1/*
2 * Copyright (c) 2006-2008 Nick Kossifidis <mickflemm@gmail.com>
3 * Copyright (c) 2004-2008 Reyk Floeter <reyk@openbsd.org>
4 * Copyright (c) 2007-2008 Michael Taylor <mike.taylor@apprion.com>
5 *
6 * Permission to use, copy, modify, and distribute this software for any
7 * purpose with or without fee is hereby granted, provided that the above
8 * copyright notice and this permission notice appear in all copies.
9 *
10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 *
18 */
19
20/*
21 * Register values for Atheros 5210/5211/5212 cards from OpenBSD's ar5k
22 * maintained by Reyk Floeter
23 *
24 * I tried to document those registers by looking at ar5k code, some
25 * 802.11 (802.11e mostly) papers and by reading various public available
26 * Atheros presentations and papers like these:
27 *
28 * 5210 - http://nova.stanford.edu/~bbaas/ps/isscc2002_slides.pdf
29 *        http://www.it.iitb.ac.in/~janak/wifire/01222734.pdf
30 *
31 * 5211 - http://www.hotchips.org/archives/hc14/3_Tue/16_mcfarland.pdf
32 *
33 * This file also contains register values found on a memory dump of
34 * Atheros's ART program (Atheros Radio Test), on ath9k, on legacy-hal
35 * released by Atheros and on various debug messages found on the net.
36 */
37
38
39
40/*====MAC DMA REGISTERS====*/
41
42/*
43 * AR5210-Specific TXDP registers
44 * 5210 has only 2 transmit queues so no DCU/QCU, just
45 * 2 transmit descriptor pointers...
46 */
47#define AR5K_NOQCU_TXDP0	0x0000		/* Queue 0 - data */
48#define AR5K_NOQCU_TXDP1	0x0004		/* Queue 1 - beacons */
49
50/*
51 * Mac Control Register
52 */
53#define	AR5K_CR		0x0008			/* Register Address */
54#define AR5K_CR_TXE0	0x00000001	/* TX Enable for queue 0 on 5210 */
55#define AR5K_CR_TXE1	0x00000002	/* TX Enable for queue 1 on 5210 */
56#define	AR5K_CR_RXE	0x00000004	/* RX Enable */
57#define AR5K_CR_TXD0	0x00000008	/* TX Disable for queue 0 on 5210 */
58#define AR5K_CR_TXD1	0x00000010	/* TX Disable for queue 1 on 5210 */
59#define	AR5K_CR_RXD	0x00000020	/* RX Disable */
60#define	AR5K_CR_SWI	0x00000040	/* Software Interrupt */
61
62/*
63 * RX Descriptor Pointer register
64 */
65#define	AR5K_RXDP	0x000c
66
67/*
68 * Configuration and status register
69 */
70#define	AR5K_CFG		0x0014			/* Register Address */
71#define	AR5K_CFG_SWTD		0x00000001	/* Byte-swap TX descriptor (for big endian archs) */
72#define	AR5K_CFG_SWTB		0x00000002	/* Byte-swap TX buffer */
73#define	AR5K_CFG_SWRD		0x00000004	/* Byte-swap RX descriptor */
74#define	AR5K_CFG_SWRB		0x00000008	/* Byte-swap RX buffer */
75#define	AR5K_CFG_SWRG		0x00000010	/* Byte-swap Register access */
76#define AR5K_CFG_IBSS		0x00000020 	/* 0-BSS, 1-IBSS [5211+] */
77#define AR5K_CFG_PHY_OK		0x00000100	/* [5211+] */
78#define AR5K_CFG_EEBS		0x00000200	/* EEPROM is busy */
79#define	AR5K_CFG_CLKGD		0x00000400	/* Clock gated (Disable dynamic clock) */
80#define AR5K_CFG_TXCNT		0x00007800	/* Tx frame count (?) [5210] */
81#define AR5K_CFG_TXCNT_S	11
82#define AR5K_CFG_TXFSTAT	0x00008000	/* Tx frame status (?) [5210] */
83#define AR5K_CFG_TXFSTRT	0x00010000	/* [5210] */
84#define	AR5K_CFG_PCI_THRES	0x00060000	/* PCI Master req q threshold [5211+] */
85#define	AR5K_CFG_PCI_THRES_S	17
86
87/*
88 * Interrupt enable register
89 */
90#define AR5K_IER		0x0024		/* Register Address */
91#define AR5K_IER_DISABLE	0x00000000	/* Disable card interrupts */
92#define AR5K_IER_ENABLE		0x00000001	/* Enable card interrupts */
93
94
95/*
96 * 0x0028 is Beacon Control Register on 5210
97 * and first RTS duration register on 5211
98 */
99
100/*
101 * Beacon control register [5210]
102 */
103#define AR5K_BCR		0x0028		/* Register Address */
104#define AR5K_BCR_AP		0x00000000	/* AP mode */
105#define AR5K_BCR_ADHOC		0x00000001	/* Ad-Hoc mode */
106#define AR5K_BCR_BDMAE		0x00000002	/* DMA enable */
107#define AR5K_BCR_TQ1FV		0x00000004	/* Use Queue1 for CAB traffic */
108#define AR5K_BCR_TQ1V		0x00000008	/* Use Queue1 for Beacon traffic */
109#define AR5K_BCR_BCGET		0x00000010
110
111/*
112 * First RTS duration register [5211]
113 */
114#define AR5K_RTSD0		0x0028		/* Register Address */
115#define	AR5K_RTSD0_6		0x000000ff	/* 6Mb RTS duration mask (?) */
116#define	AR5K_RTSD0_6_S		0		/* 6Mb RTS duration shift (?) */
117#define	AR5K_RTSD0_9		0x0000ff00	/* 9Mb*/
118#define	AR5K_RTSD0_9_S		8
119#define	AR5K_RTSD0_12		0x00ff0000	/* 12Mb*/
120#define	AR5K_RTSD0_12_S		16
121#define	AR5K_RTSD0_18		0xff000000	/* 16Mb*/
122#define	AR5K_RTSD0_18_S		24
123
124
125/*
126 * 0x002c is Beacon Status Register on 5210
127 * and second RTS duration register on 5211
128 */
129
130/*
131 * Beacon status register [5210]
132 *
133 * As i can see in ar5k_ar5210_tx_start Reyk uses some of the values of BCR
134 * for this register, so i guess TQ1V,TQ1FV and BDMAE have the same meaning
135 * here and SNP/SNAP means "snapshot" (so this register gets synced with BCR).
136 * So SNAPPEDBCRVALID sould also stand for "snapped BCR -values- valid", so i
137 * renamed it to SNAPSHOTSVALID to make more sense. I realy have no idea what
138 * else can it be. I also renamed SNPBCMD to SNPADHOC to match BCR.
139 */
140#define AR5K_BSR		0x002c			/* Register Address */
141#define AR5K_BSR_BDLYSW		0x00000001	/* SW Beacon delay (?) */
142#define AR5K_BSR_BDLYDMA	0x00000002	/* DMA Beacon delay (?) */
143#define AR5K_BSR_TXQ1F		0x00000004	/* Beacon queue (1) finished */
144#define AR5K_BSR_ATIMDLY	0x00000008	/* ATIM delay (?) */
145#define AR5K_BSR_SNPADHOC	0x00000100	/* Ad-hoc mode set (?) */
146#define AR5K_BSR_SNPBDMAE	0x00000200	/* Beacon DMA enabled (?) */
147#define AR5K_BSR_SNPTQ1FV	0x00000400	/* Queue1 is used for CAB traffic (?) */
148#define AR5K_BSR_SNPTQ1V	0x00000800	/* Queue1 is used for Beacon traffic (?) */
149#define AR5K_BSR_SNAPSHOTSVALID	0x00001000	/* BCR snapshots are valid (?) */
150#define AR5K_BSR_SWBA_CNT	0x00ff0000
151
152/*
153 * Second RTS duration register [5211]
154 */
155#define AR5K_RTSD1		0x002c			/* Register Address */
156#define	AR5K_RTSD1_24		0x000000ff	/* 24Mb */
157#define	AR5K_RTSD1_24_S		0
158#define	AR5K_RTSD1_36		0x0000ff00	/* 36Mb */
159#define	AR5K_RTSD1_36_S		8
160#define	AR5K_RTSD1_48		0x00ff0000	/* 48Mb */
161#define	AR5K_RTSD1_48_S		16
162#define	AR5K_RTSD1_54		0xff000000	/* 54Mb */
163#define	AR5K_RTSD1_54_S		24
164
165
166/*
167 * Transmit configuration register
168 */
169#define AR5K_TXCFG			0x0030			/* Register Address */
170#define AR5K_TXCFG_SDMAMR		0x00000007	/* DMA size (read) */
171#define AR5K_TXCFG_SDMAMR_S		0
172#define AR5K_TXCFG_B_MODE		0x00000008	/* Set b mode for 5111 (enable 2111) */
173#define AR5K_TXCFG_TXFSTP		0x00000008	/* TX DMA full Stop [5210] */
174#define AR5K_TXCFG_TXFULL		0x000003f0	/* TX Triger level mask */
175#define AR5K_TXCFG_TXFULL_S		4
176#define AR5K_TXCFG_TXFULL_0B		0x00000000
177#define AR5K_TXCFG_TXFULL_64B		0x00000010
178#define AR5K_TXCFG_TXFULL_128B		0x00000020
179#define AR5K_TXCFG_TXFULL_192B		0x00000030
180#define AR5K_TXCFG_TXFULL_256B		0x00000040
181#define AR5K_TXCFG_TXCONT_EN		0x00000080
182#define AR5K_TXCFG_DMASIZE		0x00000100	/* Flag for passing DMA size [5210] */
183#define AR5K_TXCFG_JUMBO_DESC_EN	0x00000400	/* Enable jumbo tx descriptors [5211+] */
184#define AR5K_TXCFG_ADHOC_BCN_ATIM	0x00000800	/* Adhoc Beacon ATIM Policy */
185#define AR5K_TXCFG_ATIM_WINDOW_DEF_DIS	0x00001000	/* Disable ATIM window defer [5211+] */
186#define AR5K_TXCFG_RTSRND		0x00001000	/* [5211+] */
187#define AR5K_TXCFG_FRMPAD_DIS		0x00002000	/* [5211+] */
188#define AR5K_TXCFG_RDY_CBR_DIS		0x00004000	/* Ready time CBR disable [5211+] */
189#define AR5K_TXCFG_JUMBO_FRM_MODE	0x00008000	/* Jumbo frame mode [5211+] */
190#define	AR5K_TXCFG_DCU_DBL_BUF_DIS	0x00008000	/* Disable double buffering on DCU */
191#define AR5K_TXCFG_DCU_CACHING_DIS	0x00010000	/* Disable DCU caching */
192
193/*
194 * Receive configuration register
195 */
196#define AR5K_RXCFG		0x0034			/* Register Address */
197#define AR5K_RXCFG_SDMAMW	0x00000007	/* DMA size (write) */
198#define AR5K_RXCFG_SDMAMW_S	0
199#define AR5K_RXCFG_ZLFDMA	0x00000008	/* Enable Zero-length frame DMA */
200#define	AR5K_RXCFG_DEF_ANTENNA	0x00000010	/* Default antenna (?) */
201#define AR5K_RXCFG_JUMBO_RXE	0x00000020	/* Enable jumbo rx descriptors [5211+] */
202#define AR5K_RXCFG_JUMBO_WRAP	0x00000040	/* Wrap jumbo frames [5211+] */
203#define AR5K_RXCFG_SLE_ENTRY	0x00000080	/* Sleep entry policy */
204
205/*
206 * Receive jumbo descriptor last address register
207 * Only found in 5211 (?)
208 */
209#define AR5K_RXJLA		0x0038
210
211/*
212 * MIB control register
213 */
214#define AR5K_MIBC		0x0040			/* Register Address */
215#define AR5K_MIBC_COW		0x00000001	/* Warn test indicator */
216#define AR5K_MIBC_FMC		0x00000002	/* Freeze MIB Counters  */
217#define AR5K_MIBC_CMC		0x00000004	/* Clean MIB Counters  */
218#define AR5K_MIBC_MCS		0x00000008	/* MIB counter strobe */
219
220/*
221 * Timeout prescale register
222 */
223#define AR5K_TOPS		0x0044
224#define	AR5K_TOPS_M		0x0000ffff
225
226/*
227 * Receive timeout register (no frame received)
228 */
229#define AR5K_RXNOFRM		0x0048
230#define	AR5K_RXNOFRM_M		0x000003ff
231
232/*
233 * Transmit timeout register (no frame sent)
234 */
235#define AR5K_TXNOFRM		0x004c
236#define	AR5K_TXNOFRM_M		0x000003ff
237#define	AR5K_TXNOFRM_QCU	0x000ffc00
238#define	AR5K_TXNOFRM_QCU_S	10
239
240/*
241 * Receive frame gap timeout register
242 */
243#define AR5K_RPGTO		0x0050
244#define AR5K_RPGTO_M		0x000003ff
245
246/*
247 * Receive frame count limit register
248 */
249#define AR5K_RFCNT		0x0054
250#define AR5K_RFCNT_M		0x0000001f	/* [5211+] (?) */
251#define AR5K_RFCNT_RFCL		0x0000000f	/* [5210] */
252
253/*
254 * Misc settings register
255 * (reserved0-3)
256 */
257#define AR5K_MISC		0x0058			/* Register Address */
258#define	AR5K_MISC_DMA_OBS_M	0x000001e0
259#define	AR5K_MISC_DMA_OBS_S	5
260#define	AR5K_MISC_MISC_OBS_M	0x00000e00
261#define	AR5K_MISC_MISC_OBS_S	9
262#define	AR5K_MISC_MAC_OBS_LSB_M	0x00007000
263#define	AR5K_MISC_MAC_OBS_LSB_S	12
264#define	AR5K_MISC_MAC_OBS_MSB_M	0x00038000
265#define	AR5K_MISC_MAC_OBS_MSB_S	15
266#define AR5K_MISC_LED_DECAY	0x001c0000	/* [5210] */
267#define AR5K_MISC_LED_BLINK	0x00e00000	/* [5210] */
268
269/*
270 * QCU/DCU clock gating register (5311)
271 * (reserved4-5)
272 */
273#define	AR5K_QCUDCU_CLKGT	0x005c			/* Register Address (?) */
274#define	AR5K_QCUDCU_CLKGT_QCU	0x0000ffff	/* Mask for QCU clock */
275#define	AR5K_QCUDCU_CLKGT_DCU	0x07ff0000	/* Mask for DCU clock */
276
277/*
278 * Interrupt Status Registers
279 *
280 * For 5210 there is only one status register but for
281 * 5211/5212 we have one primary and 4 secondary registers.
282 * So we have AR5K_ISR for 5210 and AR5K_PISR /SISRx for 5211/5212.
283 * Most of these bits are common for all chipsets.
284 */
285#define AR5K_ISR		0x001c			/* Register Address [5210] */
286#define AR5K_PISR		0x0080			/* Register Address [5211+] */
287#define AR5K_ISR_RXOK		0x00000001	/* Frame successfuly recieved */
288#define AR5K_ISR_RXDESC		0x00000002	/* RX descriptor request */
289#define AR5K_ISR_RXERR		0x00000004	/* Receive error */
290#define AR5K_ISR_RXNOFRM	0x00000008	/* No frame received (receive timeout) */
291#define AR5K_ISR_RXEOL		0x00000010	/* Empty RX descriptor */
292#define AR5K_ISR_RXORN		0x00000020	/* Receive FIFO overrun */
293#define AR5K_ISR_TXOK		0x00000040	/* Frame successfuly transmited */
294#define AR5K_ISR_TXDESC		0x00000080	/* TX descriptor request */
295#define AR5K_ISR_TXERR		0x00000100	/* Transmit error */
296#define AR5K_ISR_TXNOFRM	0x00000200	/* No frame transmited (transmit timeout) */
297#define AR5K_ISR_TXEOL		0x00000400	/* Empty TX descriptor */
298#define AR5K_ISR_TXURN		0x00000800	/* Transmit FIFO underrun */
299#define AR5K_ISR_MIB		0x00001000	/* Update MIB counters */
300#define AR5K_ISR_SWI		0x00002000	/* Software interrupt */
301#define AR5K_ISR_RXPHY		0x00004000	/* PHY error */
302#define AR5K_ISR_RXKCM		0x00008000	/* RX Key cache miss */
303#define AR5K_ISR_SWBA		0x00010000	/* Software beacon alert */
304#define AR5K_ISR_BRSSI		0x00020000	/* Beacon rssi below threshold (?) */
305#define AR5K_ISR_BMISS		0x00040000	/* Beacon missed */
306#define AR5K_ISR_HIUERR		0x00080000	/* Host Interface Unit error [5211+] */
307#define AR5K_ISR_BNR		0x00100000 	/* Beacon not ready [5211+] */
308#define AR5K_ISR_MCABT		0x00100000	/* Master Cycle Abort [5210] */
309#define AR5K_ISR_RXCHIRP	0x00200000	/* CHIRP Received [5212+] */
310#define AR5K_ISR_SSERR		0x00200000	/* Signaled System Error [5210] */
311#define AR5K_ISR_DPERR		0x00400000	/* Det par Error (?) [5210] */
312#define AR5K_ISR_RXDOPPLER	0x00400000	/* Doppler chirp received [5212+] */
313#define AR5K_ISR_TIM		0x00800000	/* [5211+] */
314#define AR5K_ISR_BCNMISC	0x00800000	/* 'or' of TIM, CAB_END, DTIM_SYNC, BCN_TIMEOUT,
315						CAB_TIMEOUT and DTIM bits from SISR2 [5212+] */
316#define AR5K_ISR_GPIO		0x01000000	/* GPIO (rf kill) */
317#define AR5K_ISR_QCBRORN	0x02000000	/* QCU CBR overrun [5211+] */
318#define AR5K_ISR_QCBRURN	0x04000000	/* QCU CBR underrun [5211+] */
319#define AR5K_ISR_QTRIG		0x08000000	/* QCU scheduling trigger [5211+] */
320
321/*
322 * Secondary status registers [5211+] (0 - 4)
323 *
324 * These give the status for each QCU, only QCUs 0-9 are
325 * represented.
326 */
327#define AR5K_SISR0		0x0084			/* Register Address [5211+] */
328#define AR5K_SISR0_QCU_TXOK	0x000003ff	/* Mask for QCU_TXOK */
329#define AR5K_SISR0_QCU_TXOK_S	0
330#define AR5K_SISR0_QCU_TXDESC	0x03ff0000	/* Mask for QCU_TXDESC */
331#define AR5K_SISR0_QCU_TXDESC_S	16
332
333#define AR5K_SISR1		0x0088			/* Register Address [5211+] */
334#define AR5K_SISR1_QCU_TXERR	0x000003ff	/* Mask for QCU_TXERR */
335#define AR5K_SISR1_QCU_TXERR_S	0
336#define AR5K_SISR1_QCU_TXEOL	0x03ff0000	/* Mask for QCU_TXEOL */
337#define AR5K_SISR1_QCU_TXEOL_S	16
338
339#define AR5K_SISR2		0x008c			/* Register Address [5211+] */
340#define AR5K_SISR2_QCU_TXURN	0x000003ff	/* Mask for QCU_TXURN */
341#define	AR5K_SISR2_QCU_TXURN_S	0
342#define	AR5K_SISR2_MCABT	0x00100000	/* Master Cycle Abort */
343#define	AR5K_SISR2_SSERR	0x00200000	/* Signaled System Error */
344#define	AR5K_SISR2_DPERR	0x00400000	/* Bus parity error */
345#define	AR5K_SISR2_TIM		0x01000000	/* [5212+] */
346#define	AR5K_SISR2_CAB_END	0x02000000	/* [5212+] */
347#define	AR5K_SISR2_DTIM_SYNC	0x04000000	/* DTIM sync lost [5212+] */
348#define	AR5K_SISR2_BCN_TIMEOUT	0x08000000	/* Beacon Timeout [5212+] */
349#define	AR5K_SISR2_CAB_TIMEOUT	0x10000000	/* CAB Timeout [5212+] */
350#define	AR5K_SISR2_DTIM		0x20000000	/* [5212+] */
351#define	AR5K_SISR2_TSFOOR	0x80000000	/* TSF OOR (?) */
352
353#define AR5K_SISR3		0x0090			/* Register Address [5211+] */
354#define AR5K_SISR3_QCBRORN	0x000003ff	/* Mask for QCBRORN */
355#define AR5K_SISR3_QCBRORN_S	0
356#define AR5K_SISR3_QCBRURN	0x03ff0000	/* Mask for QCBRURN */
357#define AR5K_SISR3_QCBRURN_S	16
358
359#define AR5K_SISR4		0x0094			/* Register Address [5211+] */
360#define AR5K_SISR4_QTRIG	0x000003ff	/* Mask for QTRIG */
361#define AR5K_SISR4_QTRIG_S	0
362
363/*
364 * Shadow read-and-clear interrupt status registers [5211+]
365 */
366#define AR5K_RAC_PISR		0x00c0		/* Read and clear PISR */
367#define AR5K_RAC_SISR0		0x00c4		/* Read and clear SISR0 */
368#define AR5K_RAC_SISR1		0x00c8		/* Read and clear SISR1 */
369#define AR5K_RAC_SISR2		0x00cc		/* Read and clear SISR2 */
370#define AR5K_RAC_SISR3		0x00d0		/* Read and clear SISR3 */
371#define AR5K_RAC_SISR4		0x00d4		/* Read and clear SISR4 */
372
373/*
374 * Interrupt Mask Registers
375 *
376 * As whith ISRs 5210 has one IMR (AR5K_IMR) and 5211/5212 has one primary
377 * (AR5K_PIMR) and 4 secondary IMRs (AR5K_SIMRx). Note that ISR/IMR flags match.
378 */
379#define	AR5K_IMR		0x0020			/* Register Address [5210] */
380#define AR5K_PIMR		0x00a0			/* Register Address [5211+] */
381#define AR5K_IMR_RXOK		0x00000001	/* Frame successfuly recieved*/
382#define AR5K_IMR_RXDESC		0x00000002	/* RX descriptor request*/
383#define AR5K_IMR_RXERR		0x00000004	/* Receive error*/
384#define AR5K_IMR_RXNOFRM	0x00000008	/* No frame received (receive timeout)*/
385#define AR5K_IMR_RXEOL		0x00000010	/* Empty RX descriptor*/
386#define AR5K_IMR_RXORN		0x00000020	/* Receive FIFO overrun*/
387#define AR5K_IMR_TXOK		0x00000040	/* Frame successfuly transmited*/
388#define AR5K_IMR_TXDESC		0x00000080	/* TX descriptor request*/
389#define AR5K_IMR_TXERR		0x00000100	/* Transmit error*/
390#define AR5K_IMR_TXNOFRM	0x00000200	/* No frame transmited (transmit timeout)*/
391#define AR5K_IMR_TXEOL		0x00000400	/* Empty TX descriptor*/
392#define AR5K_IMR_TXURN		0x00000800	/* Transmit FIFO underrun*/
393#define AR5K_IMR_MIB		0x00001000	/* Update MIB counters*/
394#define AR5K_IMR_SWI		0x00002000	/* Software interrupt */
395#define AR5K_IMR_RXPHY		0x00004000	/* PHY error*/
396#define AR5K_IMR_RXKCM		0x00008000	/* RX Key cache miss */
397#define AR5K_IMR_SWBA		0x00010000	/* Software beacon alert*/
398#define AR5K_IMR_BRSSI		0x00020000	/* Beacon rssi below threshold (?) */
399#define AR5K_IMR_BMISS		0x00040000	/* Beacon missed*/
400#define AR5K_IMR_HIUERR		0x00080000	/* Host Interface Unit error [5211+] */
401#define AR5K_IMR_BNR		0x00100000 	/* Beacon not ready [5211+] */
402#define AR5K_IMR_MCABT		0x00100000	/* Master Cycle Abort [5210] */
403#define AR5K_IMR_RXCHIRP	0x00200000	/* CHIRP Received [5212+]*/
404#define AR5K_IMR_SSERR		0x00200000	/* Signaled System Error [5210] */
405#define AR5K_IMR_DPERR		0x00400000	/* Det par Error (?) [5210] */
406#define AR5K_IMR_RXDOPPLER	0x00400000	/* Doppler chirp received [5212+] */
407#define AR5K_IMR_TIM		0x00800000	/* [5211+] */
408#define AR5K_IMR_BCNMISC	0x00800000	/* 'or' of TIM, CAB_END, DTIM_SYNC, BCN_TIMEOUT,
409						CAB_TIMEOUT and DTIM bits from SISR2 [5212+] */
410#define AR5K_IMR_GPIO		0x01000000	/* GPIO (rf kill)*/
411#define AR5K_IMR_QCBRORN	0x02000000	/* QCU CBR overrun (?) [5211+] */
412#define AR5K_IMR_QCBRURN	0x04000000	/* QCU CBR underrun (?) [5211+] */
413#define AR5K_IMR_QTRIG		0x08000000	/* QCU scheduling trigger [5211+] */
414
415/*
416 * Secondary interrupt mask registers [5211+] (0 - 4)
417 */
418#define AR5K_SIMR0		0x00a4			/* Register Address [5211+] */
419#define AR5K_SIMR0_QCU_TXOK	0x000003ff	/* Mask for QCU_TXOK */
420#define AR5K_SIMR0_QCU_TXOK_S	0
421#define AR5K_SIMR0_QCU_TXDESC	0x03ff0000	/* Mask for QCU_TXDESC */
422#define AR5K_SIMR0_QCU_TXDESC_S	16
423
424#define AR5K_SIMR1		0x00a8			/* Register Address [5211+] */
425#define AR5K_SIMR1_QCU_TXERR	0x000003ff	/* Mask for QCU_TXERR */
426#define AR5K_SIMR1_QCU_TXERR_S	0
427#define AR5K_SIMR1_QCU_TXEOL	0x03ff0000	/* Mask for QCU_TXEOL */
428#define AR5K_SIMR1_QCU_TXEOL_S	16
429
430#define AR5K_SIMR2		0x00ac			/* Register Address [5211+] */
431#define AR5K_SIMR2_QCU_TXURN	0x000003ff	/* Mask for QCU_TXURN */
432#define AR5K_SIMR2_QCU_TXURN_S	0
433#define	AR5K_SIMR2_MCABT	0x00100000	/* Master Cycle Abort */
434#define	AR5K_SIMR2_SSERR	0x00200000	/* Signaled System Error */
435#define	AR5K_SIMR2_DPERR	0x00400000	/* Bus parity error */
436#define	AR5K_SIMR2_TIM		0x01000000	/* [5212+] */
437#define	AR5K_SIMR2_CAB_END	0x02000000	/* [5212+] */
438#define	AR5K_SIMR2_DTIM_SYNC	0x04000000	/* DTIM Sync lost [5212+] */
439#define	AR5K_SIMR2_BCN_TIMEOUT	0x08000000	/* Beacon Timeout [5212+] */
440#define	AR5K_SIMR2_CAB_TIMEOUT	0x10000000	/* CAB Timeout [5212+] */
441#define	AR5K_SIMR2_DTIM		0x20000000	/* [5212+] */
442#define	AR5K_SIMR2_TSFOOR	0x80000000	/* TSF OOR (?) */
443
444#define AR5K_SIMR3		0x00b0			/* Register Address [5211+] */
445#define AR5K_SIMR3_QCBRORN	0x000003ff	/* Mask for QCBRORN */
446#define AR5K_SIMR3_QCBRORN_S	0
447#define AR5K_SIMR3_QCBRURN	0x03ff0000	/* Mask for QCBRURN */
448#define AR5K_SIMR3_QCBRURN_S	16
449
450#define AR5K_SIMR4		0x00b4			/* Register Address [5211+] */
451#define AR5K_SIMR4_QTRIG	0x000003ff	/* Mask for QTRIG */
452#define AR5K_SIMR4_QTRIG_S	0
453
454/*
455 * DMA Debug registers 0-7
456 * 0xe0 - 0xfc
457 */
458
459/*
460 * Decompression mask registers [5212+]
461 */
462#define AR5K_DCM_ADDR		0x0400		/*Decompression mask address (index) */
463#define AR5K_DCM_DATA		0x0404		/*Decompression mask data */
464
465/*
466 * Wake On Wireless pattern control register [5212+]
467 */
468#define	AR5K_WOW_PCFG			0x0410			/* Register Address */
469#define	AR5K_WOW_PCFG_PAT_MATCH_EN	0x00000001	/* Pattern match enable */
470#define	AR5K_WOW_PCFG_LONG_FRAME_POL	0x00000002	/* Long frame policy */
471#define	AR5K_WOW_PCFG_WOBMISS		0x00000004	/* Wake on bea(con) miss (?) */
472#define	AR5K_WOW_PCFG_PAT_0_EN		0x00000100	/* Enable pattern 0 */
473#define	AR5K_WOW_PCFG_PAT_1_EN		0x00000200	/* Enable pattern 1 */
474#define	AR5K_WOW_PCFG_PAT_2_EN		0x00000400	/* Enable pattern 2 */
475#define	AR5K_WOW_PCFG_PAT_3_EN		0x00000800	/* Enable pattern 3 */
476#define	AR5K_WOW_PCFG_PAT_4_EN		0x00001000	/* Enable pattern 4 */
477#define	AR5K_WOW_PCFG_PAT_5_EN		0x00002000	/* Enable pattern 5 */
478
479/*
480 * Wake On Wireless pattern index register (?) [5212+]
481 */
482#define	AR5K_WOW_PAT_IDX	0x0414
483
484/*
485 * Wake On Wireless pattern data register [5212+]
486 */
487#define	AR5K_WOW_PAT_DATA	0x0418			/* Register Address */
488#define	AR5K_WOW_PAT_DATA_0_3_V	0x00000001	/* Pattern 0, 3 value */
489#define	AR5K_WOW_PAT_DATA_1_4_V	0x00000100	/* Pattern 1, 4 value */
490#define	AR5K_WOW_PAT_DATA_2_5_V	0x00010000	/* Pattern 2, 5 value */
491#define	AR5K_WOW_PAT_DATA_0_3_M	0x01000000	/* Pattern 0, 3 mask */
492#define	AR5K_WOW_PAT_DATA_1_4_M	0x04000000	/* Pattern 1, 4 mask */
493#define	AR5K_WOW_PAT_DATA_2_5_M	0x10000000	/* Pattern 2, 5 mask */
494
495/*
496 * Decompression configuration registers [5212+]
497 */
498#define AR5K_DCCFG		0x0420			/* Register Address */
499#define AR5K_DCCFG_GLOBAL_EN	0x00000001	/* Enable decompression on all queues */
500#define AR5K_DCCFG_BYPASS_EN	0x00000002	/* Bypass decompression */
501#define AR5K_DCCFG_BCAST_EN	0x00000004	/* Enable decompression for bcast frames */
502#define AR5K_DCCFG_MCAST_EN	0x00000008	/* Enable decompression for mcast frames */
503
504/*
505 * Compression configuration registers [5212+]
506 */
507#define AR5K_CCFG		0x0600			/* Register Address */
508#define	AR5K_CCFG_WINDOW_SIZE	0x00000007	/* Compression window size */
509#define	AR5K_CCFG_CPC_EN	0x00000008	/* Enable performance counters */
510
511#define AR5K_CCFG_CCU		0x0604			/* Register Address */
512#define AR5K_CCFG_CCU_CUP_EN	0x00000001	/* CCU Catchup enable */
513#define AR5K_CCFG_CCU_CREDIT	0x00000002	/* CCU Credit (field) */
514#define AR5K_CCFG_CCU_CD_THRES	0x00000080	/* CCU Cyc(lic?) debt threshold (field) */
515#define AR5K_CCFG_CCU_CUP_LCNT	0x00010000	/* CCU Catchup lit(?) count */
516#define	AR5K_CCFG_CCU_INIT	0x00100200	/* Initial value during reset */
517
518/*
519 * Compression performance counter registers [5212+]
520 */
521#define AR5K_CPC0		0x0610		/* Compression performance counter 0 */
522#define AR5K_CPC1		0x0614		/* Compression performance counter 1*/
523#define AR5K_CPC2		0x0618		/* Compression performance counter 2 */
524#define AR5K_CPC3		0x061c		/* Compression performance counter 3 */
525#define AR5K_CPCOVF		0x0620		/* Compression performance overflow */
526
527
528/*
529 * Queue control unit (QCU) registers [5211+]
530 *
531 * Card has 12 TX Queues but i see that only 0-9 are used (?)
532 * both in binary HAL (see ah.h) and ar5k. Each queue has it's own
533 * TXDP at addresses 0x0800 - 0x082c, a CBR (Constant Bit Rate)
534 * configuration register (0x08c0 - 0x08ec), a ready time configuration
535 * register (0x0900 - 0x092c), a misc configuration register (0x09c0 -
536 * 0x09ec) and a status register (0x0a00 - 0x0a2c). We also have some
537 * global registers, QCU transmit enable/disable and "one shot arm (?)"
538 * set/clear, which contain status for all queues (we shift by 1 for each
539 * queue). To access these registers easily we define some macros here
540 * that are used inside HAL. For more infos check out *_tx_queue functs.
541 */
542
543/*
544 * Generic QCU Register access macros
545 */
546#define	AR5K_QUEUE_REG(_r, _q)		(((_q) << 2) + _r)
547#define AR5K_QCU_GLOBAL_READ(_r, _q)	(AR5K_REG_READ(_r) & (1 << _q))
548#define AR5K_QCU_GLOBAL_WRITE(_r, _q)	AR5K_REG_WRITE(_r, (1 << _q))
549
550/*
551 * QCU Transmit descriptor pointer registers
552 */
553#define AR5K_QCU_TXDP_BASE	0x0800		/* Register Address - Queue0 TXDP */
554#define AR5K_QUEUE_TXDP(_q)	AR5K_QUEUE_REG(AR5K_QCU_TXDP_BASE, _q)
555
556/*
557 * QCU Transmit enable register
558 */
559#define AR5K_QCU_TXE		0x0840
560#define AR5K_ENABLE_QUEUE(_q)	AR5K_QCU_GLOBAL_WRITE(AR5K_QCU_TXE, _q)
561#define AR5K_QUEUE_ENABLED(_q)	AR5K_QCU_GLOBAL_READ(AR5K_QCU_TXE, _q)
562
563/*
564 * QCU Transmit disable register
565 */
566#define AR5K_QCU_TXD		0x0880
567#define AR5K_DISABLE_QUEUE(_q)	AR5K_QCU_GLOBAL_WRITE(AR5K_QCU_TXD, _q)
568#define AR5K_QUEUE_DISABLED(_q)	AR5K_QCU_GLOBAL_READ(AR5K_QCU_TXD, _q)
569
570/*
571 * QCU Constant Bit Rate configuration registers
572 */
573#define	AR5K_QCU_CBRCFG_BASE		0x08c0	/* Register Address - Queue0 CBRCFG */
574#define	AR5K_QCU_CBRCFG_INTVAL		0x00ffffff	/* CBR Interval mask */
575#define AR5K_QCU_CBRCFG_INTVAL_S	0
576#define	AR5K_QCU_CBRCFG_ORN_THRES	0xff000000	/* CBR overrun threshold mask */
577#define AR5K_QCU_CBRCFG_ORN_THRES_S	24
578#define	AR5K_QUEUE_CBRCFG(_q)		AR5K_QUEUE_REG(AR5K_QCU_CBRCFG_BASE, _q)
579
580/*
581 * QCU Ready time configuration registers
582 */
583#define	AR5K_QCU_RDYTIMECFG_BASE	0x0900	/* Register Address - Queue0 RDYTIMECFG */
584#define	AR5K_QCU_RDYTIMECFG_INTVAL	0x00ffffff	/* Ready time interval mask */
585#define AR5K_QCU_RDYTIMECFG_INTVAL_S	0
586#define	AR5K_QCU_RDYTIMECFG_ENABLE	0x01000000	/* Ready time enable mask */
587#define AR5K_QUEUE_RDYTIMECFG(_q)	AR5K_QUEUE_REG(AR5K_QCU_RDYTIMECFG_BASE, _q)
588
589/*
590 * QCU one shot arm set registers
591 */
592#define	AR5K_QCU_ONESHOTARM_SET		0x0940	/* Register Address -QCU "one shot arm set (?)" */
593#define	AR5K_QCU_ONESHOTARM_SET_M	0x0000ffff
594
595/*
596 * QCU one shot arm clear registers
597 */
598#define	AR5K_QCU_ONESHOTARM_CLEAR	0x0980	/* Register Address -QCU "one shot arm clear (?)" */
599#define	AR5K_QCU_ONESHOTARM_CLEAR_M	0x0000ffff
600
601/*
602 * QCU misc registers
603 */
604#define AR5K_QCU_MISC_BASE		0x09c0			/* Register Address -Queue0 MISC */
605#define	AR5K_QCU_MISC_FRSHED_M		0x0000000f	/* Frame sheduling mask */
606#define	AR5K_QCU_MISC_FRSHED_ASAP		0	/* ASAP */
607#define	AR5K_QCU_MISC_FRSHED_CBR		1	/* Constant Bit Rate */
608#define	AR5K_QCU_MISC_FRSHED_DBA_GT		2	/* DMA Beacon alert gated */
609#define	AR5K_QCU_MISC_FRSHED_TIM_GT		3	/* TIMT gated */
610#define	AR5K_QCU_MISC_FRSHED_BCN_SENT_GT	4	/* Beacon sent gated */
611#define	AR5K_QCU_MISC_ONESHOT_ENABLE	0x00000010	/* Oneshot enable */
612#define	AR5K_QCU_MISC_CBREXP_DIS	0x00000020	/* Disable CBR expired counter (normal queue) */
613#define	AR5K_QCU_MISC_CBREXP_BCN_DIS	0x00000040	/* Disable CBR expired counter (beacon queue) */
614#define	AR5K_QCU_MISC_BCN_ENABLE	0x00000080	/* Enable Beacon use */
615#define	AR5K_QCU_MISC_CBR_THRES_ENABLE	0x00000100	/* CBR expired threshold enabled */
616#define	AR5K_QCU_MISC_RDY_VEOL_POLICY	0x00000200	/* TXE reset when RDYTIME expired or VEOL */
617#define	AR5K_QCU_MISC_CBR_RESET_CNT	0x00000400	/* CBR threshold (counter) reset */
618#define	AR5K_QCU_MISC_DCU_EARLY		0x00000800	/* DCU early termination */
619#define AR5K_QCU_MISC_DCU_CMP_EN	0x00001000	/* Enable frame compression */
620#define AR5K_QUEUE_MISC(_q)		AR5K_QUEUE_REG(AR5K_QCU_MISC_BASE, _q)
621
622
623/*
624 * QCU status registers
625 */
626#define AR5K_QCU_STS_BASE	0x0a00			/* Register Address - Queue0 STS */
627#define	AR5K_QCU_STS_FRMPENDCNT	0x00000003	/* Frames pending counter */
628#define	AR5K_QCU_STS_CBREXPCNT	0x0000ff00	/* CBR expired counter */
629#define	AR5K_QUEUE_STATUS(_q)	AR5K_QUEUE_REG(AR5K_QCU_STS_BASE, _q)
630
631/*
632 * QCU ready time shutdown register
633 */
634#define AR5K_QCU_RDYTIMESHDN	0x0a40
635#define AR5K_QCU_RDYTIMESHDN_M	0x000003ff
636
637/*
638 * QCU compression buffer base registers [5212+]
639 */
640#define AR5K_QCU_CBB_SELECT	0x0b00
641#define AR5K_QCU_CBB_ADDR	0x0b04
642#define AR5K_QCU_CBB_ADDR_S	9
643
644/*
645 * QCU compression buffer configuration register [5212+]
646 * (buffer size)
647 */
648#define AR5K_QCU_CBCFG		0x0b08
649
650
651
652/*
653 * Distributed Coordination Function (DCF) control unit (DCU)
654 * registers [5211+]
655 *
656 * These registers control the various characteristics of each queue
657 * for 802.11e (WME) combatibility so they go together with
658 * QCU registers in pairs. For each queue we have a QCU mask register,
659 * (0x1000 - 0x102c), a local-IFS settings register (0x1040 - 0x106c),
660 * a retry limit register (0x1080 - 0x10ac), a channel time register
661 * (0x10c0 - 0x10ec), a misc-settings register (0x1100 - 0x112c) and
662 * a sequence number register (0x1140 - 0x116c). It seems that "global"
663 * registers here afect all queues (see use of DCU_GBL_IFS_SLOT in ar5k).
664 * We use the same macros here for easier register access.
665 *
666 */
667
668/*
669 * DCU QCU mask registers
670 */
671#define AR5K_DCU_QCUMASK_BASE	0x1000		/* Register Address -Queue0 DCU_QCUMASK */
672#define AR5K_DCU_QCUMASK_M	0x000003ff
673#define AR5K_QUEUE_QCUMASK(_q)	AR5K_QUEUE_REG(AR5K_DCU_QCUMASK_BASE, _q)
674
675/*
676 * DCU local Inter Frame Space settings register
677 */
678#define AR5K_DCU_LCL_IFS_BASE		0x1040			/* Register Address -Queue0 DCU_LCL_IFS */
679#define	AR5K_DCU_LCL_IFS_CW_MIN	        0x000003ff	/* Minimum Contention Window */
680#define	AR5K_DCU_LCL_IFS_CW_MIN_S	0
681#define	AR5K_DCU_LCL_IFS_CW_MAX	        0x000ffc00	/* Maximum Contention Window */
682#define	AR5K_DCU_LCL_IFS_CW_MAX_S	10
683#define	AR5K_DCU_LCL_IFS_AIFS		0x0ff00000	/* Arbitrated Interframe Space */
684#define	AR5K_DCU_LCL_IFS_AIFS_S		20
685#define	AR5K_DCU_LCL_IFS_AIFS_MAX	0xfc		/* Anything above that can cause DCU to hang */
686#define	AR5K_QUEUE_DFS_LOCAL_IFS(_q)	AR5K_QUEUE_REG(AR5K_DCU_LCL_IFS_BASE, _q)
687
688/*
689 * DCU retry limit registers
690 */
691#define AR5K_DCU_RETRY_LMT_BASE		0x1080			/* Register Address -Queue0 DCU_RETRY_LMT */
692#define AR5K_DCU_RETRY_LMT_SH_RETRY	0x0000000f	/* Short retry limit mask */
693#define AR5K_DCU_RETRY_LMT_SH_RETRY_S	0
694#define AR5K_DCU_RETRY_LMT_LG_RETRY	0x000000f0	/* Long retry limit mask */
695#define AR5K_DCU_RETRY_LMT_LG_RETRY_S	4
696#define AR5K_DCU_RETRY_LMT_SSH_RETRY	0x00003f00	/* Station short retry limit mask (?) */
697#define AR5K_DCU_RETRY_LMT_SSH_RETRY_S	8
698#define AR5K_DCU_RETRY_LMT_SLG_RETRY	0x000fc000	/* Station long retry limit mask (?) */
699#define AR5K_DCU_RETRY_LMT_SLG_RETRY_S	14
700#define	AR5K_QUEUE_DFS_RETRY_LIMIT(_q)	AR5K_QUEUE_REG(AR5K_DCU_RETRY_LMT_BASE, _q)
701
702/*
703 * DCU channel time registers
704 */
705#define AR5K_DCU_CHAN_TIME_BASE		0x10c0			/* Register Address -Queue0 DCU_CHAN_TIME */
706#define	AR5K_DCU_CHAN_TIME_DUR		0x000fffff	/* Channel time duration */
707#define	AR5K_DCU_CHAN_TIME_DUR_S	0
708#define	AR5K_DCU_CHAN_TIME_ENABLE	0x00100000	/* Enable channel time */
709#define AR5K_QUEUE_DFS_CHANNEL_TIME(_q)	AR5K_QUEUE_REG(AR5K_DCU_CHAN_TIME_BASE, _q)
710
711/*
712 * DCU misc registers [5211+]
713 *
714 * Note: Arbiter lockout control controls the
715 * behaviour on low priority queues when we have multiple queues
716 * with pending frames. Intra-frame lockout means we wait until
717 * the queue's current frame transmits (with post frame backoff and bursting)
718 * before we transmit anything else and global lockout means we
719 * wait for the whole queue to finish before higher priority queues
720 * can transmit (this is used on beacon and CAB queues).
721 * No lockout means there is no special handling.
722 */
723#define AR5K_DCU_MISC_BASE		0x1100			/* Register Address -Queue0 DCU_MISC */
724#define	AR5K_DCU_MISC_BACKOFF		0x0000003f	/* Mask for backoff threshold */
725#define	AR5K_DCU_MISC_ETS_RTS_POL	0x00000040	/* End of transmission series
726							station RTS/data failure count
727							reset policy (?) */
728#define AR5K_DCU_MISC_ETS_CW_POL	0x00000080	/* End of transmission series
729							CW reset policy */
730#define	AR5K_DCU_MISC_FRAG_WAIT		0x00000100	/* Wait for next fragment */
731#define AR5K_DCU_MISC_BACKOFF_FRAG	0x00000200	/* Enable backoff while bursting */
732#define	AR5K_DCU_MISC_HCFPOLL_ENABLE	0x00000800	/* CF - Poll enable */
733#define	AR5K_DCU_MISC_BACKOFF_PERSIST	0x00001000	/* Persistent backoff */
734#define	AR5K_DCU_MISC_FRMPRFTCH_ENABLE	0x00002000	/* Enable frame pre-fetch */
735#define	AR5K_DCU_MISC_VIRTCOL		0x0000c000	/* Mask for Virtual Collision (?) */
736#define	AR5K_DCU_MISC_VIRTCOL_NORMAL	0
737#define	AR5K_DCU_MISC_VIRTCOL_IGNORE	1
738#define	AR5K_DCU_MISC_BCN_ENABLE	0x00010000	/* Enable Beacon use */
739#define	AR5K_DCU_MISC_ARBLOCK_CTL	0x00060000	/* Arbiter lockout control mask */
740#define	AR5K_DCU_MISC_ARBLOCK_CTL_S	17
741#define	AR5K_DCU_MISC_ARBLOCK_CTL_NONE		0	/* No arbiter lockout */
742#define	AR5K_DCU_MISC_ARBLOCK_CTL_INTFRM	1	/* Intra-frame lockout */
743#define	AR5K_DCU_MISC_ARBLOCK_CTL_GLOBAL	2	/* Global lockout */
744#define	AR5K_DCU_MISC_ARBLOCK_IGNORE	0x00080000	/* Ignore Arbiter lockout */
745#define	AR5K_DCU_MISC_SEQ_NUM_INCR_DIS	0x00100000	/* Disable sequence number increment */
746#define	AR5K_DCU_MISC_POST_FR_BKOFF_DIS	0x00200000	/* Disable post-frame backoff */
747#define	AR5K_DCU_MISC_VIRT_COLL_POLICY	0x00400000	/* Virtual Collision cw policy */
748#define	AR5K_DCU_MISC_BLOWN_IFS_POLICY	0x00800000	/* Blown IFS policy (?) */
749#define	AR5K_DCU_MISC_SEQNUM_CTL	0x01000000	/* Sequence number control (?) */
750#define AR5K_QUEUE_DFS_MISC(_q)		AR5K_QUEUE_REG(AR5K_DCU_MISC_BASE, _q)
751
752/*
753 * DCU frame sequence number registers
754 */
755#define AR5K_DCU_SEQNUM_BASE		0x1140
756#define	AR5K_DCU_SEQNUM_M		0x00000fff
757#define	AR5K_QUEUE_DCU_SEQNUM(_q)	AR5K_QUEUE_REG(AR5K_DCU_SEQNUM_BASE, _q)
758
759/*
760 * DCU global IFS SIFS register
761 */
762#define AR5K_DCU_GBL_IFS_SIFS	0x1030
763#define AR5K_DCU_GBL_IFS_SIFS_M	0x0000ffff
764
765/*
766 * DCU global IFS slot interval register
767 */
768#define AR5K_DCU_GBL_IFS_SLOT	0x1070
769#define AR5K_DCU_GBL_IFS_SLOT_M	0x0000ffff
770
771/*
772 * DCU global IFS EIFS register
773 */
774#define AR5K_DCU_GBL_IFS_EIFS	0x10b0
775#define AR5K_DCU_GBL_IFS_EIFS_M	0x0000ffff
776
777/*
778 * DCU global IFS misc register
779 *
780 * LFSR stands for Linear Feedback Shift Register
781 * and it's used for generating pseudo-random
782 * number sequences.
783 *
784 * (If i understand corectly, random numbers are
785 * used for idle sensing -multiplied with cwmin/max etc-)
786 */
787#define AR5K_DCU_GBL_IFS_MISC			0x10f0			/* Register Address */
788#define	AR5K_DCU_GBL_IFS_MISC_LFSR_SLICE	0x00000007	/* LFSR Slice Select */
789#define	AR5K_DCU_GBL_IFS_MISC_TURBO_MODE	0x00000008	/* Turbo mode */
790#define	AR5K_DCU_GBL_IFS_MISC_SIFS_DUR_USEC	0x000003f0	/* SIFS Duration mask */
791#define	AR5K_DCU_GBL_IFS_MISC_USEC_DUR		0x000ffc00	/* USEC Duration mask */
792#define	AR5K_DCU_GBL_IFS_MISC_USEC_DUR_S	10
793#define	AR5K_DCU_GBL_IFS_MISC_DCU_ARB_DELAY	0x00300000	/* DCU Arbiter delay mask */
794#define AR5K_DCU_GBL_IFS_MISC_SIFS_CNT_RST	0x00400000	/* SIFS cnt reset policy (?) */
795#define AR5K_DCU_GBL_IFS_MISC_AIFS_CNT_RST	0x00800000	/* AIFS cnt reset policy (?) */
796#define AR5K_DCU_GBL_IFS_MISC_RND_LFSR_SL_DIS	0x01000000	/* Disable random LFSR slice */
797
798/*
799 * DCU frame prefetch control register
800 */
801#define AR5K_DCU_FP			0x1230			/* Register Address */
802#define AR5K_DCU_FP_NOBURST_DCU_EN	0x00000001	/* Enable non-burst prefetch on DCU (?) */
803#define AR5K_DCU_FP_NOBURST_EN		0x00000010	/* Enable non-burst prefetch (?) */
804#define AR5K_DCU_FP_BURST_DCU_EN	0x00000020	/* Enable burst prefetch on DCU (?) */
805
806/*
807 * DCU transmit pause control/status register
808 */
809#define AR5K_DCU_TXP		0x1270			/* Register Address */
810#define	AR5K_DCU_TXP_M		0x000003ff	/* Tx pause mask */
811#define	AR5K_DCU_TXP_STATUS	0x00010000	/* Tx pause status */
812
813/*
814 * DCU transmit filter table 0 (32 entries)
815 * each entry contains a 32bit slice of the
816 * 128bit tx filter for each DCU (4 slices per DCU)
817 */
818#define AR5K_DCU_TX_FILTER_0_BASE	0x1038
819#define	AR5K_DCU_TX_FILTER_0(_n)	(AR5K_DCU_TX_FILTER_0_BASE + (_n * 64))
820
821/*
822 * DCU transmit filter table 1 (16 entries)
823 */
824#define AR5K_DCU_TX_FILTER_1_BASE	0x103c
825#define	AR5K_DCU_TX_FILTER_1(_n)	(AR5K_DCU_TX_FILTER_1_BASE + (_n * 64))
826
827/*
828 * DCU clear transmit filter register
829 */
830#define AR5K_DCU_TX_FILTER_CLR	0x143c
831
832/*
833 * DCU set transmit filter register
834 */
835#define AR5K_DCU_TX_FILTER_SET	0x147c
836
837/*
838 * Reset control register
839 */
840#define AR5K_RESET_CTL		0x4000			/* Register Address */
841#define AR5K_RESET_CTL_PCU	0x00000001	/* Protocol Control Unit reset */
842#define AR5K_RESET_CTL_DMA	0x00000002	/* DMA (Rx/Tx) reset [5210] */
843#define	AR5K_RESET_CTL_BASEBAND	0x00000002	/* Baseband reset [5211+] */
844#define AR5K_RESET_CTL_MAC	0x00000004	/* MAC reset (PCU+Baseband ?) [5210] */
845#define AR5K_RESET_CTL_PHY	0x00000008	/* PHY reset [5210] */
846#define AR5K_RESET_CTL_PCI	0x00000010	/* PCI Core reset (interrupts etc) */
847
848/*
849 * Sleep control register
850 */
851#define AR5K_SLEEP_CTL			0x4004			/* Register Address */
852#define AR5K_SLEEP_CTL_SLDUR		0x0000ffff	/* Sleep duration mask */
853#define AR5K_SLEEP_CTL_SLDUR_S		0
854#define AR5K_SLEEP_CTL_SLE		0x00030000	/* Sleep enable mask */
855#define AR5K_SLEEP_CTL_SLE_S		16
856#define AR5K_SLEEP_CTL_SLE_WAKE		0x00000000	/* Force chip awake */
857#define AR5K_SLEEP_CTL_SLE_SLP		0x00010000	/* Force chip sleep */
858#define AR5K_SLEEP_CTL_SLE_ALLOW	0x00020000	/* Normal sleep policy */
859#define AR5K_SLEEP_CTL_SLE_UNITS	0x00000008	/* [5211+] */
860#define AR5K_SLEEP_CTL_DUR_TIM_POL	0x00040000	/* Sleep duration timing policy */
861#define AR5K_SLEEP_CTL_DUR_WRITE_POL	0x00080000	/* Sleep duration write policy */
862#define AR5K_SLEEP_CTL_SLE_POL		0x00100000	/* Sleep policy mode */
863
864/*
865 * Interrupt pending register
866 */
867#define AR5K_INTPEND	0x4008
868#define AR5K_INTPEND_M	0x00000001
869
870/*
871 * Sleep force register
872 */
873#define AR5K_SFR	0x400c
874#define AR5K_SFR_EN	0x00000001
875
876/*
877 * PCI configuration register
878 * TODO: Fix LED stuff
879 */
880#define AR5K_PCICFG			0x4010			/* Register Address */
881#define AR5K_PCICFG_EEAE		0x00000001	/* Eeprom access enable [5210] */
882#define AR5K_PCICFG_SLEEP_CLOCK_EN	0x00000002	/* Enable sleep clock */
883#define AR5K_PCICFG_CLKRUNEN		0x00000004	/* CLKRUN enable [5211+] */
884#define AR5K_PCICFG_EESIZE		0x00000018	/* Mask for EEPROM size [5211+] */
885#define AR5K_PCICFG_EESIZE_S		3
886#define AR5K_PCICFG_EESIZE_4K		0		/* 4K */
887#define AR5K_PCICFG_EESIZE_8K		1		/* 8K */
888#define AR5K_PCICFG_EESIZE_16K		2		/* 16K */
889#define AR5K_PCICFG_EESIZE_FAIL		3		/* Failed to get size [5211+] */
890#define AR5K_PCICFG_LED			0x00000060	/* Led status [5211+] */
891#define AR5K_PCICFG_LED_NONE		0x00000000	/* Default [5211+] */
892#define AR5K_PCICFG_LED_PEND		0x00000020	/* Scan / Auth pending */
893#define AR5K_PCICFG_LED_ASSOC		0x00000040	/* Associated */
894#define	AR5K_PCICFG_BUS_SEL		0x00000380	/* Mask for "bus select" [5211+] (?) */
895#define AR5K_PCICFG_CBEFIX_DIS		0x00000400	/* Disable CBE fix */
896#define AR5K_PCICFG_SL_INTEN		0x00000800	/* Enable interrupts when asleep */
897#define AR5K_PCICFG_LED_BCTL		0x00001000	/* Led blink (?) [5210] */
898#define AR5K_PCICFG_RETRY_FIX		0x00001000	/* Enable pci core retry fix */
899#define AR5K_PCICFG_SL_INPEN		0x00002000	/* Sleep even whith pending interrupts*/
900#define AR5K_PCICFG_SPWR_DN		0x00010000	/* Mask for power status */
901#define AR5K_PCICFG_LEDMODE		0x000e0000	/* Ledmode [5211+] */
902#define AR5K_PCICFG_LEDMODE_PROP	0x00000000	/* Blink on standard traffic [5211+] */
903#define AR5K_PCICFG_LEDMODE_PROM	0x00020000	/* Default mode (blink on any traffic) [5211+] */
904#define AR5K_PCICFG_LEDMODE_PWR		0x00040000	/* Some other blinking mode  (?) [5211+] */
905#define AR5K_PCICFG_LEDMODE_RAND	0x00060000	/* Random blinking (?) [5211+] */
906#define AR5K_PCICFG_LEDBLINK		0x00700000	/* Led blink rate */
907#define AR5K_PCICFG_LEDBLINK_S		20
908#define AR5K_PCICFG_LEDSLOW		0x00800000	/* Slowest led blink rate [5211+] */
909#define AR5K_PCICFG_LEDSTATE				\
910	(AR5K_PCICFG_LED | AR5K_PCICFG_LEDMODE |	\
911	AR5K_PCICFG_LEDBLINK | AR5K_PCICFG_LEDSLOW)
912#define	AR5K_PCICFG_SLEEP_CLOCK_RATE	0x03000000	/* Sleep clock rate */
913#define	AR5K_PCICFG_SLEEP_CLOCK_RATE_S	24
914
915/*
916 * "General Purpose Input/Output" (GPIO) control register
917 *
918 * I'm not sure about this but after looking at the code
919 * for all chipsets here is what i got.
920 *
921 * We have 6 GPIOs (pins), each GPIO has 4 modes (2 bits)
922 * Mode 0 -> always input
923 * Mode 1 -> output when GPIODO for this GPIO is set to 0
924 * Mode 2 -> output when GPIODO for this GPIO is set to 1
925 * Mode 3 -> always output
926 *
927 * For more infos check out get_gpio/set_gpio and
928 * set_gpio_input/set_gpio_output functs.
929 * For more infos on gpio interrupt check out set_gpio_intr.
930 */
931#define AR5K_NUM_GPIO	6
932
933#define AR5K_GPIOCR		0x4014				/* Register Address */
934#define AR5K_GPIOCR_INT_ENA	0x00008000		/* Enable GPIO interrupt */
935#define AR5K_GPIOCR_INT_SELL	0x00000000		/* Generate interrupt when pin is low */
936#define AR5K_GPIOCR_INT_SELH	0x00010000		/* Generate interrupt when pin is high */
937#define AR5K_GPIOCR_IN(n)	(0 << ((n) * 2))	/* Mode 0 for pin n */
938#define AR5K_GPIOCR_OUT0(n)	(1 << ((n) * 2))	/* Mode 1 for pin n */
939#define AR5K_GPIOCR_OUT1(n)	(2 << ((n) * 2))	/* Mode 2 for pin n */
940#define AR5K_GPIOCR_OUT(n)	(3 << ((n) * 2))	/* Mode 3 for pin n */
941#define AR5K_GPIOCR_INT_SEL(n)	((n) << 12)		/* Interrupt for GPIO pin n */
942
943/*
944 * "General Purpose Input/Output" (GPIO) data output register
945 */
946#define AR5K_GPIODO	0x4018
947
948/*
949 * "General Purpose Input/Output" (GPIO) data input register
950 */
951#define AR5K_GPIODI	0x401c
952#define AR5K_GPIODI_M	0x0000002f
953
954/*
955 * Silicon revision register
956 */
957#define AR5K_SREV		0x4020			/* Register Address */
958#define AR5K_SREV_REV		0x0000000f	/* Mask for revision */
959#define AR5K_SREV_REV_S		0
960#define AR5K_SREV_VER		0x000000ff	/* Mask for version */
961#define AR5K_SREV_VER_S		4
962
963/*
964 * TXE write posting register
965 */
966#define	AR5K_TXEPOST	0x4028
967
968/*
969 * QCU sleep mask
970 */
971#define	AR5K_QCU_SLEEP_MASK	0x402c
972
973/* 0x4068 is compression buffer configuration
974 * register on 5414 and pm configuration register
975 * on 5424 and newer pci-e chips. */
976
977/*
978 * Compression buffer configuration
979 * register (enable/disable) [5414]
980 */
981#define AR5K_5414_CBCFG		0x4068
982#define AR5K_5414_CBCFG_BUF_DIS	0x10	/* Disable buffer */
983
984/*
985 * PCI-E Power managment configuration
986 * and status register [5424+]
987 */
988#define	AR5K_PCIE_PM_CTL		0x4068			/* Register address */
989/* Only 5424 */
990#define	AR5K_PCIE_PM_CTL_L1_WHEN_D2	0x00000001	/* enable PCIe core enter L1
991							when d2_sleep_en is asserted */
992#define	AR5K_PCIE_PM_CTL_L0_L0S_CLEAR	0x00000002	/* Clear L0 and L0S counters */
993#define	AR5K_PCIE_PM_CTL_L0_L0S_EN	0x00000004	/* Start L0 nd L0S counters */
994#define	AR5K_PCIE_PM_CTL_LDRESET_EN	0x00000008	/* Enable reset when link goes
995							down */
996/* Wake On Wireless */
997#define	AR5K_PCIE_PM_CTL_PME_EN		0x00000010	/* PME Enable */
998#define	AR5K_PCIE_PM_CTL_AUX_PWR_DET	0x00000020	/* Aux power detect */
999#define	AR5K_PCIE_PM_CTL_PME_CLEAR	0x00000040	/* Clear PME */
1000#define	AR5K_PCIE_PM_CTL_PSM_D0		0x00000080
1001#define	AR5K_PCIE_PM_CTL_PSM_D1		0x00000100
1002#define	AR5K_PCIE_PM_CTL_PSM_D2		0x00000200
1003#define	AR5K_PCIE_PM_CTL_PSM_D3		0x00000400
1004
1005/*
1006 * PCI-E Workaround enable register
1007 */
1008#define	AR5K_PCIE_WAEN	0x407c
1009
1010/*
1011 * PCI-E Serializer/Desirializer
1012 * registers
1013 */
1014#define	AR5K_PCIE_SERDES	0x4080
1015#define	AR5K_PCIE_SERDES_RESET	0x4084
1016
1017/*====EEPROM REGISTERS====*/
1018
1019/*
1020 * EEPROM access registers
1021 *
1022 * Here we got a difference between 5210/5211-12
1023 * read data register for 5210 is at 0x6800 and
1024 * status register is at 0x6c00. There is also
1025 * no eeprom command register on 5210 and the
1026 * offsets are different.
1027 *
1028 * To read eeprom data for a specific offset:
1029 * 5210 - enable eeprom access (AR5K_PCICFG_EEAE)
1030 *        read AR5K_EEPROM_BASE +(4 * offset)
1031 *        check the eeprom status register
1032 *        and read eeprom data register.
1033 *
1034 * 5211 - write offset to AR5K_EEPROM_BASE
1035 * 5212   write AR5K_EEPROM_CMD_READ on AR5K_EEPROM_CMD
1036 *        check the eeprom status register
1037 *        and read eeprom data register.
1038 *
1039 * To write eeprom data for a specific offset:
1040 * 5210 - enable eeprom access (AR5K_PCICFG_EEAE)
1041 *        write data to AR5K_EEPROM_BASE +(4 * offset)
1042 *        check the eeprom status register
1043 * 5211 - write AR5K_EEPROM_CMD_RESET on AR5K_EEPROM_CMD
1044 * 5212   write offset to AR5K_EEPROM_BASE
1045 *        write data to data register
1046 *	  write AR5K_EEPROM_CMD_WRITE on AR5K_EEPROM_CMD
1047 *        check the eeprom status register
1048 *
1049 * For more infos check eeprom_* functs and the ar5k.c
1050 * file posted in madwifi-devel mailing list.
1051 * http://sourceforge.net/mailarchive/message.php?msg_id=8966525
1052 *
1053 */
1054#define AR5K_EEPROM_BASE	0x6000
1055
1056/*
1057 * EEPROM data register
1058 */
1059#define AR5K_EEPROM_DATA_5211	0x6004
1060#define AR5K_EEPROM_DATA_5210	0x6800
1061#define	AR5K_EEPROM_DATA	(ah->ah_version == AR5K_AR5210 ? \
1062				AR5K_EEPROM_DATA_5210 : AR5K_EEPROM_DATA_5211)
1063
1064/*
1065 * EEPROM command register
1066 */
1067#define AR5K_EEPROM_CMD		0x6008			/* Register Addres */
1068#define AR5K_EEPROM_CMD_READ	0x00000001	/* EEPROM read */
1069#define AR5K_EEPROM_CMD_WRITE	0x00000002	/* EEPROM write */
1070#define AR5K_EEPROM_CMD_RESET	0x00000004	/* EEPROM reset */
1071
1072/*
1073 * EEPROM status register
1074 */
1075#define AR5K_EEPROM_STAT_5210	0x6c00			/* Register Address [5210] */
1076#define AR5K_EEPROM_STAT_5211	0x600c			/* Register Address [5211+] */
1077#define	AR5K_EEPROM_STATUS	(ah->ah_version == AR5K_AR5210 ? \
1078				AR5K_EEPROM_STAT_5210 : AR5K_EEPROM_STAT_5211)
1079#define AR5K_EEPROM_STAT_RDERR	0x00000001	/* EEPROM read failed */
1080#define AR5K_EEPROM_STAT_RDDONE	0x00000002	/* EEPROM read successful */
1081#define AR5K_EEPROM_STAT_WRERR	0x00000004	/* EEPROM write failed */
1082#define AR5K_EEPROM_STAT_WRDONE	0x00000008	/* EEPROM write successful */
1083
1084/*
1085 * EEPROM config register
1086 */
1087#define AR5K_EEPROM_CFG			0x6010			/* Register Addres */
1088#define AR5K_EEPROM_CFG_SIZE		0x00000003		/* Size determination override */
1089#define AR5K_EEPROM_CFG_SIZE_AUTO	0
1090#define AR5K_EEPROM_CFG_SIZE_4KBIT	1
1091#define AR5K_EEPROM_CFG_SIZE_8KBIT	2
1092#define AR5K_EEPROM_CFG_SIZE_16KBIT	3
1093#define AR5K_EEPROM_CFG_WR_WAIT_DIS	0x00000004	/* Disable write wait */
1094#define AR5K_EEPROM_CFG_CLK_RATE	0x00000018	/* Clock rate */
1095#define AR5K_EEPROM_CFG_CLK_RATE_S		3
1096#define AR5K_EEPROM_CFG_CLK_RATE_156KHZ	0
1097#define AR5K_EEPROM_CFG_CLK_RATE_312KHZ	1
1098#define AR5K_EEPROM_CFG_CLK_RATE_625KHZ	2
1099#define AR5K_EEPROM_CFG_PROT_KEY	0x00ffff00      /* Protection key */
1100#define AR5K_EEPROM_CFG_PROT_KEY_S	8
1101#define AR5K_EEPROM_CFG_LIND_EN		0x01000000	/* Enable length indicator (?) */
1102
1103
1104/*
1105 * TODO: Wake On Wireless registers
1106 * Range 0x7000 - 0x7ce0
1107 */
1108
1109/*
1110 * Protocol Control Unit (PCU) registers
1111 */
1112/*
1113 * Used for checking initial register writes
1114 * during channel reset (see reset func)
1115 */
1116#define AR5K_PCU_MIN	0x8000
1117#define AR5K_PCU_MAX	0x8fff
1118
1119/*
1120 * First station id register (Lower 32 bits of MAC address)
1121 */
1122#define AR5K_STA_ID0		0x8000
1123#define	AR5K_STA_ID0_ARRD_L32	0xffffffff
1124
1125/*
1126 * Second station id register (Upper 16 bits of MAC address + PCU settings)
1127 */
1128#define AR5K_STA_ID1			0x8004			/* Register Address */
1129#define	AR5K_STA_ID1_ADDR_U16		0x0000ffff	/* Upper 16 bits of MAC addres */
1130#define AR5K_STA_ID1_AP			0x00010000	/* Set AP mode */
1131#define AR5K_STA_ID1_ADHOC		0x00020000	/* Set Ad-Hoc mode */
1132#define AR5K_STA_ID1_PWR_SV		0x00040000	/* Power save reporting */
1133#define AR5K_STA_ID1_NO_KEYSRCH		0x00080000	/* No key search */
1134#define AR5K_STA_ID1_NO_PSPOLL		0x00100000	/* No power save polling [5210] */
1135#define AR5K_STA_ID1_PCF_5211		0x00100000	/* Enable PCF on [5211+] */
1136#define AR5K_STA_ID1_PCF_5210		0x00200000	/* Enable PCF on [5210]*/
1137#define	AR5K_STA_ID1_PCF		(ah->ah_version == AR5K_AR5210 ? \
1138					AR5K_STA_ID1_PCF_5210 : AR5K_STA_ID1_PCF_5211)
1139#define AR5K_STA_ID1_DEFAULT_ANTENNA	0x00200000	/* Use default antenna */
1140#define AR5K_STA_ID1_DESC_ANTENNA	0x00400000	/* Update antenna from descriptor */
1141#define AR5K_STA_ID1_RTS_DEF_ANTENNA	0x00800000	/* Use default antenna for RTS */
1142#define AR5K_STA_ID1_ACKCTS_6MB		0x01000000	/* Use 6Mbit/s for ACK/CTS */
1143#define AR5K_STA_ID1_BASE_RATE_11B	0x02000000	/* Use 11b base rate for ACK/CTS [5211+] */
1144#define AR5K_STA_ID1_SELFGEN_DEF_ANT	0x04000000	/* Use def. antenna for self generated frames */
1145#define AR5K_STA_ID1_CRYPT_MIC_EN	0x08000000	/* Enable MIC */
1146#define AR5K_STA_ID1_KEYSRCH_MODE	0x10000000	/* Look up key when key id != 0 */
1147#define AR5K_STA_ID1_PRESERVE_SEQ_NUM	0x20000000	/* Preserve sequence number */
1148#define AR5K_STA_ID1_CBCIV_ENDIAN	0x40000000	/* ??? */
1149#define AR5K_STA_ID1_KEYSRCH_MCAST	0x80000000	/* Do key cache search for mcast frames */
1150
1151/*
1152 * First BSSID register (MAC address, lower 32bits)
1153 */
1154#define AR5K_BSS_ID0	0x8008
1155
1156/*
1157 * Second BSSID register (MAC address in upper 16 bits)
1158 *
1159 * AID: Association ID
1160 */
1161#define AR5K_BSS_ID1		0x800c
1162#define AR5K_BSS_ID1_AID	0xffff0000
1163#define AR5K_BSS_ID1_AID_S	16
1164
1165/*
1166 * Backoff slot time register
1167 */
1168#define AR5K_SLOT_TIME	0x8010
1169
1170/*
1171 * ACK/CTS timeout register
1172 */
1173#define AR5K_TIME_OUT		0x8014			/* Register Address */
1174#define AR5K_TIME_OUT_ACK	0x00001fff	/* ACK timeout mask */
1175#define AR5K_TIME_OUT_ACK_S	0
1176#define AR5K_TIME_OUT_CTS	0x1fff0000	/* CTS timeout mask */
1177#define AR5K_TIME_OUT_CTS_S	16
1178
1179/*
1180 * RSSI threshold register
1181 */
1182#define AR5K_RSSI_THR			0x8018		/* Register Address */
1183#define AR5K_RSSI_THR_M			0x000000ff	/* Mask for RSSI threshold [5211+] */
1184#define AR5K_RSSI_THR_BMISS_5210	0x00000700	/* Mask for Beacon Missed threshold [5210] */
1185#define AR5K_RSSI_THR_BMISS_5210_S	8
1186#define AR5K_RSSI_THR_BMISS_5211	0x0000ff00	/* Mask for Beacon Missed threshold [5211+] */
1187#define AR5K_RSSI_THR_BMISS_5211_S	8
1188#define	AR5K_RSSI_THR_BMISS		(ah->ah_version == AR5K_AR5210 ? \
1189					AR5K_RSSI_THR_BMISS_5210 : AR5K_RSSI_THR_BMISS_5211)
1190#define	AR5K_RSSI_THR_BMISS_S		8
1191
1192/*
1193 * 5210 has more PCU registers because there is no QCU/DCU
1194 * so queue parameters are set here, this way a lot common
1195 * registers have different address for 5210. To make things
1196 * easier we define a macro based on ah->ah_version for common
1197 * registers with different addresses and common flags.
1198 */
1199
1200/*
1201 * Retry limit register
1202 *
1203 * Retry limit register for 5210 (no QCU/DCU so it's done in PCU)
1204 */
1205#define AR5K_NODCU_RETRY_LMT		0x801c			/* Register Address */
1206#define AR5K_NODCU_RETRY_LMT_SH_RETRY	0x0000000f	/* Short retry limit mask */
1207#define AR5K_NODCU_RETRY_LMT_SH_RETRY_S	0
1208#define AR5K_NODCU_RETRY_LMT_LG_RETRY	0x000000f0	/* Long retry mask */
1209#define AR5K_NODCU_RETRY_LMT_LG_RETRY_S	4
1210#define AR5K_NODCU_RETRY_LMT_SSH_RETRY	0x00003f00	/* Station short retry limit mask */
1211#define AR5K_NODCU_RETRY_LMT_SSH_RETRY_S	8
1212#define AR5K_NODCU_RETRY_LMT_SLG_RETRY	0x000fc000	/* Station long retry limit mask */
1213#define AR5K_NODCU_RETRY_LMT_SLG_RETRY_S	14
1214#define AR5K_NODCU_RETRY_LMT_CW_MIN	0x3ff00000	/* Minimum contention window mask */
1215#define AR5K_NODCU_RETRY_LMT_CW_MIN_S	20
1216
1217/*
1218 * Transmit latency register
1219 */
1220#define AR5K_USEC_5210			0x8020			/* Register Address [5210] */
1221#define AR5K_USEC_5211			0x801c			/* Register Address [5211+] */
1222#define AR5K_USEC			(ah->ah_version == AR5K_AR5210 ? \
1223					AR5K_USEC_5210 : AR5K_USEC_5211)
1224#define AR5K_USEC_1			0x0000007f	/* clock cycles for 1us */
1225#define AR5K_USEC_1_S			0
1226#define AR5K_USEC_32			0x00003f80	/* clock cycles for 1us while on 32Mhz clock */
1227#define AR5K_USEC_32_S			7
1228#define AR5K_USEC_TX_LATENCY_5211	0x007fc000
1229#define AR5K_USEC_TX_LATENCY_5211_S	14
1230#define AR5K_USEC_RX_LATENCY_5211	0x1f800000
1231#define AR5K_USEC_RX_LATENCY_5211_S	23
1232#define AR5K_USEC_TX_LATENCY_5210	0x000fc000	/* also for 5311 */
1233#define AR5K_USEC_TX_LATENCY_5210_S	14
1234#define AR5K_USEC_RX_LATENCY_5210	0x03f00000	/* also for 5311 */
1235#define AR5K_USEC_RX_LATENCY_5210_S	20
1236
1237/*
1238 * PCU beacon control register
1239 */
1240#define AR5K_BEACON_5210	0x8024			/*Register Address [5210] */
1241#define AR5K_BEACON_5211	0x8020			/*Register Address [5211+] */
1242#define AR5K_BEACON		(ah->ah_version == AR5K_AR5210 ? \
1243				AR5K_BEACON_5210 : AR5K_BEACON_5211)
1244#define AR5K_BEACON_PERIOD	0x0000ffff	/* Mask for beacon period */
1245#define AR5K_BEACON_PERIOD_S	0
1246#define AR5K_BEACON_TIM		0x007f0000	/* Mask for TIM offset */
1247#define AR5K_BEACON_TIM_S	16
1248#define AR5K_BEACON_ENABLE	0x00800000	/* Enable beacons */
1249#define AR5K_BEACON_RESET_TSF	0x01000000	/* Force TSF reset */
1250
1251/*
1252 * CFP period register
1253 */
1254#define AR5K_CFP_PERIOD_5210	0x8028
1255#define AR5K_CFP_PERIOD_5211	0x8024
1256#define AR5K_CFP_PERIOD		(ah->ah_version == AR5K_AR5210 ? \
1257				AR5K_CFP_PERIOD_5210 : AR5K_CFP_PERIOD_5211)
1258
1259/*
1260 * Next beacon time register
1261 */
1262#define AR5K_TIMER0_5210	0x802c
1263#define AR5K_TIMER0_5211	0x8028
1264#define AR5K_TIMER0		(ah->ah_version == AR5K_AR5210 ? \
1265				AR5K_TIMER0_5210 : AR5K_TIMER0_5211)
1266
1267/*
1268 * Next DMA beacon alert register
1269 */
1270#define AR5K_TIMER1_5210	0x8030
1271#define AR5K_TIMER1_5211	0x802c
1272#define AR5K_TIMER1		(ah->ah_version == AR5K_AR5210 ? \
1273				AR5K_TIMER1_5210 : AR5K_TIMER1_5211)
1274
1275/*
1276 * Next software beacon alert register
1277 */
1278#define AR5K_TIMER2_5210	0x8034
1279#define AR5K_TIMER2_5211	0x8030
1280#define AR5K_TIMER2		(ah->ah_version == AR5K_AR5210 ? \
1281				AR5K_TIMER2_5210 : AR5K_TIMER2_5211)
1282
1283/*
1284 * Next ATIM window time register
1285 */
1286#define AR5K_TIMER3_5210	0x8038
1287#define AR5K_TIMER3_5211	0x8034
1288#define AR5K_TIMER3		(ah->ah_version == AR5K_AR5210 ? \
1289				AR5K_TIMER3_5210 : AR5K_TIMER3_5211)
1290
1291
1292/*
1293 * 5210 First inter frame spacing register (IFS)
1294 */
1295#define AR5K_IFS0		0x8040
1296#define AR5K_IFS0_SIFS		0x000007ff
1297#define AR5K_IFS0_SIFS_S	0
1298#define AR5K_IFS0_DIFS		0x007ff800
1299#define AR5K_IFS0_DIFS_S	11
1300
1301/*
1302 * 5210 Second inter frame spacing register (IFS)
1303 */
1304#define AR5K_IFS1		0x8044
1305#define AR5K_IFS1_PIFS		0x00000fff
1306#define AR5K_IFS1_PIFS_S	0
1307#define AR5K_IFS1_EIFS		0x03fff000
1308#define AR5K_IFS1_EIFS_S	12
1309#define AR5K_IFS1_CS_EN		0x04000000
1310
1311
1312/*
1313 * CFP duration register
1314 */
1315#define AR5K_CFP_DUR_5210	0x8048
1316#define AR5K_CFP_DUR_5211	0x8038
1317#define AR5K_CFP_DUR		(ah->ah_version == AR5K_AR5210 ? \
1318				AR5K_CFP_DUR_5210 : AR5K_CFP_DUR_5211)
1319
1320/*
1321 * Receive filter register
1322 */
1323#define AR5K_RX_FILTER_5210	0x804c			/* Register Address [5210] */
1324#define AR5K_RX_FILTER_5211	0x803c			/* Register Address [5211+] */
1325#define AR5K_RX_FILTER		(ah->ah_version == AR5K_AR5210 ? \
1326				AR5K_RX_FILTER_5210 : AR5K_RX_FILTER_5211)
1327#define	AR5K_RX_FILTER_UCAST 	0x00000001	/* Don't filter unicast frames */
1328#define	AR5K_RX_FILTER_MCAST 	0x00000002	/* Don't filter multicast frames */
1329#define	AR5K_RX_FILTER_BCAST 	0x00000004	/* Don't filter broadcast frames */
1330#define	AR5K_RX_FILTER_CONTROL 	0x00000008	/* Don't filter control frames */
1331#define	AR5K_RX_FILTER_BEACON 	0x00000010	/* Don't filter beacon frames */
1332#define	AR5K_RX_FILTER_PROM 	0x00000020	/* Set promiscuous mode */
1333#define	AR5K_RX_FILTER_XRPOLL 	0x00000040	/* Don't filter XR poll frame [5212+] */
1334#define	AR5K_RX_FILTER_PROBEREQ 0x00000080	/* Don't filter probe requests [5212+] */
1335#define	AR5K_RX_FILTER_PHYERR_5212	0x00000100	/* Don't filter phy errors [5212+] */
1336#define	AR5K_RX_FILTER_RADARERR_5212 	0x00000200	/* Don't filter phy radar errors [5212+] */
1337#define AR5K_RX_FILTER_PHYERR_5211	0x00000040	/* [5211] */
1338#define AR5K_RX_FILTER_RADARERR_5211	0x00000080	/* [5211] */
1339#define AR5K_RX_FILTER_PHYERR  \
1340	((ah->ah_version == AR5K_AR5211 ? \
1341	AR5K_RX_FILTER_PHYERR_5211 : AR5K_RX_FILTER_PHYERR_5212))
1342#define        AR5K_RX_FILTER_RADARERR \
1343	((ah->ah_version == AR5K_AR5211 ? \
1344	AR5K_RX_FILTER_RADARERR_5211 : AR5K_RX_FILTER_RADARERR_5212))
1345
1346/*
1347 * Multicast filter register (lower 32 bits)
1348 */
1349#define AR5K_MCAST_FILTER0_5210	0x8050
1350#define AR5K_MCAST_FILTER0_5211	0x8040
1351#define AR5K_MCAST_FILTER0	(ah->ah_version == AR5K_AR5210 ? \
1352				AR5K_MCAST_FILTER0_5210 : AR5K_MCAST_FILTER0_5211)
1353
1354/*
1355 * Multicast filter register (higher 16 bits)
1356 */
1357#define AR5K_MCAST_FILTER1_5210	0x8054
1358#define AR5K_MCAST_FILTER1_5211	0x8044
1359#define AR5K_MCAST_FILTER1	(ah->ah_version == AR5K_AR5210 ? \
1360				AR5K_MCAST_FILTER1_5210 : AR5K_MCAST_FILTER1_5211)
1361
1362
1363/*
1364 * Transmit mask register (lower 32 bits) [5210]
1365 */
1366#define AR5K_TX_MASK0	0x8058
1367
1368/*
1369 * Transmit mask register (higher 16 bits) [5210]
1370 */
1371#define AR5K_TX_MASK1	0x805c
1372
1373/*
1374 * Clear transmit mask [5210]
1375 */
1376#define AR5K_CLR_TMASK	0x8060
1377
1378/*
1379 * Trigger level register (before transmission) [5210]
1380 */
1381#define AR5K_TRIG_LVL	0x8064
1382
1383
1384/*
1385 * PCU control register
1386 *
1387 * Only DIS_RX is used in the code, the rest i guess are
1388 * for tweaking/diagnostics.
1389 */
1390#define AR5K_DIAG_SW_5210		0x8068			/* Register Address [5210] */
1391#define AR5K_DIAG_SW_5211		0x8048			/* Register Address [5211+] */
1392#define AR5K_DIAG_SW			(ah->ah_version == AR5K_AR5210 ? \
1393					AR5K_DIAG_SW_5210 : AR5K_DIAG_SW_5211)
1394#define AR5K_DIAG_SW_DIS_WEP_ACK	0x00000001	/* Disable ACKs if WEP key is invalid */
1395#define AR5K_DIAG_SW_DIS_ACK		0x00000002	/* Disable ACKs */
1396#define AR5K_DIAG_SW_DIS_CTS		0x00000004	/* Disable CTSs */
1397#define AR5K_DIAG_SW_DIS_ENC		0x00000008	/* Disable encryption */
1398#define AR5K_DIAG_SW_DIS_DEC		0x00000010	/* Disable decryption */
1399#define AR5K_DIAG_SW_DIS_TX		0x00000020	/* Disable transmit [5210] */
1400#define AR5K_DIAG_SW_DIS_RX_5210	0x00000040	/* Disable recieve */
1401#define AR5K_DIAG_SW_DIS_RX_5211	0x00000020
1402#define	AR5K_DIAG_SW_DIS_RX		(ah->ah_version == AR5K_AR5210 ? \
1403					AR5K_DIAG_SW_DIS_RX_5210 : AR5K_DIAG_SW_DIS_RX_5211)
1404#define AR5K_DIAG_SW_LOOP_BACK_5210	0x00000080	/* Loopback (i guess it goes with DIS_TX) [5210] */
1405#define AR5K_DIAG_SW_LOOP_BACK_5211	0x00000040
1406#define AR5K_DIAG_SW_LOOP_BACK		(ah->ah_version == AR5K_AR5210 ? \
1407					AR5K_DIAG_SW_LOOP_BACK_5210 : AR5K_DIAG_SW_LOOP_BACK_5211)
1408#define AR5K_DIAG_SW_CORR_FCS_5210	0x00000100	/* Corrupted FCS */
1409#define AR5K_DIAG_SW_CORR_FCS_5211	0x00000080
1410#define AR5K_DIAG_SW_CORR_FCS		(ah->ah_version == AR5K_AR5210 ? \
1411					AR5K_DIAG_SW_CORR_FCS_5210 : AR5K_DIAG_SW_CORR_FCS_5211)
1412#define AR5K_DIAG_SW_CHAN_INFO_5210	0x00000200	/* Dump channel info */
1413#define AR5K_DIAG_SW_CHAN_INFO_5211	0x00000100
1414#define AR5K_DIAG_SW_CHAN_INFO		(ah->ah_version == AR5K_AR5210 ? \
1415					AR5K_DIAG_SW_CHAN_INFO_5210 : AR5K_DIAG_SW_CHAN_INFO_5211)
1416#define AR5K_DIAG_SW_EN_SCRAM_SEED_5210	0x00000400	/* Enable fixed scrambler seed */
1417#define AR5K_DIAG_SW_EN_SCRAM_SEED_5211	0x00000200
1418#define AR5K_DIAG_SW_EN_SCRAM_SEED	(ah->ah_version == AR5K_AR5210 ? \
1419					AR5K_DIAG_SW_EN_SCRAM_SEED_5210 : AR5K_DIAG_SW_EN_SCRAM_SEED_5211)
1420#define AR5K_DIAG_SW_ECO_ENABLE		0x00000400	/* [5211+] */
1421#define AR5K_DIAG_SW_SCVRAM_SEED	0x0003f800	/* [5210] */
1422#define AR5K_DIAG_SW_SCRAM_SEED_M	0x0001fc00	/* Scrambler seed mask */
1423#define AR5K_DIAG_SW_SCRAM_SEED_S	10
1424#define AR5K_DIAG_SW_DIS_SEQ_INC	0x00040000	/* Disable seqnum increment (?)[5210] */
1425#define AR5K_DIAG_SW_FRAME_NV0_5210	0x00080000
1426#define AR5K_DIAG_SW_FRAME_NV0_5211	0x00020000	/* Accept frames of non-zero protocol number */
1427#define	AR5K_DIAG_SW_FRAME_NV0		(ah->ah_version == AR5K_AR5210 ? \
1428					AR5K_DIAG_SW_FRAME_NV0_5210 : AR5K_DIAG_SW_FRAME_NV0_5211)
1429#define AR5K_DIAG_SW_OBSPT_M		0x000c0000	/* Observation point select (?) */
1430#define AR5K_DIAG_SW_OBSPT_S		18
1431#define AR5K_DIAG_SW_RX_CLEAR_HIGH	0x0010000	/* Force RX Clear high */
1432#define AR5K_DIAG_SW_IGNORE_CARR_SENSE	0x0020000	/* Ignore virtual carrier sense */
1433#define AR5K_DIAG_SW_CHANEL_IDLE_HIGH	0x0040000	/* Force channel idle high */
1434#define AR5K_DIAG_SW_PHEAR_ME		0x0080000	/* ??? */
1435
1436/*
1437 * TSF (clock) register (lower 32 bits)
1438 */
1439#define AR5K_TSF_L32_5210	0x806c
1440#define AR5K_TSF_L32_5211	0x804c
1441#define	AR5K_TSF_L32		(ah->ah_version == AR5K_AR5210 ? \
1442				AR5K_TSF_L32_5210 : AR5K_TSF_L32_5211)
1443
1444/*
1445 * TSF (clock) register (higher 32 bits)
1446 */
1447#define AR5K_TSF_U32_5210	0x8070
1448#define AR5K_TSF_U32_5211	0x8050
1449#define	AR5K_TSF_U32		(ah->ah_version == AR5K_AR5210 ? \
1450				AR5K_TSF_U32_5210 : AR5K_TSF_U32_5211)
1451
1452/*
1453 * Last beacon timestamp register (Read Only)
1454 */
1455#define AR5K_LAST_TSTP	0x8080
1456
1457/*
1458 * ADDAC test register [5211+]
1459 */
1460#define AR5K_ADDAC_TEST			0x8054			/* Register Address */
1461#define AR5K_ADDAC_TEST_TXCONT 		0x00000001	/* Test continuous tx */
1462#define AR5K_ADDAC_TEST_TST_MODE	0x00000002	/* Test mode */
1463#define AR5K_ADDAC_TEST_LOOP_EN		0x00000004	/* Enable loop */
1464#define AR5K_ADDAC_TEST_LOOP_LEN	0x00000008	/* Loop length (field) */
1465#define AR5K_ADDAC_TEST_USE_U8		0x00004000	/* Use upper 8 bits */
1466#define AR5K_ADDAC_TEST_MSB		0x00008000	/* State of MSB */
1467#define AR5K_ADDAC_TEST_TRIG_SEL	0x00010000	/* Trigger select */
1468#define AR5K_ADDAC_TEST_TRIG_PTY	0x00020000	/* Trigger polarity */
1469#define AR5K_ADDAC_TEST_RXCONT		0x00040000	/* Continuous capture */
1470#define AR5K_ADDAC_TEST_CAPTURE		0x00080000	/* Begin capture */
1471#define AR5K_ADDAC_TEST_TST_ARM		0x00100000	/* ARM rx buffer for capture */
1472
1473/*
1474 * Default antenna register [5211+]
1475 */
1476#define AR5K_DEFAULT_ANTENNA	0x8058
1477
1478/*
1479 * Frame control QoS mask register (?) [5211+]
1480 * (FC_QOS_MASK)
1481 */
1482#define AR5K_FRAME_CTL_QOSM	0x805c
1483
1484/*
1485 * Seq mask register (?) [5211+]
1486 */
1487#define AR5K_SEQ_MASK	0x8060
1488
1489/*
1490 * Retry count register [5210]
1491 */
1492#define AR5K_RETRY_CNT		0x8084			/* Register Address [5210] */
1493#define AR5K_RETRY_CNT_SSH	0x0000003f	/* Station short retry count (?) */
1494#define AR5K_RETRY_CNT_SLG	0x00000fc0	/* Station long retry count (?) */
1495
1496/*
1497 * Back-off status register [5210]
1498 */
1499#define AR5K_BACKOFF		0x8088			/* Register Address [5210] */
1500#define AR5K_BACKOFF_CW		0x000003ff	/* Backoff Contention Window (?) */
1501#define AR5K_BACKOFF_CNT	0x03ff0000	/* Backoff count (?) */
1502
1503
1504
1505/*
1506 * NAV register (current)
1507 */
1508#define AR5K_NAV_5210		0x808c
1509#define AR5K_NAV_5211		0x8084
1510#define	AR5K_NAV		(ah->ah_version == AR5K_AR5210 ? \
1511				AR5K_NAV_5210 : AR5K_NAV_5211)
1512
1513/*
1514 * RTS success register
1515 */
1516#define AR5K_RTS_OK_5210	0x8090
1517#define AR5K_RTS_OK_5211	0x8088
1518#define	AR5K_RTS_OK		(ah->ah_version == AR5K_AR5210 ? \
1519				AR5K_RTS_OK_5210 : AR5K_RTS_OK_5211)
1520
1521/*
1522 * RTS failure register
1523 */
1524#define AR5K_RTS_FAIL_5210	0x8094
1525#define AR5K_RTS_FAIL_5211	0x808c
1526#define	AR5K_RTS_FAIL		(ah->ah_version == AR5K_AR5210 ? \
1527				AR5K_RTS_FAIL_5210 : AR5K_RTS_FAIL_5211)
1528
1529/*
1530 * ACK failure register
1531 */
1532#define AR5K_ACK_FAIL_5210	0x8098
1533#define AR5K_ACK_FAIL_5211	0x8090
1534#define	AR5K_ACK_FAIL		(ah->ah_version == AR5K_AR5210 ? \
1535				AR5K_ACK_FAIL_5210 : AR5K_ACK_FAIL_5211)
1536
1537/*
1538 * FCS failure register
1539 */
1540#define AR5K_FCS_FAIL_5210	0x809c
1541#define AR5K_FCS_FAIL_5211	0x8094
1542#define	AR5K_FCS_FAIL		(ah->ah_version == AR5K_AR5210 ? \
1543				AR5K_FCS_FAIL_5210 : AR5K_FCS_FAIL_5211)
1544
1545/*
1546 * Beacon count register
1547 */
1548#define AR5K_BEACON_CNT_5210	0x80a0
1549#define AR5K_BEACON_CNT_5211	0x8098
1550#define	AR5K_BEACON_CNT		(ah->ah_version == AR5K_AR5210 ? \
1551				AR5K_BEACON_CNT_5210 : AR5K_BEACON_CNT_5211)
1552
1553
1554/*===5212 Specific PCU registers===*/
1555
1556/*
1557 * Transmit power control register
1558 */
1559#define AR5K_TPC			0x80e8
1560#define AR5K_TPC_ACK			0x0000003f	/* ack frames */
1561#define AR5K_TPC_ACK_S			0
1562#define AR5K_TPC_CTS			0x00003f00	/* cts frames */
1563#define AR5K_TPC_CTS_S			8
1564#define AR5K_TPC_CHIRP			0x003f0000	/* chirp frames */
1565#define AR5K_TPC_CHIRP_S		16
1566#define AR5K_TPC_DOPPLER		0x0f000000	/* doppler chirp span */
1567#define AR5K_TPC_DOPPLER_S		24
1568
1569/*
1570 * XR (eXtended Range) mode register
1571 */
1572#define AR5K_XRMODE			0x80c0			/* Register Address */
1573#define	AR5K_XRMODE_POLL_TYPE_M		0x0000003f	/* Mask for Poll type (?) */
1574#define	AR5K_XRMODE_POLL_TYPE_S		0
1575#define	AR5K_XRMODE_POLL_SUBTYPE_M	0x0000003c	/* Mask for Poll subtype (?) */
1576#define	AR5K_XRMODE_POLL_SUBTYPE_S	2
1577#define	AR5K_XRMODE_POLL_WAIT_ALL	0x00000080	/* Wait for poll */
1578#define	AR5K_XRMODE_SIFS_DELAY		0x000fff00	/* Mask for SIFS delay */
1579#define	AR5K_XRMODE_FRAME_HOLD_M	0xfff00000	/* Mask for frame hold (?) */
1580#define	AR5K_XRMODE_FRAME_HOLD_S	20
1581
1582/*
1583 * XR delay register
1584 */
1585#define AR5K_XRDELAY			0x80c4			/* Register Address */
1586#define AR5K_XRDELAY_SLOT_DELAY_M	0x0000ffff	/* Mask for slot delay */
1587#define AR5K_XRDELAY_SLOT_DELAY_S	0
1588#define AR5K_XRDELAY_CHIRP_DELAY_M	0xffff0000	/* Mask for CHIRP data delay */
1589#define AR5K_XRDELAY_CHIRP_DELAY_S	16
1590
1591/*
1592 * XR timeout register
1593 */
1594#define AR5K_XRTIMEOUT			0x80c8			/* Register Address */
1595#define AR5K_XRTIMEOUT_CHIRP_M		0x0000ffff	/* Mask for CHIRP timeout */
1596#define AR5K_XRTIMEOUT_CHIRP_S		0
1597#define AR5K_XRTIMEOUT_POLL_M		0xffff0000	/* Mask for Poll timeout */
1598#define AR5K_XRTIMEOUT_POLL_S		16
1599
1600/*
1601 * XR chirp register
1602 */
1603#define AR5K_XRCHIRP			0x80cc			/* Register Address */
1604#define AR5K_XRCHIRP_SEND		0x00000001	/* Send CHIRP */
1605#define AR5K_XRCHIRP_GAP		0xffff0000	/* Mask for CHIRP gap (?) */
1606
1607/*
1608 * XR stomp register
1609 */
1610#define AR5K_XRSTOMP			0x80d0			/* Register Address */
1611#define AR5K_XRSTOMP_TX			0x00000001	/* Stomp Tx (?) */
1612#define AR5K_XRSTOMP_RX			0x00000002	/* Stomp Rx (?) */
1613#define AR5K_XRSTOMP_TX_RSSI		0x00000004	/* Stomp Tx RSSI (?) */
1614#define AR5K_XRSTOMP_TX_BSSID		0x00000008	/* Stomp Tx BSSID (?) */
1615#define AR5K_XRSTOMP_DATA		0x00000010	/* Stomp data (?)*/
1616#define AR5K_XRSTOMP_RSSI_THRES		0x0000ff00	/* Mask for XR RSSI threshold */
1617
1618/*
1619 * First enhanced sleep register
1620 */
1621#define AR5K_SLEEP0			0x80d4			/* Register Address */
1622#define AR5K_SLEEP0_NEXT_DTIM		0x0007ffff	/* Mask for next DTIM (?) */
1623#define AR5K_SLEEP0_NEXT_DTIM_S		0
1624#define AR5K_SLEEP0_ASSUME_DTIM		0x00080000	/* Assume DTIM */
1625#define AR5K_SLEEP0_ENH_SLEEP_EN	0x00100000	/* Enable enchanced sleep control */
1626#define AR5K_SLEEP0_CABTO		0xff000000	/* Mask for CAB Time Out */
1627#define AR5K_SLEEP0_CABTO_S		24
1628
1629/*
1630 * Second enhanced sleep register
1631 */
1632#define AR5K_SLEEP1			0x80d8			/* Register Address */
1633#define AR5K_SLEEP1_NEXT_TIM		0x0007ffff	/* Mask for next TIM (?) */
1634#define AR5K_SLEEP1_NEXT_TIM_S		0
1635#define AR5K_SLEEP1_BEACON_TO		0xff000000	/* Mask for Beacon Time Out */
1636#define AR5K_SLEEP1_BEACON_TO_S		24
1637
1638/*
1639 * Third enhanced sleep register
1640 */
1641#define AR5K_SLEEP2			0x80dc			/* Register Address */
1642#define AR5K_SLEEP2_TIM_PER		0x0000ffff	/* Mask for TIM period (?) */
1643#define AR5K_SLEEP2_TIM_PER_S		0
1644#define AR5K_SLEEP2_DTIM_PER		0xffff0000	/* Mask for DTIM period (?) */
1645#define AR5K_SLEEP2_DTIM_PER_S		16
1646
1647/*
1648 * BSSID mask registers
1649 */
1650#define AR5K_BSS_IDM0			0x80e0	/* Upper bits */
1651#define AR5K_BSS_IDM1			0x80e4	/* Lower bits */
1652
1653/*
1654 * TX power control (TPC) register
1655 *
1656 * XXX: PCDAC steps (0.5dbm) or DBM ?
1657 *
1658 */
1659#define AR5K_TXPC			0x80e8			/* Register Address */
1660#define AR5K_TXPC_ACK_M			0x0000003f	/* ACK tx power */
1661#define AR5K_TXPC_ACK_S			0
1662#define AR5K_TXPC_CTS_M			0x00003f00	/* CTS tx power */
1663#define AR5K_TXPC_CTS_S			8
1664#define AR5K_TXPC_CHIRP_M		0x003f0000	/* CHIRP tx power */
1665#define AR5K_TXPC_CHIRP_S		16
1666#define AR5K_TXPC_DOPPLER		0x0f000000	/* Doppler chirp span (?) */
1667#define AR5K_TXPC_DOPPLER_S		24
1668
1669/*
1670 * Profile count registers
1671 */
1672#define AR5K_PROFCNT_TX			0x80ec	/* Tx count */
1673#define AR5K_PROFCNT_RX			0x80f0	/* Rx count */
1674#define AR5K_PROFCNT_RXCLR		0x80f4	/* Clear Rx count */
1675#define AR5K_PROFCNT_CYCLE		0x80f8	/* Cycle count (?) */
1676
1677/*
1678 * Quiet period control registers
1679 */
1680#define AR5K_QUIET_CTL1			0x80fc			/* Register Address */
1681#define AR5K_QUIET_CTL1_NEXT_QT_TSF	0x0000ffff	/* Next quiet period TSF (TU) */
1682#define AR5K_QUIET_CTL1_NEXT_QT_TSF_S	0
1683#define AR5K_QUIET_CTL1_QT_EN		0x00010000	/* Enable quiet period */
1684#define AR5K_QUIET_CTL1_ACK_CTS_EN	0x00020000	/* Send ACK/CTS during quiet period */
1685
1686#define AR5K_QUIET_CTL2			0x8100			/* Register Address */
1687#define AR5K_QUIET_CTL2_QT_PER		0x0000ffff	/* Mask for quiet period periodicity */
1688#define AR5K_QUIET_CTL2_QT_PER_S	0
1689#define AR5K_QUIET_CTL2_QT_DUR		0xffff0000	/* Mask for quiet period duration */
1690#define AR5K_QUIET_CTL2_QT_DUR_S	16
1691
1692/*
1693 * TSF parameter register
1694 */
1695#define AR5K_TSF_PARM			0x8104			/* Register Address */
1696#define AR5K_TSF_PARM_INC		0x000000ff	/* Mask for TSF increment */
1697#define AR5K_TSF_PARM_INC_S		0
1698
1699/*
1700 * QoS NOACK policy
1701 */
1702#define AR5K_QOS_NOACK			0x8108			/* Register Address */
1703#define AR5K_QOS_NOACK_2BIT_VALUES	0x0000000f	/* ??? */
1704#define AR5K_QOS_NOACK_2BIT_VALUES_S	0
1705#define AR5K_QOS_NOACK_BIT_OFFSET	0x00000070	/* ??? */
1706#define AR5K_QOS_NOACK_BIT_OFFSET_S	4
1707#define AR5K_QOS_NOACK_BYTE_OFFSET	0x00000180	/* ??? */
1708#define AR5K_QOS_NOACK_BYTE_OFFSET_S	7
1709
1710/*
1711 * PHY error filter register
1712 */
1713#define AR5K_PHY_ERR_FIL		0x810c
1714#define AR5K_PHY_ERR_FIL_RADAR		0x00000020	/* Radar signal */
1715#define AR5K_PHY_ERR_FIL_OFDM		0x00020000	/* OFDM false detect (ANI) */
1716#define AR5K_PHY_ERR_FIL_CCK		0x02000000	/* CCK false detect (ANI) */
1717
1718/*
1719 * XR latency register
1720 */
1721#define AR5K_XRLAT_TX		0x8110
1722
1723/*
1724 * ACK SIFS register
1725 */
1726#define AR5K_ACKSIFS		0x8114			/* Register Address */
1727#define AR5K_ACKSIFS_INC	0x00000000	/* ACK SIFS Increment (field) */
1728
1729/*
1730 * MIC QoS control register (?)
1731 */
1732#define	AR5K_MIC_QOS_CTL		0x8118			/* Register Address */
1733#define	AR5K_MIC_QOS_CTL_OFF(_n)	(1 << (_n * 2))
1734#define	AR5K_MIC_QOS_CTL_MQ_EN		0x00010000	/* Enable MIC QoS */
1735
1736/*
1737 * MIC QoS select register (?)
1738 */
1739#define	AR5K_MIC_QOS_SEL		0x811c
1740#define	AR5K_MIC_QOS_SEL_OFF(_n)	(1 << (_n * 4))
1741
1742/*
1743 * Misc mode control register (?)
1744 */
1745#define	AR5K_MISC_MODE			0x8120			/* Register Address */
1746#define	AR5K_MISC_MODE_FBSSID_MATCH	0x00000001	/* Force BSSID match */
1747#define	AR5K_MISC_MODE_ACKSIFS_MEM	0x00000002	/* ACK SIFS memory (?) */
1748#define	AR5K_MISC_MODE_COMBINED_MIC	0x00000004	/* use rx/tx MIC key */
1749/* more bits */
1750
1751/*
1752 * OFDM Filter counter
1753 */
1754#define	AR5K_OFDM_FIL_CNT		0x8124
1755
1756/*
1757 * CCK Filter counter
1758 */
1759#define	AR5K_CCK_FIL_CNT		0x8128
1760
1761/*
1762 * PHY Error Counters (?)
1763 */
1764#define	AR5K_PHYERR_CNT1		0x812c
1765#define	AR5K_PHYERR_CNT1_MASK		0x8130
1766
1767#define	AR5K_PHYERR_CNT2		0x8134
1768#define	AR5K_PHYERR_CNT2_MASK		0x8138
1769
1770/*
1771 * TSF Threshold register (?)
1772 */
1773#define	AR5K_TSF_THRES			0x813c
1774
1775/*
1776 * TODO: Wake On Wireless registers
1777 * Range: 0x8147 - 0x818c
1778 */
1779
1780/*
1781 * Rate -> ACK SIFS mapping table (32 entries)
1782 */
1783#define	AR5K_RATE_ACKSIFS_BASE		0x8680			/* Register Address */
1784#define	AR5K_RATE_ACKSIFS(_n)		(AR5K_RATE_ACKSIFS_BSE + ((_n) << 2))
1785#define	AR5K_RATE_ACKSIFS_NORMAL	0x00000001	/* Normal SIFS (field) */
1786#define	AR5K_RATE_ACKSIFS_TURBO		0x00000400	/* Turbo SIFS (field) */
1787
1788/*
1789 * Rate -> duration mapping table (32 entries)
1790 */
1791#define AR5K_RATE_DUR_BASE		0x8700
1792#define AR5K_RATE_DUR(_n)		(AR5K_RATE_DUR_BASE + ((_n) << 2))
1793
1794/*
1795 * Rate -> db mapping table
1796 * (8 entries, each one has 4 8bit fields)
1797 */
1798#define AR5K_RATE2DB_BASE		0x87c0
1799#define AR5K_RATE2DB(_n)		(AR5K_RATE2DB_BASE + ((_n) << 2))
1800
1801/*
1802 * db -> Rate mapping table
1803 * (8 entries, each one has 4 8bit fields)
1804 */
1805#define AR5K_DB2RATE_BASE		0x87e0
1806#define AR5K_DB2RATE(_n)		(AR5K_DB2RATE_BASE + ((_n) << 2))
1807
1808/*===5212 end===*/
1809
1810/*
1811 * Key table (WEP) register
1812 */
1813#define AR5K_KEYTABLE_0_5210		0x9000
1814#define AR5K_KEYTABLE_0_5211		0x8800
1815#define AR5K_KEYTABLE_5210(_n)		(AR5K_KEYTABLE_0_5210 + ((_n) << 5))
1816#define AR5K_KEYTABLE_5211(_n)		(AR5K_KEYTABLE_0_5211 + ((_n) << 5))
1817#define	AR5K_KEYTABLE(_n)		(ah->ah_version == AR5K_AR5210 ? \
1818					AR5K_KEYTABLE_5210(_n) : AR5K_KEYTABLE_5211(_n))
1819#define AR5K_KEYTABLE_OFF(_n, x)	(AR5K_KEYTABLE(_n) + (x << 2))
1820#define AR5K_KEYTABLE_TYPE(_n)		AR5K_KEYTABLE_OFF(_n, 5)
1821#define AR5K_KEYTABLE_TYPE_40		0x00000000
1822#define AR5K_KEYTABLE_TYPE_104		0x00000001
1823#define AR5K_KEYTABLE_TYPE_128		0x00000003
1824#define AR5K_KEYTABLE_TYPE_TKIP		0x00000004	/* [5212+] */
1825#define AR5K_KEYTABLE_TYPE_AES		0x00000005	/* [5211+] */
1826#define AR5K_KEYTABLE_TYPE_CCM		0x00000006	/* [5212+] */
1827#define AR5K_KEYTABLE_TYPE_NULL		0x00000007	/* [5211+] */
1828#define AR5K_KEYTABLE_ANTENNA		0x00000008	/* [5212+] */
1829#define AR5K_KEYTABLE_MAC0(_n)		AR5K_KEYTABLE_OFF(_n, 6)
1830#define AR5K_KEYTABLE_MAC1(_n)		AR5K_KEYTABLE_OFF(_n, 7)
1831#define AR5K_KEYTABLE_VALID		0x00008000
1832
1833/* If key type is TKIP and MIC is enabled
1834 * MIC key goes in offset entry + 64 */
1835#define	AR5K_KEYTABLE_MIC_OFFSET	64
1836
1837/* WEP 40-bit	= 40-bit  entered key + 24 bit IV = 64-bit
1838 * WEP 104-bit	= 104-bit entered key + 24-bit IV = 128-bit
1839 * WEP 128-bit	= 128-bit entered key + 24 bit IV = 152-bit
1840 *
1841 * Some vendors have introduced bigger WEP keys to address
1842 * security vulnerabilities in WEP. This includes:
1843 *
1844 * WEP 232-bit = 232-bit entered key + 24 bit IV = 256-bit
1845 *
1846 * We can expand this if we find ar5k Atheros cards with a larger
1847 * key table size.
1848 */
1849#define AR5K_KEYTABLE_SIZE_5210		64
1850#define AR5K_KEYTABLE_SIZE_5211		128
1851#define	AR5K_KEYTABLE_SIZE		(ah->ah_version == AR5K_AR5210 ? \
1852					AR5K_KEYTABLE_SIZE_5210 : AR5K_KEYTABLE_SIZE_5211)
1853
1854
1855/*===PHY REGISTERS===*/
1856
1857/*
1858 * PHY registers start
1859 */
1860#define	AR5K_PHY_BASE			0x9800
1861#define	AR5K_PHY(_n)			(AR5K_PHY_BASE + ((_n) << 2))
1862
1863/*
1864 * TST_2 (Misc config parameters)
1865 */
1866#define	AR5K_PHY_TST2			0x9800			/* Register Address */
1867#define AR5K_PHY_TST2_TRIG_SEL		0x00000007	/* Trigger select (?)*/
1868#define AR5K_PHY_TST2_TRIG		0x00000010	/* Trigger (?) */
1869#define AR5K_PHY_TST2_CBUS_MODE		0x00000060	/* Cardbus mode (?) */
1870#define AR5K_PHY_TST2_CLK32		0x00000400	/* CLK_OUT is CLK32 (32Khz external) */
1871#define AR5K_PHY_TST2_CHANCOR_DUMP_EN	0x00000800	/* Enable Chancor dump (?) */
1872#define AR5K_PHY_TST2_EVEN_CHANCOR_DUMP	0x00001000	/* Even Chancor dump (?) */
1873#define AR5K_PHY_TST2_RFSILENT_EN	0x00002000	/* Enable RFSILENT */
1874#define AR5K_PHY_TST2_ALT_RFDATA	0x00004000	/* Alternate RFDATA (5-2GHz switch ?) */
1875#define AR5K_PHY_TST2_MINI_OBS_EN	0x00008000	/* Enable mini OBS (?) */
1876#define AR5K_PHY_TST2_RX2_IS_RX5_INV	0x00010000	/* 2GHz rx path is the 5GHz path inverted (?) */
1877#define AR5K_PHY_TST2_SLOW_CLK160	0x00020000	/* Slow CLK160 (?) */
1878#define AR5K_PHY_TST2_AGC_OBS_SEL_3	0x00040000	/* AGC OBS Select 3 (?) */
1879#define AR5K_PHY_TST2_BBB_OBS_SEL	0x00080000	/* BB OBS Select (field ?) */
1880#define AR5K_PHY_TST2_ADC_OBS_SEL	0x00800000	/* ADC OBS Select (field ?) */
1881#define AR5K_PHY_TST2_RX_CLR_SEL	0x08000000	/* RX Clear Select (?) */
1882#define AR5K_PHY_TST2_FORCE_AGC_CLR	0x10000000	/* Force AGC clear (?) */
1883#define AR5K_PHY_SHIFT_2GHZ		0x00004007	/* Used to access 2GHz radios */
1884#define AR5K_PHY_SHIFT_5GHZ		0x00000007	/* Used to access 5GHz radios (default) */
1885
1886/*
1887 * PHY frame control register [5110] /turbo mode register [5111+]
1888 *
1889 * There is another frame control register for [5111+]
1890 * at address 0x9944 (see below) but the 2 first flags
1891 * are common here between 5110 frame control register
1892 * and [5111+] turbo mode register, so this also works as
1893 * a "turbo mode register" for 5110. We treat this one as
1894 * a frame control register for 5110 below.
1895 */
1896#define	AR5K_PHY_TURBO			0x9804			/* Register Address */
1897#define	AR5K_PHY_TURBO_MODE		0x00000001	/* Enable turbo mode */
1898#define	AR5K_PHY_TURBO_SHORT		0x00000002	/* Set short symbols to turbo mode */
1899#define	AR5K_PHY_TURBO_MIMO		0x00000004	/* Set turbo for mimo mimo */
1900
1901/*
1902 * PHY agility command register
1903 * (aka TST_1)
1904 */
1905#define	AR5K_PHY_AGC			0x9808			/* Register Address */
1906#define	AR5K_PHY_TST1			0x9808
1907#define	AR5K_PHY_AGC_DISABLE		0x08000000	/* Disable AGC to A2 (?)*/
1908#define	AR5K_PHY_TST1_TXHOLD		0x00003800	/* Set tx hold (?) */
1909#define	AR5K_PHY_TST1_TXSRC_SRC		0x00000002	/* Used with bit 7 (?) */
1910#define	AR5K_PHY_TST1_TXSRC_SRC_S	1
1911#define	AR5K_PHY_TST1_TXSRC_ALT		0x00000080	/* Set input to tsdac (?) */
1912#define	AR5K_PHY_TST1_TXSRC_ALT_S	7
1913
1914
1915/*
1916 * PHY timing register 3 [5112+]
1917 */
1918#define	AR5K_PHY_TIMING_3		0x9814
1919#define	AR5K_PHY_TIMING_3_DSC_MAN	0xfffe0000
1920#define	AR5K_PHY_TIMING_3_DSC_MAN_S	17
1921#define	AR5K_PHY_TIMING_3_DSC_EXP	0x0001e000
1922#define	AR5K_PHY_TIMING_3_DSC_EXP_S	13
1923
1924/*
1925 * PHY chip revision register
1926 */
1927#define	AR5K_PHY_CHIP_ID		0x9818
1928
1929/*
1930 * PHY activation register
1931 */
1932#define	AR5K_PHY_ACT			0x981c			/* Register Address */
1933#define	AR5K_PHY_ACT_ENABLE		0x00000001	/* Activate PHY */
1934#define	AR5K_PHY_ACT_DISABLE		0x00000002	/* Deactivate PHY */
1935
1936/*
1937 * PHY RF control registers
1938 */
1939#define AR5K_PHY_RF_CTL2		0x9824			/* Register Address */
1940#define	AR5K_PHY_RF_CTL2_TXF2TXD_START	0x0000000f	/* TX frame to TX data start */
1941#define	AR5K_PHY_RF_CTL2_TXF2TXD_START_S	0
1942
1943#define AR5K_PHY_RF_CTL3		0x9828			/* Register Address */
1944#define AR5K_PHY_RF_CTL3_TXE2XLNA_ON	0x0000ff00	/* TX end to XLNA on */
1945#define	AR5K_PHY_RF_CTL3_TXE2XLNA_ON_S	8
1946
1947#define	AR5K_PHY_ADC_CTL			0x982c
1948#define	AR5K_PHY_ADC_CTL_INBUFGAIN_OFF		0x00000003
1949#define	AR5K_PHY_ADC_CTL_INBUFGAIN_OFF_S	0
1950#define	AR5K_PHY_ADC_CTL_PWD_DAC_OFF		0x00002000
1951#define	AR5K_PHY_ADC_CTL_PWD_BAND_GAP_OFF	0x00004000
1952#define	AR5K_PHY_ADC_CTL_PWD_ADC_OFF		0x00008000
1953#define	AR5K_PHY_ADC_CTL_INBUFGAIN_ON		0x00030000
1954#define	AR5K_PHY_ADC_CTL_INBUFGAIN_ON_S		16
1955
1956#define AR5K_PHY_RF_CTL4		0x9834			/* Register Address */
1957#define AR5K_PHY_RF_CTL4_TXF2XPA_A_ON	0x00000001	/* TX frame to XPA A on (field) */
1958#define AR5K_PHY_RF_CTL4_TXF2XPA_B_ON	0x00000100	/* TX frame to XPA B on (field) */
1959#define	AR5K_PHY_RF_CTL4_TXE2XPA_A_OFF	0x00010000	/* TX end to XPA A off (field) */
1960#define AR5K_PHY_RF_CTL4_TXE2XPA_B_OFF	0x01000000	/* TX end to XPA B off (field) */
1961
1962/*
1963 * Pre-Amplifier control register
1964 * (XPA -> external pre-amplifier)
1965 */
1966#define	AR5K_PHY_PA_CTL			0x9838			/* Register Address */
1967#define	AR5K_PHY_PA_CTL_XPA_A_HI	0x00000001	/* XPA A high (?) */
1968#define	AR5K_PHY_PA_CTL_XPA_B_HI	0x00000002	/* XPA B high (?) */
1969#define	AR5K_PHY_PA_CTL_XPA_A_EN	0x00000004	/* Enable XPA A */
1970#define	AR5K_PHY_PA_CTL_XPA_B_EN	0x00000008	/* Enable XPA B */
1971
1972/*
1973 * PHY settling register
1974 */
1975#define AR5K_PHY_SETTLING		0x9844			/* Register Address */
1976#define	AR5K_PHY_SETTLING_AGC		0x0000007f	/* AGC settling time */
1977#define	AR5K_PHY_SETTLING_AGC_S		0
1978#define	AR5K_PHY_SETTLING_SWITCH	0x00003f80	/* Switch settlig time */
1979#define	AR5K_PHY_SETTLING_SWITCH_S	7
1980
1981/*
1982 * PHY Gain registers
1983 */
1984#define AR5K_PHY_GAIN			0x9848			/* Register Address */
1985#define	AR5K_PHY_GAIN_TXRX_ATTEN	0x0003f000	/* TX-RX Attenuation */
1986#define	AR5K_PHY_GAIN_TXRX_ATTEN_S	12
1987#define	AR5K_PHY_GAIN_TXRX_RF_MAX	0x007c0000
1988#define	AR5K_PHY_GAIN_TXRX_RF_MAX_S	18
1989
1990#define	AR5K_PHY_GAIN_OFFSET		0x984c			/* Register Address */
1991#define	AR5K_PHY_GAIN_OFFSET_RXTX_FLAG	0x00020000	/* RX-TX flag (?) */
1992
1993/*
1994 * Desired ADC/PGA size register
1995 * (for more infos read ANI patent)
1996 */
1997#define AR5K_PHY_DESIRED_SIZE		0x9850			/* Register Address */
1998#define	AR5K_PHY_DESIRED_SIZE_ADC	0x000000ff	/* ADC desired size */
1999#define	AR5K_PHY_DESIRED_SIZE_ADC_S	0
2000#define	AR5K_PHY_DESIRED_SIZE_PGA	0x0000ff00	/* PGA desired size */
2001#define	AR5K_PHY_DESIRED_SIZE_PGA_S	8
2002#define	AR5K_PHY_DESIRED_SIZE_TOT	0x0ff00000	/* Total desired size */
2003#define	AR5K_PHY_DESIRED_SIZE_TOT_S	20
2004
2005/*
2006 * PHY signal register
2007 * (for more infos read ANI patent)
2008 */
2009#define	AR5K_PHY_SIG			0x9858			/* Register Address */
2010#define	AR5K_PHY_SIG_FIRSTEP		0x0003f000	/* FIRSTEP */
2011#define	AR5K_PHY_SIG_FIRSTEP_S		12
2012#define	AR5K_PHY_SIG_FIRPWR		0x03fc0000	/* FIPWR */
2013#define	AR5K_PHY_SIG_FIRPWR_S		18
2014
2015/*
2016 * PHY coarse agility control register
2017 * (for more infos read ANI patent)
2018 */
2019#define	AR5K_PHY_AGCCOARSE		0x985c			/* Register Address */
2020#define	AR5K_PHY_AGCCOARSE_LO		0x00007f80	/* AGC Coarse low */
2021#define	AR5K_PHY_AGCCOARSE_LO_S		7
2022#define	AR5K_PHY_AGCCOARSE_HI		0x003f8000	/* AGC Coarse high */
2023#define	AR5K_PHY_AGCCOARSE_HI_S		15
2024
2025/*
2026 * PHY agility control register
2027 */
2028#define	AR5K_PHY_AGCCTL			0x9860			/* Register address */
2029#define	AR5K_PHY_AGCCTL_CAL		0x00000001	/* Enable PHY calibration */
2030#define	AR5K_PHY_AGCCTL_NF		0x00000002	/* Enable Noise Floor calibration */
2031#define	AR5K_PHY_AGCCTL_NF_EN		0x00008000	/* Enable nf calibration to happen (?) */
2032#define	AR5K_PHY_AGCCTL_NF_NOUPDATE	0x00020000	/* Don't update nf automaticaly */
2033
2034/*
2035 * PHY noise floor status register
2036 */
2037#define AR5K_PHY_NF			0x9864			/* Register address */
2038#define AR5K_PHY_NF_M			0x000001ff	/* Noise floor mask */
2039#define AR5K_PHY_NF_ACTIVE		0x00000100	/* Noise floor calibration still active */
2040#define AR5K_PHY_NF_RVAL(_n)		(((_n) >> 19) & AR5K_PHY_NF_M)
2041#define AR5K_PHY_NF_AVAL(_n)		(-((_n) ^ AR5K_PHY_NF_M) + 1)
2042#define AR5K_PHY_NF_SVAL(_n)		(((_n) & AR5K_PHY_NF_M) | (1 << 9))
2043#define	AR5K_PHY_NF_THRESH62		0x0007f000	/* Thresh62 -check ANI patent- (field) */
2044#define	AR5K_PHY_NF_THRESH62_S		12
2045#define	AR5K_PHY_NF_MINCCA_PWR		0x0ff80000	/* ??? */
2046#define	AR5K_PHY_NF_MINCCA_PWR_S	19
2047
2048/*
2049 * PHY ADC saturation register [5110]
2050 */
2051#define	AR5K_PHY_ADCSAT			0x9868
2052#define	AR5K_PHY_ADCSAT_ICNT		0x0001f800
2053#define	AR5K_PHY_ADCSAT_ICNT_S		11
2054#define	AR5K_PHY_ADCSAT_THR		0x000007e0
2055#define	AR5K_PHY_ADCSAT_THR_S		5
2056
2057/*
2058 * PHY Weak ofdm signal detection threshold registers (ANI) [5212+]
2059 */
2060
2061/* High thresholds */
2062#define AR5K_PHY_WEAK_OFDM_HIGH_THR		0x9868
2063#define AR5K_PHY_WEAK_OFDM_HIGH_THR_M2_COUNT	0x0000001f
2064#define AR5K_PHY_WEAK_OFDM_HIGH_THR_M2_COUNT_S	0
2065#define AR5K_PHY_WEAK_OFDM_HIGH_THR_M1		0x00fe0000
2066#define AR5K_PHY_WEAK_OFDM_HIGH_THR_M1_S	17
2067#define AR5K_PHY_WEAK_OFDM_HIGH_THR_M2		0x7f000000
2068#define AR5K_PHY_WEAK_OFDM_HIGH_THR_M2_S	24
2069
2070/* Low thresholds */
2071#define AR5K_PHY_WEAK_OFDM_LOW_THR 		0x986c
2072#define AR5K_PHY_WEAK_OFDM_LOW_THR_SELFCOR_EN	0x00000001
2073#define AR5K_PHY_WEAK_OFDM_LOW_THR_M2_COUNT	0x00003f00
2074#define AR5K_PHY_WEAK_OFDM_LOW_THR_M2_COUNT_S	8
2075#define AR5K_PHY_WEAK_OFDM_LOW_THR_M1		0x001fc000
2076#define AR5K_PHY_WEAK_OFDM_LOW_THR_M1_S		14
2077#define AR5K_PHY_WEAK_OFDM_LOW_THR_M2		0x0fe00000
2078#define AR5K_PHY_WEAK_OFDM_LOW_THR_M2_S		21
2079
2080
2081/*
2082 * PHY sleep registers [5112+]
2083 */
2084#define AR5K_PHY_SCR			0x9870
2085
2086#define AR5K_PHY_SLMT			0x9874
2087#define AR5K_PHY_SLMT_32MHZ		0x0000007f
2088
2089#define AR5K_PHY_SCAL			0x9878
2090#define AR5K_PHY_SCAL_32MHZ		0x0000000e
2091#define	AR5K_PHY_SCAL_32MHZ_2417	0x0000000a
2092#define	AR5K_PHY_SCAL_32MHZ_HB63	0x00000032
2093
2094/*
2095 * PHY PLL (Phase Locked Loop) control register
2096 */
2097#define	AR5K_PHY_PLL			0x987c
2098#define	AR5K_PHY_PLL_20MHZ		0x00000013	/* For half rate (?) */
2099/* 40MHz -> 5GHz band */
2100#define	AR5K_PHY_PLL_40MHZ_5211		0x00000018
2101#define	AR5K_PHY_PLL_40MHZ_5212		0x000000aa
2102#define	AR5K_PHY_PLL_40MHZ_5413		0x00000004
2103#define	AR5K_PHY_PLL_40MHZ		(ah->ah_version == AR5K_AR5211 ? \
2104					AR5K_PHY_PLL_40MHZ_5211 : AR5K_PHY_PLL_40MHZ_5212)
2105/* 44MHz -> 2.4GHz band */
2106#define	AR5K_PHY_PLL_44MHZ_5211		0x00000019
2107#define	AR5K_PHY_PLL_44MHZ_5212		0x000000ab
2108#define	AR5K_PHY_PLL_44MHZ		(ah->ah_version == AR5K_AR5211 ? \
2109					AR5K_PHY_PLL_44MHZ_5211 : AR5K_PHY_PLL_44MHZ_5212)
2110
2111#define AR5K_PHY_PLL_RF5111		0x00000000
2112#define AR5K_PHY_PLL_RF5112		0x00000040
2113#define	AR5K_PHY_PLL_HALF_RATE		0x00000100
2114#define	AR5K_PHY_PLL_QUARTER_RATE	0x00000200
2115
2116/*
2117 * RF Buffer register
2118 *
2119 * It's obvious from the code that 0x989c is the buffer register but
2120 * for the other special registers that we write to after sending each
2121 * packet, i have no idea. So i'll name them BUFFER_CONTROL_X registers
2122 * for now. It's interesting that they are also used for some other operations.
2123 */
2124
2125#define AR5K_RF_BUFFER			0x989c
2126#define AR5K_RF_BUFFER_CONTROL_0	0x98c0	/* Channel on 5110 */
2127#define AR5K_RF_BUFFER_CONTROL_1	0x98c4	/* Bank 7 on 5112 */
2128#define AR5K_RF_BUFFER_CONTROL_2	0x98cc	/* Bank 7 on 5111 */
2129
2130#define AR5K_RF_BUFFER_CONTROL_3	0x98d0	/* Bank 2 on 5112 */
2131						/* Channel set on 5111 */
2132						/* Used to read radio revision*/
2133
2134#define AR5K_RF_BUFFER_CONTROL_4	0x98d4  /* RF Stage register on 5110 */
2135						/* Bank 0,1,2,6 on 5111 */
2136						/* Bank 1 on 5112 */
2137						/* Used during activation on 5111 */
2138
2139#define AR5K_RF_BUFFER_CONTROL_5	0x98d8	/* Bank 3 on 5111 */
2140						/* Used during activation on 5111 */
2141						/* Channel on 5112 */
2142						/* Bank 6 on 5112 */
2143
2144#define AR5K_RF_BUFFER_CONTROL_6	0x98dc	/* Bank 3 on 5112 */
2145
2146/*
2147 * PHY RF stage register [5210]
2148 */
2149#define AR5K_PHY_RFSTG			0x98d4
2150#define AR5K_PHY_RFSTG_DISABLE		0x00000021
2151
2152/*
2153 * BIN masks (?)
2154 */
2155#define	AR5K_PHY_BIN_MASK_1	0x9900
2156#define	AR5K_PHY_BIN_MASK_2	0x9904
2157#define	AR5K_PHY_BIN_MASK_3	0x9908
2158
2159#define	AR5K_PHY_BIN_MASK_CTL		0x990c
2160#define	AR5K_PHY_BIN_MASK_CTL_MASK_4	0x00003fff
2161#define	AR5K_PHY_BIN_MASK_CTL_MASK_4_S	0
2162#define	AR5K_PHY_BIN_MASK_CTL_RATE	0xff000000
2163#define	AR5K_PHY_BIN_MASK_CTL_RATE_S	24
2164
2165/*
2166 * PHY Antenna control register
2167 */
2168#define AR5K_PHY_ANT_CTL		0x9910			/* Register Address */
2169#define	AR5K_PHY_ANT_CTL_TXRX_EN	0x00000001	/* Enable TX/RX (?) */
2170#define	AR5K_PHY_ANT_CTL_SECTORED_ANT	0x00000004	/* Sectored Antenna */
2171#define	AR5K_PHY_ANT_CTL_HITUNE5	0x00000008	/* Hitune5 (?) */
2172#define	AR5K_PHY_ANT_CTL_SWTABLE_IDLE	0x000003f0	/* Switch table idle (?) */
2173#define	AR5K_PHY_ANT_CTL_SWTABLE_IDLE_S	4
2174
2175/*
2176 * PHY receiver delay register [5111+]
2177 */
2178#define	AR5K_PHY_RX_DELAY		0x9914			/* Register Address */
2179#define	AR5K_PHY_RX_DELAY_M		0x00003fff	/* Mask for RX activate to receive delay (/100ns) */
2180
2181/*
2182 * PHY max rx length register (?) [5111]
2183 */
2184#define	AR5K_PHY_MAX_RX_LEN		0x991c
2185
2186/*
2187 * PHY timing register 4
2188 * I(nphase)/Q(adrature) calibration register [5111+]
2189 */
2190#define	AR5K_PHY_IQ			0x9920			/* Register Address */
2191#define	AR5K_PHY_IQ_CORR_Q_Q_COFF	0x0000001f	/* Mask for q correction info */
2192#define	AR5K_PHY_IQ_CORR_Q_I_COFF	0x000007e0	/* Mask for i correction info */
2193#define	AR5K_PHY_IQ_CORR_Q_I_COFF_S	5
2194#define	AR5K_PHY_IQ_CORR_ENABLE		0x00000800	/* Enable i/q correction */
2195#define	AR5K_PHY_IQ_CAL_NUM_LOG_MAX	0x0000f000	/* Mask for max number of samples in log scale */
2196#define	AR5K_PHY_IQ_CAL_NUM_LOG_MAX_S	12
2197#define	AR5K_PHY_IQ_RUN			0x00010000	/* Run i/q calibration */
2198#define	AR5K_PHY_IQ_USE_PT_DF		0x00020000	/* Use pilot track df (?) */
2199#define	AR5K_PHY_IQ_EARLY_TRIG_THR	0x00200000	/* Early trigger threshold (?) (field) */
2200#define	AR5K_PHY_IQ_PILOT_MASK_EN	0x10000000	/* Enable pilot mask (?) */
2201#define	AR5K_PHY_IQ_CHAN_MASK_EN	0x20000000	/* Enable channel mask (?) */
2202#define	AR5K_PHY_IQ_SPUR_FILT_EN	0x40000000	/* Enable spur filter */
2203#define	AR5K_PHY_IQ_SPUR_RSSI_EN	0x80000000	/* Enable spur rssi */
2204
2205/*
2206 * PHY timing register 5
2207 * OFDM Self-correlator Cyclic RSSI threshold params
2208 * (Check out bb_cycpwr_thr1 on ANI patent)
2209 */
2210#define	AR5K_PHY_OFDM_SELFCORR			0x9924			/* Register Address */
2211#define	AR5K_PHY_OFDM_SELFCORR_CYPWR_THR1_EN	0x00000001	/* Enable cyclic RSSI thr 1 */
2212#define	AR5K_PHY_OFDM_SELFCORR_CYPWR_THR1	0x000000fe	/* Mask for Cyclic RSSI threshold 1 */
2213#define	AR5K_PHY_OFDM_SELFCORR_CYPWR_THR1_S	1
2214#define	AR5K_PHY_OFDM_SELFCORR_CYPWR_THR3	0x00000100	/* Cyclic RSSI threshold 3 (field) (?) */
2215#define	AR5K_PHY_OFDM_SELFCORR_RSSI_1ATHR_EN	0x00008000	/* Enable 1A RSSI threshold (?) */
2216#define	AR5K_PHY_OFDM_SELFCORR_RSSI_1ATHR	0x00010000	/* 1A RSSI threshold (field) (?) */
2217#define	AR5K_PHY_OFDM_SELFCORR_LSCTHR_HIRSSI	0x00800000	/* Long sc threshold hi rssi (?) */
2218
2219/*
2220 * PHY-only warm reset register
2221 */
2222#define	AR5K_PHY_WARM_RESET		0x9928
2223
2224/*
2225 * PHY-only control register
2226 */
2227#define AR5K_PHY_CTL			0x992c			/* Register Address */
2228#define	AR5K_PHY_CTL_RX_DRAIN_RATE	0x00000001	/* RX drain rate (?) */
2229#define	AR5K_PHY_CTL_LATE_TX_SIG_SYM	0x00000002	/* Late tx signal symbol (?) */
2230#define	AR5K_PHY_CTL_GEN_SCRAMBLER	0x00000004	/* Generate scrambler */
2231#define	AR5K_PHY_CTL_TX_ANT_SEL		0x00000008	/* TX antenna select */
2232#define	AR5K_PHY_CTL_TX_ANT_STATIC	0x00000010	/* Static TX antenna */
2233#define	AR5K_PHY_CTL_RX_ANT_SEL		0x00000020	/* RX antenna select */
2234#define	AR5K_PHY_CTL_RX_ANT_STATIC	0x00000040	/* Static RX antenna */
2235#define	AR5K_PHY_CTL_LOW_FREQ_SLE_EN	0x00000080	/* Enable low freq sleep */
2236
2237/*
2238 * PHY PAPD probe register [5111+]
2239 */
2240#define	AR5K_PHY_PAPD_PROBE		0x9930
2241#define	AR5K_PHY_PAPD_PROBE_SH_HI_PAR	0x00000001
2242#define	AR5K_PHY_PAPD_PROBE_PCDAC_BIAS	0x00000002
2243#define	AR5K_PHY_PAPD_PROBE_COMP_GAIN	0x00000040
2244#define	AR5K_PHY_PAPD_PROBE_TXPOWER	0x00007e00
2245#define	AR5K_PHY_PAPD_PROBE_TXPOWER_S	9
2246#define	AR5K_PHY_PAPD_PROBE_TX_NEXT	0x00008000
2247#define	AR5K_PHY_PAPD_PROBE_PREDIST_EN	0x00010000
2248#define	AR5K_PHY_PAPD_PROBE_TYPE	0x01800000	/* [5112+] */
2249#define	AR5K_PHY_PAPD_PROBE_TYPE_S	23
2250#define	AR5K_PHY_PAPD_PROBE_TYPE_OFDM	0
2251#define	AR5K_PHY_PAPD_PROBE_TYPE_XR	1
2252#define	AR5K_PHY_PAPD_PROBE_TYPE_CCK	2
2253#define	AR5K_PHY_PAPD_PROBE_GAINF	0xfe000000
2254#define	AR5K_PHY_PAPD_PROBE_GAINF_S	25
2255#define	AR5K_PHY_PAPD_PROBE_INI_5111	0x00004883	/* [5212+] */
2256#define	AR5K_PHY_PAPD_PROBE_INI_5112	0x00004882	/* [5212+] */
2257
2258/*
2259 * PHY TX rate power registers [5112+]
2260 */
2261#define	AR5K_PHY_TXPOWER_RATE1			0x9934
2262#define	AR5K_PHY_TXPOWER_RATE2			0x9938
2263#define	AR5K_PHY_TXPOWER_RATE_MAX		0x993c
2264#define	AR5K_PHY_TXPOWER_RATE_MAX_TPC_ENABLE	0x00000040
2265#define	AR5K_PHY_TXPOWER_RATE3			0xa234
2266#define	AR5K_PHY_TXPOWER_RATE4			0xa238
2267
2268/*
2269 * PHY frame control register [5111+]
2270 */
2271#define	AR5K_PHY_FRAME_CTL_5210		0x9804
2272#define	AR5K_PHY_FRAME_CTL_5211		0x9944
2273#define	AR5K_PHY_FRAME_CTL		(ah->ah_version == AR5K_AR5210 ? \
2274					AR5K_PHY_FRAME_CTL_5210 : AR5K_PHY_FRAME_CTL_5211)
2275/*---[5111+]---*/
2276#define	AR5K_PHY_FRAME_CTL_TX_CLIP	0x00000038	/* Mask for tx clip (?) */
2277#define	AR5K_PHY_FRAME_CTL_TX_CLIP_S	3
2278#define	AR5K_PHY_FRAME_CTL_PREP_CHINFO	0x00010000	/* Prepend chan info */
2279#define	AR5K_PHY_FRAME_CTL_EMU		0x80000000
2280#define	AR5K_PHY_FRAME_CTL_EMU_S	31
2281/*---[5110/5111]---*/
2282#define	AR5K_PHY_FRAME_CTL_TIMING_ERR	0x01000000	/* PHY timing error */
2283#define	AR5K_PHY_FRAME_CTL_PARITY_ERR	0x02000000	/* Parity error */
2284#define	AR5K_PHY_FRAME_CTL_ILLRATE_ERR	0x04000000	/* Illegal rate */
2285#define	AR5K_PHY_FRAME_CTL_ILLLEN_ERR	0x08000000	/* Illegal length */
2286#define	AR5K_PHY_FRAME_CTL_SERVICE_ERR	0x20000000
2287#define	AR5K_PHY_FRAME_CTL_TXURN_ERR	0x40000000	/* TX underrun */
2288#define AR5K_PHY_FRAME_CTL_INI		AR5K_PHY_FRAME_CTL_SERVICE_ERR | \
2289			AR5K_PHY_FRAME_CTL_TXURN_ERR | \
2290			AR5K_PHY_FRAME_CTL_ILLLEN_ERR | \
2291			AR5K_PHY_FRAME_CTL_ILLRATE_ERR | \
2292			AR5K_PHY_FRAME_CTL_PARITY_ERR | \
2293			AR5K_PHY_FRAME_CTL_TIMING_ERR
2294
2295/*
2296 * PHY Tx Power adjustment register [5212A+]
2297 */
2298#define	AR5K_PHY_TX_PWR_ADJ			0x994c
2299#define	AR5K_PHY_TX_PWR_ADJ_CCK_GAIN_DELTA	0x00000fc0
2300#define	AR5K_PHY_TX_PWR_ADJ_CCK_GAIN_DELTA_S	6
2301#define	AR5K_PHY_TX_PWR_ADJ_CCK_PCDAC_INDEX	0x00fc0000
2302#define	AR5K_PHY_TX_PWR_ADJ_CCK_PCDAC_INDEX_S	18
2303
2304/*
2305 * PHY radar detection register [5111+]
2306 */
2307#define	AR5K_PHY_RADAR			0x9954
2308#define	AR5K_PHY_RADAR_ENABLE		0x00000001
2309#define	AR5K_PHY_RADAR_DISABLE		0x00000000
2310#define AR5K_PHY_RADAR_INBANDTHR    	0x0000003e	/* Inband threshold
2311							5-bits, units unknown {0..31}
2312							(? MHz ?) */
2313#define AR5K_PHY_RADAR_INBANDTHR_S	1
2314
2315#define AR5K_PHY_RADAR_PRSSI_THR    	0x00000fc0	/* Pulse RSSI/SNR threshold
2316							6-bits, dBm range {0..63}
2317							in dBm units. */
2318#define AR5K_PHY_RADAR_PRSSI_THR_S	6
2319
2320#define AR5K_PHY_RADAR_PHEIGHT_THR   	0x0003f000	/* Pulse height threshold
2321							6-bits, dBm range {0..63}
2322							in dBm units. */
2323#define AR5K_PHY_RADAR_PHEIGHT_THR_S	12
2324
2325#define AR5K_PHY_RADAR_RSSI_THR    	0x00fc0000	/* Radar RSSI/SNR threshold.
2326							6-bits, dBm range {0..63}
2327							in dBm units. */
2328#define AR5K_PHY_RADAR_RSSI_THR_S	18
2329
2330#define AR5K_PHY_RADAR_FIRPWR_THR	0x7f000000	/* Finite Impulse Response
2331							filter power out threshold.
2332							7-bits, standard power range
2333							{0..127} in 1/2 dBm units. */
2334#define AR5K_PHY_RADAR_FIRPWR_THRS	24
2335
2336/*
2337 * PHY antenna switch table registers
2338 */
2339#define AR5K_PHY_ANT_SWITCH_TABLE_0	0x9960
2340#define AR5K_PHY_ANT_SWITCH_TABLE_1	0x9964
2341
2342/*
2343 * PHY Noise floor threshold
2344 */
2345#define AR5K_PHY_NFTHRES		0x9968
2346
2347/*
2348 * Sigma Delta register (?) [5213]
2349 */
2350#define AR5K_PHY_SIGMA_DELTA		0x996C
2351#define AR5K_PHY_SIGMA_DELTA_ADC_SEL	0x00000003
2352#define AR5K_PHY_SIGMA_DELTA_ADC_SEL_S	0
2353#define AR5K_PHY_SIGMA_DELTA_FILT2	0x000000f8
2354#define AR5K_PHY_SIGMA_DELTA_FILT2_S	3
2355#define AR5K_PHY_SIGMA_DELTA_FILT1	0x00001f00
2356#define AR5K_PHY_SIGMA_DELTA_FILT1_S	8
2357#define AR5K_PHY_SIGMA_DELTA_ADC_CLIP	0x01ffe000
2358#define AR5K_PHY_SIGMA_DELTA_ADC_CLIP_S	13
2359
2360/*
2361 * RF restart register [5112+] (?)
2362 */
2363#define AR5K_PHY_RESTART		0x9970		/* restart */
2364#define AR5K_PHY_RESTART_DIV_GC		0x001c0000	/* Fast diversity gc_limit (?) */
2365#define AR5K_PHY_RESTART_DIV_GC_S	18
2366
2367/*
2368 * RF Bus access request register (for synth-oly channel switching)
2369 */
2370#define AR5K_PHY_RFBUS_REQ		0x997C
2371#define AR5K_PHY_RFBUS_REQ_REQUEST	0x00000001
2372
2373/*
2374 * Spur mitigation masks (?)
2375 */
2376#define AR5K_PHY_TIMING_7		0x9980
2377#define AR5K_PHY_TIMING_8		0x9984
2378#define AR5K_PHY_TIMING_8_PILOT_MASK_2		0x000fffff
2379#define AR5K_PHY_TIMING_8_PILOT_MASK_2_S	0
2380
2381#define AR5K_PHY_BIN_MASK2_1		0x9988
2382#define AR5K_PHY_BIN_MASK2_2		0x998c
2383#define AR5K_PHY_BIN_MASK2_3		0x9990
2384
2385#define AR5K_PHY_BIN_MASK2_4		0x9994
2386#define AR5K_PHY_BIN_MASK2_4_MASK_4	0x00003fff
2387#define AR5K_PHY_BIN_MASK2_4_MASK_4_S	0
2388
2389#define AR5K_PHY_TIMING_9			0x9998
2390#define AR5K_PHY_TIMING_10			0x999c
2391#define AR5K_PHY_TIMING_10_PILOT_MASK_2		0x000fffff
2392#define AR5K_PHY_TIMING_10_PILOT_MASK_2_S	0
2393
2394/*
2395 * Spur mitigation control
2396 */
2397#define AR5K_PHY_TIMING_11			0x99a0		/* Register address */
2398#define AR5K_PHY_TIMING_11_SPUR_DELTA_PHASE	0x000fffff	/* Spur delta phase */
2399#define AR5K_PHY_TIMING_11_SPUR_DELTA_PHASE_S	0
2400#define AR5K_PHY_TIMING_11_SPUR_FREQ_SD		0x3ff00000	/* Freq sigma delta */
2401#define AR5K_PHY_TIMING_11_SPUR_FREQ_SD_S	20
2402#define AR5K_PHY_TIMING_11_USE_SPUR_IN_AGC	0x40000000	/* Spur filter in AGC detector */
2403#define AR5K_PHY_TIMING_11_USE_SPUR_IN_SELFCOR	0x80000000	/* Spur filter in OFDM self correlator */
2404
2405/*
2406 * Gain tables
2407 */
2408#define	AR5K_BB_GAIN_BASE		0x9b00	/* BaseBand Amplifier Gain table base address */
2409#define AR5K_BB_GAIN(_n)		(AR5K_BB_GAIN_BASE + ((_n) << 2))
2410#define	AR5K_RF_GAIN_BASE		0x9a00	/* RF Amplrifier Gain table base address */
2411#define AR5K_RF_GAIN(_n)		(AR5K_RF_GAIN_BASE + ((_n) << 2))
2412
2413/*
2414 * PHY timing IQ calibration result register [5111+]
2415 */
2416#define	AR5K_PHY_IQRES_CAL_PWR_I	0x9c10	/* I (Inphase) power value */
2417#define	AR5K_PHY_IQRES_CAL_PWR_Q	0x9c14	/* Q (Quadrature) power value */
2418#define	AR5K_PHY_IQRES_CAL_CORR		0x9c18	/* I/Q Correlation */
2419
2420/*
2421 * PHY current RSSI register [5111+]
2422 */
2423#define	AR5K_PHY_CURRENT_RSSI	0x9c1c
2424
2425/*
2426 * PHY RF Bus grant register
2427 */
2428#define	AR5K_PHY_RFBUS_GRANT	0x9c20
2429#define	AR5K_PHY_RFBUS_GRANT_OK	0x00000001
2430
2431/*
2432 * PHY ADC test register
2433 */
2434#define	AR5K_PHY_ADC_TEST	0x9c24
2435#define	AR5K_PHY_ADC_TEST_I	0x00000001
2436#define	AR5K_PHY_ADC_TEST_Q	0x00000200
2437
2438/*
2439 * PHY DAC test register
2440 */
2441#define	AR5K_PHY_DAC_TEST	0x9c28
2442#define	AR5K_PHY_DAC_TEST_I	0x00000001
2443#define	AR5K_PHY_DAC_TEST_Q	0x00000200
2444
2445/*
2446 * PHY PTAT register (?)
2447 */
2448#define	AR5K_PHY_PTAT		0x9c2c
2449
2450/*
2451 * PHY Illegal TX rate register [5112+]
2452 */
2453#define	AR5K_PHY_BAD_TX_RATE	0x9c30
2454
2455/*
2456 * PHY SPUR Power register [5112+]
2457 */
2458#define	AR5K_PHY_SPUR_PWR	0x9c34			/* Register Address */
2459#define	AR5K_PHY_SPUR_PWR_I	0x00000001	/* SPUR Power estimate for I (field) */
2460#define	AR5K_PHY_SPUR_PWR_Q	0x00000100	/* SPUR Power estimate for Q (field) */
2461#define	AR5K_PHY_SPUR_PWR_FILT	0x00010000	/* Power with SPUR removed (field) */
2462
2463/*
2464 * PHY Channel status register [5112+] (?)
2465 */
2466#define	AR5K_PHY_CHAN_STATUS		0x9c38
2467#define	AR5K_PHY_CHAN_STATUS_BT_ACT	0x00000001
2468#define	AR5K_PHY_CHAN_STATUS_RX_CLR_RAW	0x00000002
2469#define	AR5K_PHY_CHAN_STATUS_RX_CLR_MAC	0x00000004
2470#define	AR5K_PHY_CHAN_STATUS_RX_CLR_PAP	0x00000008
2471
2472/*
2473 * Heavy clip enable register
2474 */
2475#define	AR5K_PHY_HEAVY_CLIP_ENABLE	0x99e0
2476
2477/*
2478 * PHY clock sleep registers [5112+]
2479 */
2480#define AR5K_PHY_SCLOCK			0x99f0
2481#define AR5K_PHY_SCLOCK_32MHZ		0x0000000c
2482#define AR5K_PHY_SDELAY			0x99f4
2483#define AR5K_PHY_SDELAY_32MHZ		0x000000ff
2484#define AR5K_PHY_SPENDING		0x99f8
2485
2486
2487/*
2488 * PHY PAPD I (power?) table (?)
2489 * (92! entries)
2490 */
2491#define	AR5K_PHY_PAPD_I_BASE	0xa000
2492#define	AR5K_PHY_PAPD_I(_n)	(AR5K_PHY_PAPD_I_BASE + ((_n) << 2))
2493
2494/*
2495 * PHY PCDAC TX power table
2496 */
2497#define	AR5K_PHY_PCDAC_TXPOWER_BASE	0xa180
2498#define	AR5K_PHY_PCDAC_TXPOWER(_n)	(AR5K_PHY_PCDAC_TXPOWER_BASE + ((_n) << 2))
2499
2500/*
2501 * PHY mode register [5111+]
2502 */
2503#define	AR5K_PHY_MODE			0x0a200			/* Register Address */
2504#define	AR5K_PHY_MODE_MOD		0x00000001	/* PHY Modulation bit */
2505#define AR5K_PHY_MODE_MOD_OFDM		0
2506#define AR5K_PHY_MODE_MOD_CCK		1
2507#define AR5K_PHY_MODE_FREQ		0x00000002	/* Freq mode bit */
2508#define	AR5K_PHY_MODE_FREQ_5GHZ		0
2509#define	AR5K_PHY_MODE_FREQ_2GHZ		2
2510#define AR5K_PHY_MODE_MOD_DYN		0x00000004	/* Enable Dynamic OFDM/CCK mode [5112+] */
2511#define AR5K_PHY_MODE_RAD		0x00000008	/* [5212+] */
2512#define AR5K_PHY_MODE_RAD_RF5111	0
2513#define AR5K_PHY_MODE_RAD_RF5112	8
2514#define AR5K_PHY_MODE_XR		0x00000010	/* Enable XR mode [5112+] */
2515#define	AR5K_PHY_MODE_HALF_RATE		0x00000020	/* Enable Half rate (test) */
2516#define	AR5K_PHY_MODE_QUARTER_RATE	0x00000040	/* Enable Quarter rat (test) */
2517
2518/*
2519 * PHY CCK transmit control register [5111+ (?)]
2520 */
2521#define AR5K_PHY_CCKTXCTL		0xa204
2522#define AR5K_PHY_CCKTXCTL_WORLD		0x00000000
2523#define AR5K_PHY_CCKTXCTL_JAPAN		0x00000010
2524#define	AR5K_PHY_CCKTXCTL_SCRAMBLER_DIS	0x00000001
2525#define	AR5K_PHY_CCKTXCTK_DAC_SCALE	0x00000004
2526
2527/*
2528 * PHY CCK Cross-correlator Barker RSSI threshold register [5212+]
2529 */
2530#define AR5K_PHY_CCK_CROSSCORR			0xa208
2531#define AR5K_PHY_CCK_CROSSCORR_WEAK_SIG_THR	0x0000000f
2532#define AR5K_PHY_CCK_CROSSCORR_WEAK_SIG_THR_S	0
2533
2534/* Same address is used for antenna diversity activation */
2535#define	AR5K_PHY_FAST_ANT_DIV		0xa208
2536#define	AR5K_PHY_FAST_ANT_DIV_EN	0x00002000
2537
2538/*
2539 * PHY 2GHz gain register [5111+]
2540 */
2541#define	AR5K_PHY_GAIN_2GHZ			0xa20c
2542#define	AR5K_PHY_GAIN_2GHZ_MARGIN_TXRX		0x00fc0000
2543#define	AR5K_PHY_GAIN_2GHZ_MARGIN_TXRX_S	18
2544#define	AR5K_PHY_GAIN_2GHZ_INI_5111		0x6480416c
2545
2546#define	AR5K_PHY_CCK_RX_CTL_4			0xa21c
2547#define	AR5K_PHY_CCK_RX_CTL_4_FREQ_EST_SHORT	0x01f80000
2548#define	AR5K_PHY_CCK_RX_CTL_4_FREQ_EST_SHORT_S	19
2549
2550#define	AR5K_PHY_DAG_CCK_CTL			0xa228
2551#define	AR5K_PHY_DAG_CCK_CTL_EN_RSSI_THR	0x00000200
2552#define	AR5K_PHY_DAG_CCK_CTL_RSSI_THR		0x0001fc00
2553#define	AR5K_PHY_DAG_CCK_CTL_RSSI_THR_S		10
2554
2555#define	AR5K_PHY_FAST_ADC	0xa24c
2556
2557#define	AR5K_PHY_BLUETOOTH	0xa254
2558
2559/*
2560 * Transmit Power Control register
2561 * [2413+]
2562 */
2563#define	AR5K_PHY_TPC_RG1		0xa258
2564#define	AR5K_PHY_TPC_RG1_NUM_PD_GAIN	0x0000c000
2565#define	AR5K_PHY_TPC_RG1_NUM_PD_GAIN_S	14
2566#define AR5K_PHY_TPC_RG1_PDGAIN_1	0x00030000
2567#define AR5K_PHY_TPC_RG1_PDGAIN_1_S	16
2568#define AR5K_PHY_TPC_RG1_PDGAIN_2	0x000c0000
2569#define AR5K_PHY_TPC_RG1_PDGAIN_2_S	18
2570#define AR5K_PHY_TPC_RG1_PDGAIN_3	0x00300000
2571#define AR5K_PHY_TPC_RG1_PDGAIN_3_S	20
2572
2573#define	AR5K_PHY_TPC_RG5			0xa26C
2574#define	AR5K_PHY_TPC_RG5_PD_GAIN_OVERLAP	0x0000000F
2575#define	AR5K_PHY_TPC_RG5_PD_GAIN_OVERLAP_S	0
2576#define	AR5K_PHY_TPC_RG5_PD_GAIN_BOUNDARY_1	0x000003F0
2577#define	AR5K_PHY_TPC_RG5_PD_GAIN_BOUNDARY_1_S	4
2578#define	AR5K_PHY_TPC_RG5_PD_GAIN_BOUNDARY_2	0x0000FC00
2579#define	AR5K_PHY_TPC_RG5_PD_GAIN_BOUNDARY_2_S	10
2580#define	AR5K_PHY_TPC_RG5_PD_GAIN_BOUNDARY_3	0x003F0000
2581#define	AR5K_PHY_TPC_RG5_PD_GAIN_BOUNDARY_3_S	16
2582#define	AR5K_PHY_TPC_RG5_PD_GAIN_BOUNDARY_4	0x0FC00000
2583#define	AR5K_PHY_TPC_RG5_PD_GAIN_BOUNDARY_4_S	22
2584
2585/*
2586 * PHY PDADC Tx power table
2587 */
2588#define AR5K_PHY_PDADC_TXPOWER_BASE	0xa280
2589#define	AR5K_PHY_PDADC_TXPOWER(_n)	(AR5K_PHY_PDADC_TXPOWER_BASE + ((_n) << 2))
2590