(hw, INTEN, events);
 }

 static inline int hermes_enable_port(hermes_t *hw, int port)
 {
 	return hermes_docmd_wait(hw, HERMES_CMD_ENABLE | (port << 8),
 				 0, NULL);
 }

 static inline int hermes_disable_port(hermes_t *hw, int port)
 {
 	return hermes_docmd_wait(hw, HERMES_CMD_DISABLE | (port << 8),
 				 0, NULL);
 }

 /* Initiate an INQUIRE command (tallies or scan).  The result will come as an
  * information frame in __orinoco_ev_info() */
 static inline int hermes_inquire(hermes_t *hw, u16 rid)
 {
 	return hermes_docmd_wait(hw, HERMES_CMD_INQUIRE, rid, NULL);
 }

 #define HERMES_BYTES_TO_RECLEN(n) ((((n)+1)/2) + 1)
 #define HERMES_RECLEN_TO_BYTES(n) (((n)-1) * 2)

 /* Note that for the next two, the count is in 16-bit words, not bytes */
 static inline void hermes_read_words(struct hermes *hw, int off,
 				     void *buf, unsigned count)
 {
 	off = off << hw->reg_spacing;
 	ioread16_rep(hw->iobase + off, buf, count);
 }

 static inline void hermes_write_bytes(struct hermes *hw, int off,
 				      const char *buf, unsigned count)
 {
 	off = off << hw->reg_spacing;
 	iowrite16_rep(hw->iobase + off, buf, count >> 1);
 	if (unlikely(count & 1))
 		iowrite8(buf[count - 1], hw->iobase + off);
 }

 static inline void hermes_clear_words(struct hermes *hw, int off,
 				      unsigned count)
 {
 	unsigned i;

 	off = off << hw->reg_spacing;

 	for (i = 0; i < count; i++)
 		iowrite16(0, hw->iobase + off);
 }

 #define HERMES_READ_RECORD(hw, bap, rid, buf) \
 	(hermes_read_ltv((hw), (bap), (rid), sizeof(*buf), NULL, (buf)))
 #define HERMES_WRITE_RECORD(hw, bap, rid, buf) \
 	(hermes_write_ltv((hw), (bap), (rid), \
 			  HERMES_BYTES_TO_RECLEN(sizeof(*buf)), (buf)))

 static inline int hermes_read_wordrec(hermes_t *hw, int bap, u16 rid, u16 *word)
 {
 	__le16 rec;
 	int err;

 	err = HERMES_READ_RECORD(hw, bap, rid, &rec);
 	*word = le16_to_cpu(rec);
 	return err;
 }

 static inline int hermes_write_wordrec(hermes_t *hw, int bap, u16 rid, u16 word)
 {
 	__le16 rec = cpu_to_le16(word);
 	return HERMES_WRITE_RECORD(hw, bap, rid, &rec);
 }

 #endif  /* _HERMES_H */
	/* hermes.h
	*
	* Driver core for the "Hermes" wireless MAC controller, as used in
	* the Lucent Orinoco and Cabletron RoamAbout cards. It should also
	* work on the hfa3841 and hfa3842 MAC controller chips used in the
	* Prism I & II chipsets.
	*
	* This is not a complete driver, just low-level access routines for
	* the MAC controller itself.
	*
	* Based on the prism2 driver from Absolute Value Systems' linux-wlan
	* project, the Linux wvlan_cs driver, Lucent's HCF-Light
	* (wvlan_hcf.c) library, and the NetBSD wireless driver.
	*
	* Copyright (C) 2000, David Gibson, Linuxcare Australia.
	* (C) Copyright David Gibson, IBM Corp. 2001-2003.
	*
	* Portions taken from hfa384x.h.
	* Copyright (C) 1999 AbsoluteValue Systems, Inc. All Rights Reserved.
	*
	* This file distributed under the GPL, version 2.
	*/

	#ifndef _HERMES_H
	#define _HERMES_H

	/* Notes on locking:
	*
	* As a module of low level hardware access routines, there is no
	* locking. Users of this module should ensure that they serialize
	* access to the hermes_t structure, and to the hardware
	*/

	#include <linux/if_ether.h>
	#include <linux/io.h>

	/*
	* Limits and constants
	*/
	#define HERMES_ALLOC_LEN_MIN (4)
	#define HERMES_ALLOC_LEN_MAX (2400)
	#define HERMES_LTV_LEN_MAX (34)
	#define HERMES_BAP_DATALEN_MAX (4096)
	#define HERMES_BAP_OFFSET_MAX (4096)
	#define HERMES_PORTID_MAX (7)
	#define HERMES_NUMPORTS_MAX (HERMES_PORTID_MAX+1)
	#define HERMES_PDR_LEN_MAX (260) /* in bytes, from EK */
	#define HERMES_PDA_RECS_MAX (200) /* a guess */
	#define HERMES_PDA_LEN_MAX (1024) /* in bytes, from EK */
	#define HERMES_SCANRESULT_MAX (35)
	#define HERMES_CHINFORESULT_MAX (8)
	#define HERMES_MAX_MULTICAST (16)
	#define HERMES_MAGIC (0x7d1f)

	/*
	* Hermes register offsets
	*/
	#define HERMES_CMD (0x00)
	#define HERMES_PARAM0 (0x02)
	#define HERMES_PARAM1 (0x04)
	#define HERMES_PARAM2 (0x06)
	#define HERMES_STATUS (0x08)
	#define HERMES_RESP0 (0x0A)
	#define HERMES_RESP1 (0x0C)
	#define HERMES_RESP2 (0x0E)
	#define HERMES_INFOFID (0x10)
	#define HERMES_RXFID (0x20)
	#define HERMES_ALLOCFID (0x22)
	#define HERMES_TXCOMPLFID (0x24)
	#define HERMES_SELECT0 (0x18)
	#define HERMES_OFFSET0 (0x1C)
	#define HERMES_DATA0 (0x36)
	#define HERMES_SELECT1 (0x1A)
	#define HERMES_OFFSET1 (0x1E)
	#define HERMES_DATA1 (0x38)
	#define HERMES_EVSTAT (0x30)
	#define HERMES_INTEN (0x32)
	#define HERMES_EVACK (0x34)
	#define HERMES_CONTROL (0x14)
	#define HERMES_SWSUPPORT0 (0x28)
	#define HERMES_SWSUPPORT1 (0x2A)
	#define HERMES_SWSUPPORT2 (0x2C)
	#define HERMES_AUXPAGE (0x3A)
	#define HERMES_AUXOFFSET (0x3C)
	#define HERMES_AUXDATA (0x3E)

	/*
	* CMD register bitmasks
	*/
	#define HERMES_CMD_BUSY (0x8000)
	#define HERMES_CMD_AINFO (0x7f00)
	#define HERMES_CMD_MACPORT (0x0700)
	#define HERMES_CMD_RECL (0x0100)
	#define HERMES_CMD_WRITE (0x0100)
	#define HERMES_CMD_PROGMODE (0x0300)
	#define HERMES_CMD_CMDCODE (0x003f)

	/*
	* STATUS register bitmasks
	*/
	#define HERMES_STATUS_RESULT (0x7f00)
	#define HERMES_STATUS_CMDCODE (0x003f)

	/*
	* OFFSET register bitmasks
	*/
	#define HERMES_OFFSET_BUSY (0x8000)
	#define HERMES_OFFSET_ERR (0x4000)
	#define HERMES_OFFSET_DATAOFF (0x0ffe)

	/*
	* Event register bitmasks (INTEN, EVSTAT, EVACK)
	*/
	#define HERMES_EV_TICK (0x8000)
	#define HERMES_EV_WTERR (0x4000)
	#define HERMES_EV_INFDROP (0x2000)
	#define HERMES_EV_INFO (0x0080)
	#define HERMES_EV_DTIM (0x0020)
	#define HERMES_EV_CMD (0x0010)
	#define HERMES_EV_ALLOC (0x0008)
	#define HERMES_EV_TXEXC (0x0004)
	#define HERMES_EV_TX (0x0002)
	#define HERMES_EV_RX (0x0001)

	/*
	* Command codes
	*/
	/--- Controller Commands ----------------------------/
	#define HERMES_CMD_INIT (0x0000)
	#define HERMES_CMD_ENABLE (0x0001)
	#define HERMES_CMD_DISABLE (0x0002)
	#define HERMES_CMD_DIAG (0x0003)

	/--- Buffer Mgmt Commands ---------------------------/
	#define HERMES_CMD_ALLOC (0x000A)
	#define HERMES_CMD_TX (0x000B)

	/--- Regulate Commands ------------------------------/
	#define HERMES_CMD_NOTIFY (0x0010)
	#define HERMES_CMD_INQUIRE (0x0011)

	/--- Configure Commands -----------------------------/
	#define HERMES_CMD_ACCESS (0x0021)
	#define HERMES_CMD_DOWNLD (0x0022)

	/--- Serial I/O Commands ----------------------------/
	#define HERMES_CMD_READMIF (0x0030)
	#define HERMES_CMD_WRITEMIF (0x0031)

	/--- Debugging Commands -----------------------------/
	#define HERMES_CMD_TEST (0x0038)


	/* Test command arguments */
	#define HERMES_TEST_SET_CHANNEL 0x0800
	#define HERMES_TEST_MONITOR 0x0b00
	#define HERMES_TEST_STOP 0x0f00

	/* Authentication algorithms */
	#define HERMES_AUTH_OPEN 1
	#define HERMES_AUTH_SHARED_KEY 2

	/* WEP settings */
	#define HERMES_WEP_PRIVACY_INVOKED 0x0001
	#define HERMES_WEP_EXCL_UNENCRYPTED 0x0002
	#define HERMES_WEP_HOST_ENCRYPT 0x0010
	#define HERMES_WEP_HOST_DECRYPT 0x0080

	/* Symbol hostscan options */
	#define HERMES_HOSTSCAN_SYMBOL_5SEC 0x0001
	#define HERMES_HOSTSCAN_SYMBOL_ONCE 0x0002
	#define HERMES_HOSTSCAN_SYMBOL_PASSIVE 0x0040
	#define HERMES_HOSTSCAN_SYMBOL_BCAST 0x0080

	/*
	* Frame structures and constants
	*/

	#define HERMES_DESCRIPTOR_OFFSET 0
	#define HERMES_802_11_OFFSET (14)
	#define HERMES_802_3_OFFSET (14+32)
	#define HERMES_802_2_OFFSET (14+32+14)
	#define HERMES_TXCNTL2_OFFSET (HERMES_802_3_OFFSET - 2)

	#define HERMES_RXSTAT_ERR (0x0003)
	#define HERMES_RXSTAT_BADCRC (0x0001)
	#define HERMES_RXSTAT_UNDECRYPTABLE (0x0002)
	#define HERMES_RXSTAT_MIC (0x0010) /* Frame contains MIC */
	#define HERMES_RXSTAT_MACPORT (0x0700)
	#define HERMES_RXSTAT_PCF (0x1000) /* Frame was received in CF period */
	#define HERMES_RXSTAT_MIC_KEY_ID (0x1800) /* MIC key used */
	#define HERMES_RXSTAT_MSGTYPE (0xE000)
	#define HERMES_RXSTAT_1042 (0x2000) /* RFC-1042 frame */
	#define HERMES_RXSTAT_TUNNEL (0x4000) /* bridge-tunnel encoded frame */
	#define HERMES_RXSTAT_WMP (0x6000) /* Wavelan-II Management Protocol frame */

	/* Shift amount for key ID in RXSTAT and TXCTRL */
	#define HERMES_MIC_KEY_ID_SHIFT 11

	struct hermes_tx_descriptor {
	__le16 status;
	__le16 reserved1;
	__le16 reserved2;
	__le32 sw_support;
	u8 retry_count;
	u8 tx_rate;
	__le16 tx_control;
	} __attribute__ ((packed));

	#define HERMES_TXSTAT_RETRYERR (0x0001)
	#define HERMES_TXSTAT_AGEDERR (0x0002)
	#define HERMES_TXSTAT_DISCON (0x0004)
	#define HERMES_TXSTAT_FORMERR (0x0008)

	#define HERMES_TXCTRL_TX_OK (0x0002) /* ?? interrupt on Tx complete */
	#define HERMES_TXCTRL_TX_EX (0x0004) /* ?? interrupt on Tx exception */
	#define HERMES_TXCTRL_802_11 (0x0008) /* We supply 802.11 header */
	#define HERMES_TXCTRL_MIC (0x0010) /* 802.3 + TKIP */
	#define HERMES_TXCTRL_MIC_KEY_ID (0x1800) /* MIC Key ID mask */
	#define HERMES_TXCTRL_ALT_RTRY (0x0020)

	/* Inquiry constants and data types */

	#define HERMES_INQ_TALLIES (0xF100)
	#define HERMES_INQ_SCAN (0xF101)
	#define HERMES_INQ_CHANNELINFO (0xF102)
	#define HERMES_INQ_HOSTSCAN (0xF103)
	#define HERMES_INQ_HOSTSCAN_SYMBOL (0xF104)
	#define HERMES_INQ_LINKSTATUS (0xF200)
	#define HERMES_INQ_SEC_STAT_AGERE (0xF202)

	struct hermes_tallies_frame {
	__le16 TxUnicastFrames;
	__le16 TxMulticastFrames;
	__le16 TxFragments;
	__le16 TxUnicastOctets;
	__le16 TxMulticastOctets;
	__le16 TxDeferredTransmissions;
	__le16 TxSingleRetryFrames;
	__le16 TxMultipleRetryFrames;
	__le16 TxRetryLimitExceeded;
	__le16 TxDiscards;
	__le16 RxUnicastFrames;
	__le16 RxMulticastFrames;
	__le16 RxFragments;
	__le16 RxUnicastOctets;
	__le16 RxMulticastOctets;
	__le16 RxFCSErrors;
	__le16 RxDiscards_NoBuffer;
	__le16 TxDiscardsWrongSA;
	__le16 RxWEPUndecryptable;
	__le16 RxMsgInMsgFragments;
	__le16 RxMsgInBadMsgFragments;
	/* Those last are probably not available in very old firmwares */
	__le16 RxDiscards_WEPICVError;
	__le16 RxDiscards_WEPExcluded;
	} __attribute__ ((packed));

	/* Grabbed from wlan-ng - Thanks Mark... - Jean II
	* This is the result of a scan inquiry command */
	/* Structure describing info about an Access Point */
	struct prism2_scan_apinfo {
	__le16 channel; /* Channel where the AP sits */
	__le16 noise; /* Noise level */
	__le16 level; /* Signal level */
	u8 bssid[ETH_ALEN]; /* MAC address of the Access Point */
	__le16 beacon_interv; /* Beacon interval */
	__le16 capabilities; /* Capabilities */
	__le16 essid_len; /* ESSID length */
	u8 essid[32]; /* ESSID of the network */
	u8 rates[10]; /* Bit rate supported */
	__le16 proberesp_rate; /* Data rate of the response frame */
	__le16 atim; /* ATIM window time, Kus (hostscan only) */
	} __attribute__ ((packed));

	/* Same stuff for the Lucent/Agere card.
	* Thanks to h1kari <h1kari AT dachb0den.com> - Jean II */
	struct agere_scan_apinfo {
	__le16 channel; /* Channel where the AP sits */
	__le16 noise; /* Noise level */
	__le16 level; /* Signal level */
	u8 bssid[ETH_ALEN]; /* MAC address of the Access Point */
	__le16 beacon_interv; /* Beacon interval */
	__le16 capabilities; /* Capabilities */
	/* bits: 0-ess, 1-ibss, 4-privacy [wep] */
	__le16 essid_len; /* ESSID length */
	u8 essid[32]; /* ESSID of the network */
	} __attribute__ ((packed));

	/* Moustafa: Scan structure for Symbol cards */
	struct symbol_scan_apinfo {
	u8 channel; /* Channel where the AP sits */
	u8 unknown1; /* 8 in 2.9x and 3.9x f/w, 0 otherwise */
	__le16 noise; /* Noise level */
	__le16 level; /* Signal level */
	u8 bssid[ETH_ALEN]; /* MAC address of the Access Point */
	__le16 beacon_interv; /* Beacon interval */
	__le16 capabilities; /* Capabilities */
	/* bits: 0-ess, 1-ibss, 4-privacy [wep] */
	__le16 essid_len; /* ESSID length */
	u8 essid[32]; /* ESSID of the network */
	__le16 rates[5]; /* Bit rate supported */
	__le16 basic_rates; /* Basic rates bitmask */
	u8 unknown2[6]; /* Always FF:FF:FF:FF:00:00 */
	u8 unknown3[8]; /* Always 0, appeared in f/w 3.91-68 */
	} __attribute__ ((packed));

	union hermes_scan_info {
	struct agere_scan_apinfo a;
	struct prism2_scan_apinfo p;
	struct symbol_scan_apinfo s;
	};

	/* Extended scan struct for HERMES_INQ_CHANNELINFO.
	* wl_lkm calls this an ACS scan (Automatic Channel Select).
	* Keep out of union hermes_scan_info because it is much bigger than
	* the older scan structures. */
	struct agere_ext_scan_info {
	__le16 reserved0;

	u8 noise;
	u8 level;
	u8 rx_flow;
	u8 rate;
	__le16 reserved1[2];

	__le16 frame_control;
	__le16 dur_id;
	u8 addr1[ETH_ALEN];
	u8 addr2[ETH_ALEN];
	u8 bssid[ETH_ALEN];
	__le16 sequence;
	u8 addr4[ETH_ALEN];

	__le16 data_length;

	/* Next 3 fields do not get filled in. */
	u8 daddr[ETH_ALEN];
	u8 saddr[ETH_ALEN];
	__le16 len_type;

	__le64 timestamp;
	__le16 beacon_interval;
	__le16 capabilities;
	u8 data[316];
	} __attribute__ ((packed));

	#define HERMES_LINKSTATUS_NOT_CONNECTED (0x0000)
	#define HERMES_LINKSTATUS_CONNECTED (0x0001)
	#define HERMES_LINKSTATUS_DISCONNECTED (0x0002)
	#define HERMES_LINKSTATUS_AP_CHANGE (0x0003)
	#define HERMES_LINKSTATUS_AP_OUT_OF_RANGE (0x0004)
	#define HERMES_LINKSTATUS_AP_IN_RANGE (0x0005)
	#define HERMES_LINKSTATUS_ASSOC_FAILED (0x0006)

	struct hermes_linkstatus {
	__le16 linkstatus; /* Link status */
	} __attribute__ ((packed));

	struct hermes_response {
	u16 status, resp0, resp1, resp2;
	};

	/* "ID" structure - used for ESSID and station nickname */
	struct hermes_idstring {
	__le16 len;
	__le16 val[16];
	} __attribute__ ((packed));

	struct hermes_multicast {
	u8 addr[HERMES_MAX_MULTICAST][ETH_ALEN];
	} __attribute__ ((packed));

	/* Timeouts */
	#define HERMES_BAP_BUSY_TIMEOUT (10000) /* In iterations of ~1us */

	/* Basic control structure */
	typedef struct hermes {
	void __iomem *iobase;
	int reg_spacing;
	#define HERMES_16BIT_REGSPACING 0
	#define HERMES_32BIT_REGSPACING 1
	u16 inten; /* Which interrupts should be enabled? */
	} hermes_t;

	/* Register access convenience macros */
	#define hermes_read_reg(hw, off) \
	(ioread16((hw)->iobase + ((off) << (hw)->reg_spacing)))
	#define hermes_write_reg(hw, off, val) \
	(iowrite16((val), (hw)->iobase + ((off) << (hw)->reg_spacing)))
	#define hermes_read_regn(hw, name) hermes_read_reg((hw), HERMES_##name)
	#define hermes_write_regn(hw, name, val) \
	hermes_write_reg((hw), HERMES_##name, (val))

	/* Function prototypes */
	void hermes_struct_init(hermes_t hw, void __iomem address, int reg_spacing);
	int hermes_init(hermes_t *hw);
	int hermes_docmd_wait(hermes_t *hw, u16 cmd, u16 parm0,
	struct hermes_response *resp);
	int hermes_doicmd_wait(hermes_t *hw, u16 cmd,
	u16 parm0, u16 parm1, u16 parm2,
	struct hermes_response *resp);
	int hermes_allocate(hermes_t hw, u16 size, u16 fid);

	int hermes_bap_pread(hermes_t hw, int bap, void buf, int len,
	u16 id, u16 offset);
	int hermes_bap_pwrite(hermes_t hw, int bap, const void buf, int len,
	u16 id, u16 offset);
	int hermes_read_ltv(hermes_t *hw, int bap, u16 rid, unsigned buflen,
	u16 length, void buf);
	int hermes_write_ltv(hermes_t *hw, int bap, u16 rid,
	u16 length, const void *value);

	/* Inline functions */

	static inline int hermes_present(hermes_t *hw)
	{
	return hermes_read_regn(hw, SWSUPPORT0) == HERMES_MAGIC;
	}

	static inline void hermes_set_irqmask(hermes_t *hw, u16 events)
	{
	hw->inten = events;
	hermes_write_regn(hw, INTEN, events);
	}

	static inline int hermes_enable_port(hermes_t *hw, int port)
	{
	return hermes_docmd_wait(hw, HERMES_CMD_ENABLE \| (port << 8),
	0, NULL);
	}

	static inline int hermes_disable_port(hermes_t *hw, int port)
	{
	return hermes_docmd_wait(hw, HERMES_CMD_DISABLE \| (port << 8),
	0, NULL);
	}

	/* Initiate an INQUIRE command (tallies or scan). The result will come as an
	* information frame in __orinoco_ev_info() */
	static inline int hermes_inquire(hermes_t *hw, u16 rid)
	{
	return hermes_docmd_wait(hw, HERMES_CMD_INQUIRE, rid, NULL);
	}

	#define HERMES_BYTES_TO_RECLEN(n) ((((n)+1)/2) + 1)
	#define HERMES_RECLEN_TO_BYTES(n) (((n)-1) * 2)

	/* Note that for the next two, the count is in 16-bit words, not bytes */
	static inline void hermes_read_words(struct hermes *hw, int off,
	void *buf, unsigned count)
	{
	off = off << hw->reg_spacing;
	ioread16_rep(hw->iobase + off, buf, count);
	}

	static inline void hermes_write_bytes(struct hermes *hw, int off,
	const char *buf, unsigned count)
	{
	off = off << hw->reg_spacing;
	iowrite16_rep(hw->iobase + off, buf, count >> 1);
	if (unlikely(count & 1))
	iowrite8(buf[count - 1], hw->iobase + off);
	}

	static inline void hermes_clear_words(struct hermes *hw, int off,
	unsigned count)
	{
	unsigned i;

	off = off << hw->reg_spacing;

	for (i = 0; i < count; i++)
	iowrite16(0, hw->iobase + off);
	}

	#define HERMES_READ_RECORD(hw, bap, rid, buf) \
	(hermes_read_ltv((hw), (bap), (rid), sizeof(*buf), NULL, (buf)))
	#define HERMES_WRITE_RECORD(hw, bap, rid, buf) \
	(hermes_write_ltv((hw), (bap), (rid), \
	HERMES_BYTES_TO_RECLEN(sizeof(*buf)), (buf)))

	static inline int hermes_read_wordrec(hermes_t hw, int bap, u16 rid, u16 word)
	{
	__le16 rec;
	int err;

	err = HERMES_READ_RECORD(hw, bap, rid, &rec);
	*word = le16_to_cpu(rec);
	return err;
	}

	static inline int hermes_write_wordrec(hermes_t *hw, int bap, u16 rid, u16 word)
	{
	__le16 rec = cpu_to_le16(word);
	return HERMES_WRITE_RECORD(hw, bap, rid, &rec);
	}

	#endif /* _HERMES_H */